Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft
File:                     7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft (raw, json)
Hash identifier:          /6sCdp5G2EJLDedCiNVYnCEbzYp1W7l+IwTbU2Ad/3k=
Subject key identifier:   4B:16:2E:4A:CB:B3:93:BE:42:BF:41:8D:4F:61:97:C5:84:1C:A0:C4
Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
Certificate issuer:       /CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Certificate serial:       019D27A88B3C95F1F0445BF3C22DB3A03EFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft
Manifest number:          189B
Signing time:             Thu 26 Mar 2026 01:00:50 +0000
Manifest this update:     Thu 26 Mar 2026 01:00:50 +0000
Manifest next update:     Fri 27 Mar 2026 01:00:50 +0000
Files and hashes:         1: 1KzAL4WrD5dhhGZJOCxuUIPFwOk.roa (hash: aO9dX9fJ0rrae7yQKAQfFledrNyIupTZnT+cq07JYUA=)
                          2: 2fnNi2RG50nUnV2NcaaKxkNfurs.roa (hash: YjCnMRPFuN3k5TRvL6rGrwmbFWVhQVPPpGvWD61uUkg=)
                          3: 7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl (hash: ycgkKZr7XkGCKvALdPbs2tpzwKY309SNoHbanfxHPK8=)
                          4: 88YNLmciNd0j13-H2-rZxVQMdGQ.roa (hash: PZ0hEGC0oEs598gQ8xeAY2EzI4szP3Vs9gNvciW2BKM=)
                          5: AnqEtz5hZkYAy4yO8qlLikZWRJw.roa (hash: j2OhR3ENDnTZP9Lf8x78QsTXcfAZEG3FS513keiFcpI=)
                          6: HQdRd7-uxpWaApI_yUxbm_9_dzg.roa (hash: i48eXcWynnm44Ui4IjxVTSgQ+VI6di3z/zykGcaGJUk=)
                          7: OCuIuLoTyx6UI4cRdqXTZdZqrRE.roa (hash: NtYeBn7vObBSrZet17ESmCNvYRE2bEdCvdV04YI1os0=)
                          8: RBopAdVF60vgkqykUfTCW-bkIG8.roa (hash: QhamcW1yECyAqJIZtVxwyJIdNVMOgAFF2TzQ8FAjUVo=)
                          9: RahkU4tOoQngjkSl9mhdDwc4pFU.roa (hash: JWZJdzvFdiQ85WtuycaeUgc1cy9Tzhri/PcDTONVm3Q=)
                          10: Rsj6R_5dXiHi1eUSKzpDKZzkTiE.roa (hash: nMPA233TUV9gqlw8aP+/RPCmhirOQucfaoSyNAu6fXc=)
                          11: YUsCKqNl16pDs_8KVE5VLmDFj5M.roa (hash: enLSqBELUYJ70Ss/6MuXxuUTa0RNR44fL5GLxYESEBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:8b:3c:95:f1:f0:44:5b:f3:c2:2d:b3:a0:3e:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c
        Validity
            Not Before: Mar 26 01:00:50 2026 GMT
            Not After : Mar 27 01:00:50 2026 GMT
        Subject: CN=4b162e4acbb393be42bf418d4f6197c5841ca0c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:be:ac:4e:b9:bc:18:2d:2c:0e:52:3e:8c:db:
                    54:36:64:59:87:59:5e:dc:0d:03:96:f8:fa:c1:44:
                    a7:56:82:52:47:b2:02:a4:aa:85:40:e8:1f:cc:a9:
                    5e:3f:b4:5c:8b:d6:1c:59:c3:3a:96:32:f0:e7:6f:
                    bf:76:a9:ba:34:6d:63:54:47:09:41:55:51:72:70:
                    4b:ba:a6:d5:01:b1:57:6c:82:e2:dd:77:73:57:9b:
                    73:4d:9a:0c:75:8b:4e:40:f4:38:b7:94:23:70:69:
                    88:0d:86:db:6e:85:d6:54:94:60:c7:0b:1d:a5:ea:
                    fb:25:61:19:c3:06:c9:8d:69:72:4a:58:79:5e:c2:
                    bc:fd:31:c8:c1:66:86:4a:f8:92:d7:29:b8:72:c7:
                    12:37:35:8e:88:8c:b2:76:43:d5:3d:37:61:33:39:
                    bf:27:62:5a:e8:26:c0:59:1d:ad:ca:b4:0d:d6:ce:
                    64:8b:ec:0d:c8:36:b5:3e:ef:4f:4d:8f:bc:0c:01:
                    8e:b2:72:a1:f9:43:f7:a5:21:cf:b9:69:31:fb:9a:
                    5e:44:32:67:5b:bd:86:d4:f3:07:3b:81:a1:bd:9d:
                    2a:e0:67:91:39:06:3f:c4:2d:cd:39:5b:1f:ff:23:
                    0e:fd:84:d2:8c:dc:21:8a:3e:31:a2:f5:8b:15:0b:
                    76:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:16:2E:4A:CB:B3:93:BE:42:BF:41:8D:4F:61:97:C5:84:1C:A0:C4
            X509v3 Authority Key Identifier:
                keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:d2:08:5d:f3:23:03:52:79:a4:be:1c:12:f5:a0:8c:58:a8:
         3e:1d:59:7a:4f:5c:c9:cd:7f:41:65:76:6a:42:20:b0:8a:b7:
         1c:83:c8:a6:75:bd:69:18:03:af:18:2a:d8:7b:36:ca:21:ac:
         7f:3e:38:7a:45:3a:60:84:07:16:8e:b7:a5:94:13:45:c5:43:
         11:ec:e5:33:25:92:04:09:09:bd:f0:f6:81:91:65:bb:42:e5:
         88:8c:ed:4b:91:c5:ee:59:64:9f:17:21:ff:ab:c5:0e:3c:e3:
         42:5d:03:1a:e1:28:e2:36:c3:27:3a:cc:12:f5:e6:e4:7e:07:
         3e:48:67:0b:a7:2f:fa:c7:2d:75:b7:70:b0:bc:67:38:dd:75:
         07:08:f8:ad:23:99:61:d2:c5:e8:54:79:eb:94:e6:7c:b9:de:
         01:59:ec:00:59:cf:6c:73:53:3a:8a:d9:e3:0c:dd:f5:b7:46:
         63:32:08:20:bf:0f:08:57:ba:5a:58:d3:e5:c3:da:8f:24:fd:
         bc:40:35:c4:eb:5e:b2:57:06:15:39:f6:48:0c:6b:01:43:f0:
         d4:81:5b:8d:bc:1e:bc:93:47:4d:d8:4a:51:ca:14:33:d3:ad:
         24:36:65:ac:66:32:49:f3:e7:16:9d:e0:5d:6f:9f:20:33:a7:
         a6:38:40:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:39 2026 by rpki-client