Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft
File:                     AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft (raw, json)
Hash identifier:          nrs0g6CPPROcSJwJlv1Rj2TuofK0GIwAZUBq+Gsrixs=
Subject key identifier:   6C:22:A8:2D:B7:22:C3:12:CE:33:C2:85:24:0B:21:24:82:1C:41:53
Authority key identifier: 01:6D:AE:23:D2:E2:EB:64:C9:68:53:48:0E:07:78:CB:D3:FD:56:24
Certificate issuer:       /CN=016dae23d2e2eb64c96853480e0778cbd3fd5624
Certificate serial:       019D25BA4FE07876EE2BB701D0800E4B3B4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AW2uI9Li62TJaFNIDgd4y9P9ViQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft
Manifest number:          1819
Signing time:             Wed 25 Mar 2026 16:01:00 +0000
Manifest this update:     Wed 25 Mar 2026 16:01:00 +0000
Manifest next update:     Thu 26 Mar 2026 16:01:00 +0000
Files and hashes:         1: AW2uI9Li62TJaFNIDgd4y9P9ViQ.crl (hash: E1rgQfyUnebz1rICBTFp0zHHZYdezQuZITTqKSSkK18=)
                          2: fBIbvQJADoTSsS7Jr2fItA3urdI.roa (hash: nJwJY4zTXkwANtW2/l5/P1l6Tsdntj7S0CCj9dxcAGE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AW2uI9Li62TJaFNIDgd4y9P9ViQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:ba:4f:e0:78:76:ee:2b:b7:01:d0:80:0e:4b:3b:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=016dae23d2e2eb64c96853480e0778cbd3fd5624
        Validity
            Not Before: Mar 25 16:01:00 2026 GMT
            Not After : Mar 26 16:01:00 2026 GMT
        Subject: CN=6c22a82db722c312ce33c285240b2124821c4153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:48:78:73:67:7c:af:b4:bb:81:b4:db:f8:9d:
                    bb:7f:db:0c:44:a4:38:5e:b3:c8:72:31:4a:b1:ce:
                    1b:c2:5f:32:32:ee:73:2f:cb:cd:24:10:32:ad:13:
                    c1:fe:ac:d8:97:37:c8:c1:7b:0d:1e:d1:87:0d:85:
                    98:2f:b7:72:47:e6:ac:9a:02:1a:29:77:f6:c2:d3:
                    fa:c4:c1:ef:0f:03:de:f6:58:2c:7e:c9:cf:25:64:
                    25:81:5c:1f:e4:e7:72:2f:9c:e8:e7:b9:92:5b:20:
                    63:ad:2b:e9:84:76:f0:b3:63:75:9e:da:f7:81:3c:
                    fc:5e:cb:a5:c8:4f:77:f5:31:8c:bf:81:bf:0f:88:
                    d1:cb:c8:46:d1:97:ec:50:2c:a0:7b:c3:2d:15:54:
                    80:8c:00:21:87:76:be:85:6a:43:88:de:92:75:31:
                    48:bb:b1:94:8c:09:40:86:ba:19:4e:5b:a5:a8:0a:
                    89:4e:af:50:24:98:0b:60:d2:53:90:4c:cc:7b:99:
                    bb:5f:0f:ac:57:c8:5f:f7:50:0c:ab:07:61:9b:8c:
                    80:bf:38:65:cb:5f:83:be:1c:48:9d:a9:f2:b1:a8:
                    c3:ec:51:c5:96:c6:2b:1b:45:c4:6d:8f:f7:6b:5d:
                    2d:65:db:5a:0e:da:6e:ea:54:be:4c:a3:72:19:55:
                    83:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:22:A8:2D:B7:22:C3:12:CE:33:C2:85:24:0B:21:24:82:1C:41:53
            X509v3 Authority Key Identifier:
                keyid:01:6D:AE:23:D2:E2:EB:64:C9:68:53:48:0E:07:78:CB:D3:FD:56:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AW2uI9Li62TJaFNIDgd4y9P9ViQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:f9:f5:a9:87:2f:cd:2d:79:99:44:63:e5:43:cf:1c:3f:66:
         f9:e0:7a:a2:7b:7c:3b:33:13:8d:77:6b:ca:45:4f:b3:46:df:
         22:fc:9f:cb:88:ce:01:f7:3e:99:67:d0:25:66:32:c9:c7:36:
         d1:ab:29:45:f7:c8:76:f5:fc:1a:da:bd:78:2e:fd:25:d7:79:
         3e:21:86:19:a0:89:63:8f:03:f1:87:00:50:ec:76:a2:19:3c:
         2f:f0:bd:af:f4:1c:9a:9b:3c:2e:41:9c:55:1d:3d:cf:27:fa:
         3b:63:3f:df:d0:b9:b9:7f:2a:e5:ab:8e:2e:4a:fa:75:e6:53:
         d4:8c:9f:0c:15:34:89:eb:47:1b:5e:2e:fc:78:91:92:90:7d:
         74:95:9b:4f:41:30:71:11:96:c0:55:b7:a3:e5:11:bb:95:e6:
         59:bb:17:78:63:76:64:13:cf:b2:36:69:a2:7a:31:d6:c0:9d:
         e1:84:0d:9f:05:b9:44:98:6b:0c:e2:8f:22:5d:4f:b1:49:68:
         38:8f:39:a3:ca:85:17:39:84:a4:d2:c7:8e:15:f7:5e:a8:00:
         1b:aa:0b:a3:14:f1:fe:3f:ed:ba:f1:1b:80:05:35:61:24:c3:
         58:25:8d:1e:ed:f8:c1:86:05:4d:20:1b:2a:99:f5:b3:a0:b8:
         9e:d2:63:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:01:32 2026 by rpki-client