Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e62c4f-5ee2-4fe0-9540-b103fa4743b9/1/5dasEgU_FIaz3nfxyHC1a538ORM.mft
File:                     5dasEgU_FIaz3nfxyHC1a538ORM.mft (raw, json)
Hash identifier:          /Q0MFfvJz5+UuhGijWG8fn5DOUNsbBU3gRBKp1I8kHY=
Subject key identifier:   D6:93:74:B0:73:38:CB:0A:27:20:77:DF:FE:D4:BA:4D:C1:4A:A8:B2
Authority key identifier: E5:D6:AC:12:05:3F:14:86:B3:DE:77:F1:C8:70:B5:6B:9D:FC:39:13
Certificate issuer:       /CN=e5d6ac12053f1486b3de77f1c870b56b9dfc3913
Certificate serial:       019D284E4471212833F1B11E7F8CFE2B06ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5dasEgU_FIaz3nfxyHC1a538ORM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/e62c4f-5ee2-4fe0-9540-b103fa4743b9/1/5dasEgU_FIaz3nfxyHC1a538ORM.mft
Manifest number:          1884
Signing time:             Thu 26 Mar 2026 04:01:51 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:51 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:51 +0000
Files and hashes:         1: 1EN7TRD-aLVl5lkSCjm_nVcC3UU.roa (hash: MtswjThVcbS9+sptcfq3+1p1Rfy1WmBysgNNW6G/HTs=)
                          2: 5dasEgU_FIaz3nfxyHC1a538ORM.crl (hash: sweHLQdY7X0FzKK+cqrUo7JcQsi06pAzgrkgtjD3Zdc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/e62c4f-5ee2-4fe0-9540-b103fa4743b9/1/5dasEgU_FIaz3nfxyHC1a538ORM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/e62c4f-5ee2-4fe0-9540-b103fa4743b9/1/5dasEgU_FIaz3nfxyHC1a538ORM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5dasEgU_FIaz3nfxyHC1a538ORM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 04:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4e:44:71:21:28:33:f1:b1:1e:7f:8c:fe:2b:06:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d6ac12053f1486b3de77f1c870b56b9dfc3913
        Validity
            Not Before: Mar 26 04:01:51 2026 GMT
            Not After : Mar 27 04:01:51 2026 GMT
        Subject: CN=d69374b07338cb0a272077dffed4ba4dc14aa8b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:13:7b:8a:50:b3:a1:9b:bd:26:c7:24:11:11:
                    ce:23:01:fd:0c:43:5c:62:42:c0:44:0f:b0:f3:10:
                    e4:55:ad:7f:de:fa:41:82:c5:1d:e5:1e:67:f5:08:
                    9c:64:65:cb:47:98:48:33:f9:56:85:8f:a2:84:c6:
                    ee:02:00:b9:8c:ef:af:e5:a2:5c:c4:a7:0d:6c:02:
                    da:9c:ba:68:22:63:8c:87:63:53:9b:41:58:74:9c:
                    17:dd:c8:e7:00:61:35:dc:c8:60:9e:31:f8:9c:64:
                    d8:4e:5a:1b:0d:fb:40:d3:28:d3:cc:ef:4a:8d:83:
                    d0:ec:f1:7b:10:db:12:7f:6f:50:77:ae:b8:2c:c4:
                    11:69:84:17:6e:b2:28:00:37:bf:06:57:61:f8:55:
                    19:a2:36:af:5d:97:44:66:ae:75:6b:3a:56:f7:55:
                    8d:ae:9a:37:ca:4b:d7:39:68:a0:00:71:f8:b6:37:
                    6f:7e:ba:72:2b:57:39:1f:41:5b:bd:c4:00:84:38:
                    6d:1e:fa:64:2e:c0:14:b2:69:85:c4:32:28:46:6f:
                    d6:71:fe:6f:61:be:d1:3e:c1:94:8a:f9:f4:1e:64:
                    aa:89:8b:d2:dc:5f:6d:82:5f:33:b7:2b:4a:a2:b5:
                    38:22:11:46:e4:29:af:f2:6f:39:e9:6f:96:a1:f0:
                    fa:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:93:74:B0:73:38:CB:0A:27:20:77:DF:FE:D4:BA:4D:C1:4A:A8:B2
            X509v3 Authority Key Identifier:
                keyid:E5:D6:AC:12:05:3F:14:86:B3:DE:77:F1:C8:70:B5:6B:9D:FC:39:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dasEgU_FIaz3nfxyHC1a538ORM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e62c4f-5ee2-4fe0-9540-b103fa4743b9/1/5dasEgU_FIaz3nfxyHC1a538ORM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e62c4f-5ee2-4fe0-9540-b103fa4743b9/1/5dasEgU_FIaz3nfxyHC1a538ORM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:04:81:80:a3:4e:de:2a:08:e3:40:ff:cd:3f:3e:6f:9f:0e:
         5d:af:52:df:7e:17:1c:76:e4:54:ff:1e:09:65:3b:81:4b:1a:
         13:f6:9b:d2:9a:f4:0b:ce:92:9b:a4:c3:43:f7:b3:c5:c9:17:
         fb:43:8c:ac:19:dd:d2:04:77:08:89:93:90:92:a1:a4:d5:7d:
         f6:44:17:54:bb:14:98:b4:c8:ec:49:8f:6f:01:32:cd:cb:9d:
         2a:80:3a:79:d0:e6:7b:ec:a4:fd:c2:b2:ed:b1:07:27:78:14:
         c3:59:6b:5f:a8:32:ea:50:9a:e7:6f:34:c6:e9:17:66:94:ae:
         6a:68:c5:27:3b:9d:cf:ee:cf:b4:e4:a2:c1:f0:9b:8c:ae:83:
         89:db:aa:ff:9f:8f:c7:36:88:4a:b8:c6:47:52:c4:53:b5:c4:
         b0:89:3a:44:7a:d7:2b:7e:ea:43:c7:88:28:19:d3:12:10:a7:
         f7:5b:7f:65:0a:3c:52:03:79:59:e8:8a:0b:00:42:1d:1c:a2:
         d9:e7:bb:4b:9d:ba:78:bc:a4:61:c1:5c:51:4a:26:12:58:a0:
         9a:d1:6d:81:b2:bb:89:90:ee:71:e5:51:58:a6:cb:f9:68:a8:
         9e:23:13:f7:51:fe:7d:46:a4:e4:2f:a2:76:de:82:0b:2a:30:
         08:f2:21:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:59:24 2026 by rpki-client