Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.mft
File:                     Y8G5_-mGcr9i9If0fa_qMPW-8Jw.mft (raw, json)
Hash identifier:          3r9Twlmcfh4W5lsFm1jtjEMOHBHxQWDzxOl/sLGupGo=
Subject key identifier:   4B:BF:29:36:A3:94:2C:AC:70:A9:44:21:FC:D6:A3:02:27:C3:C2:85
Authority key identifier: 63:C1:B9:FF:E9:86:72:BF:62:F4:87:F4:7D:AF:EA:30:F5:BE:F0:9C
Certificate issuer:       /CN=63c1b9ffe98672bf62f487f47dafea30f5bef09c
Certificate serial:       019D270446DC9036F48432363B0DB29477F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.mft
Manifest number:          1818
Signing time:             Wed 25 Mar 2026 22:01:24 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:24 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:24 +0000
Files and hashes:         1: Y8G5_-mGcr9i9If0fa_qMPW-8Jw.crl (hash: oZ9biskxbHD2Lq9uAlqOqzLDEnT6JdEloUAR9S6LUvU=)
                          2: uUWVa1294AWFSpDUYVKBN-fvYMc.roa (hash: axEGfOzW4g5Z2ybzJ+kEQtiDgU2ikyT0bamMhlhBt2Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:46:dc:90:36:f4:84:32:36:3b:0d:b2:94:77:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63c1b9ffe98672bf62f487f47dafea30f5bef09c
        Validity
            Not Before: Mar 25 22:01:24 2026 GMT
            Not After : Mar 26 22:01:24 2026 GMT
        Subject: CN=4bbf2936a3942cac70a94421fcd6a30227c3c285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:87:d3:cf:17:b9:d5:a9:40:dd:f7:58:98:37:
                    97:41:d8:d8:db:33:8c:76:bd:f3:6b:bf:4b:23:97:
                    38:bf:68:20:e8:af:71:ae:aa:90:57:65:d8:cd:6c:
                    3f:22:80:75:b8:24:10:09:94:07:04:7c:c8:9d:dc:
                    0f:be:11:62:2a:6d:8c:05:9b:21:02:88:51:da:37:
                    5b:95:fc:0f:9b:40:5a:6a:94:f1:c1:09:a4:4c:61:
                    74:f5:71:59:f1:7e:57:01:04:18:c4:6b:00:da:21:
                    e2:57:b0:c6:0c:44:2c:de:e8:f0:d3:52:a6:20:82:
                    39:ad:0f:94:02:09:d0:0c:8c:75:f8:8e:96:af:31:
                    cc:39:db:5a:25:12:d9:65:a7:34:96:50:20:77:e6:
                    5a:97:f7:ac:a1:8f:21:c9:3b:4f:58:97:6c:e7:55:
                    31:fa:10:bf:2b:60:78:6d:30:bb:c4:4b:77:65:e1:
                    03:f5:6b:42:cc:74:57:d9:7a:49:5c:95:f1:67:f7:
                    3a:f8:f8:df:60:0c:ce:d7:c3:80:34:34:78:c2:2a:
                    3c:c6:8d:78:e7:42:88:49:c6:18:ae:d1:5a:80:35:
                    5b:60:59:84:c3:ec:63:91:af:e9:e2:50:99:59:06:
                    92:43:41:af:b7:51:0f:f9:a2:da:15:eb:89:16:54:
                    1f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:BF:29:36:A3:94:2C:AC:70:A9:44:21:FC:D6:A3:02:27:C3:C2:85
            X509v3 Authority Key Identifier:
                keyid:63:C1:B9:FF:E9:86:72:BF:62:F4:87:F4:7D:AF:EA:30:F5:BE:F0:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:dd:71:9d:1e:d8:74:06:ba:b3:6d:2c:8e:33:fc:2e:7f:ef:
         f5:2d:76:7f:84:9f:e5:d6:44:62:6e:b4:bb:f3:c2:46:ec:37:
         90:7c:30:a0:29:6d:e1:41:75:de:9f:b9:b0:f2:14:52:eb:8b:
         f7:bc:58:e3:e1:ed:3e:1f:92:9d:6f:25:9f:fc:b1:fd:cb:6a:
         e9:bb:17:c4:d7:26:73:6a:fc:c6:aa:59:43:ba:4c:05:38:75:
         9f:90:8f:1b:1e:f4:20:03:d1:e3:b0:67:06:a7:9f:5b:55:20:
         81:83:ee:97:27:d3:d5:ac:15:40:0a:91:14:bf:00:cd:df:72:
         b2:4d:7f:7e:32:fc:5c:fd:81:c0:a6:ed:0e:23:82:55:f0:de:
         f3:a4:b1:89:b8:62:1b:17:f5:6b:b0:7e:3b:7d:51:cc:d6:7c:
         94:54:74:0f:d6:f1:35:fc:8f:48:7f:a6:3e:2a:e0:ee:54:93:
         7b:17:00:a7:e5:01:c8:18:91:e7:c4:e1:ef:a3:08:ec:50:7f:
         76:fd:83:4e:0f:d8:dc:88:13:6c:71:ce:0d:e6:b4:d6:5c:0b:
         22:ec:e0:61:a8:db:64:2f:d0:f3:56:0f:d0:dd:3c:d7:2a:fc:
         3f:28:7b:0d:3c:28:23:c2:6e:7e:75:c9:18:c5:1e:0f:95:62:
         88:e5:b6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:41:53 2026 by rpki-client