Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
File:                     C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft (raw, json)
Hash identifier:          /MLfRzBkyZ+xehDmdUt9F4JFx4QDw9zYoGgqcHoEEeM=
Subject key identifier:   44:4A:AF:7B:F2:EE:77:D4:6E:A2:C4:7A:75:F0:A2:0E:EF:26:7D:76
Authority key identifier: 0B:FA:73:48:D6:C1:D7:18:63:28:32:87:20:73:0F:68:4F:A2:0E:DC
Certificate issuer:       /CN=0bfa7348d6c1d7186328328720730f684fa20edc
Certificate serial:       019D2704CFECA46F60311794B1618F6A5C74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
Manifest number:          188E
Signing time:             Wed 25 Mar 2026 22:01:59 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:59 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:59 +0000
Files and hashes:         1: C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl (hash: MtryeCotOPuxP+nvlD+C86wZ4SxxAfniA1IBQOZ1hC8=)
                          2: c3J2WzKnBz8n6vexcL4R4WC_FbU.roa (hash: +v+CTa6TJGoOCG2ben4CXihFgljD0NuOUaaiNhNFVkc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:cf:ec:a4:6f:60:31:17:94:b1:61:8f:6a:5c:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bfa7348d6c1d7186328328720730f684fa20edc
        Validity
            Not Before: Mar 25 22:01:59 2026 GMT
            Not After : Mar 26 22:01:59 2026 GMT
        Subject: CN=444aaf7bf2ee77d46ea2c47a75f0a20eef267d76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6c:4e:5b:3a:2b:7a:51:56:e9:df:37:1b:b8:
                    9b:8a:e3:70:f2:03:76:a8:5b:f4:cf:c1:1c:6e:08:
                    88:63:d5:76:fc:02:4a:57:3f:43:e6:1c:be:f0:41:
                    01:dc:d7:75:a1:cb:17:41:51:63:fc:8c:a8:34:85:
                    02:cc:9b:6d:68:e1:02:95:3c:75:e3:28:59:d4:e5:
                    ed:ce:77:b9:e2:be:4e:60:05:ff:98:f5:34:79:8e:
                    21:a7:9e:d2:88:e3:72:2c:fb:b4:71:c2:56:77:3e:
                    b1:15:ef:c6:19:96:a1:0f:b8:b2:fc:5f:e5:1e:8b:
                    be:14:5b:e3:78:39:2f:28:a6:20:fa:f7:f5:53:ff:
                    50:97:1b:b1:11:11:dd:3c:ce:32:c1:de:48:26:2f:
                    47:e8:65:5f:f7:fc:5b:4e:83:4f:5f:ad:c5:5f:31:
                    8d:e0:ae:cf:5c:71:bd:71:c2:e2:74:d5:0a:67:d3:
                    28:f4:4b:7d:39:c4:96:b4:5c:2c:07:06:80:44:8b:
                    9d:8c:f1:8e:a1:8f:d2:37:c2:7b:3b:39:93:a3:d5:
                    80:18:20:74:f1:ee:d0:74:b5:ca:14:50:83:27:76:
                    b7:e9:4e:ff:6e:01:96:cb:4e:de:01:b3:90:9c:b9:
                    7b:8d:8b:da:62:89:16:51:43:c6:ac:72:1c:79:eb:
                    d0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:4A:AF:7B:F2:EE:77:D4:6E:A2:C4:7A:75:F0:A2:0E:EF:26:7D:76
            X509v3 Authority Key Identifier:
                keyid:0B:FA:73:48:D6:C1:D7:18:63:28:32:87:20:73:0F:68:4F:A2:0E:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:64:9e:c8:91:2b:91:fb:a4:f4:61:3c:71:3d:8c:d9:dd:c1:
         32:12:82:55:a1:86:45:87:31:08:be:35:82:ca:88:4d:b7:9f:
         97:a6:c8:a5:d9:7a:3a:3f:d1:78:22:1f:41:62:e3:43:0f:39:
         44:32:68:4b:4d:d7:e8:c4:b5:1c:78:7b:df:2a:1c:5e:a5:8c:
         9f:4e:cb:9e:63:08:b5:2f:f7:4d:9b:72:89:62:3b:45:78:ca:
         76:05:2c:c7:dd:c2:68:c3:b3:a3:a8:21:5a:72:c9:f0:51:dd:
         2b:98:e6:74:22:84:44:5b:4d:a0:4c:63:f6:8b:8e:7a:db:4c:
         a3:4e:42:ab:6b:d1:55:7f:29:8d:0d:e8:9f:b2:d4:93:b0:40:
         67:a1:f8:97:5d:8c:0f:07:e7:8e:95:68:dd:f4:94:b0:d4:ef:
         6b:8d:80:9e:c6:22:22:4f:27:13:01:f3:6b:de:d1:b7:ba:6d:
         ac:9a:22:90:d4:f5:38:31:53:38:ae:bb:12:8a:be:5d:00:07:
         19:3c:27:18:ba:f8:80:72:5e:e4:77:c4:92:0b:3a:4f:b7:99:
         28:38:58:56:09:b1:94:f8:bf:59:52:9c:0a:8e:64:1b:78:26:
         ed:43:bd:c7:dd:64:28:4c:22:f0:85:4a:c2:f3:0a:28:df:10:
         0b:f9:e4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:40 2026 by rpki-client