Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/46f501-7745-49da-b1d8-07309e796c78/1/V2tXrthT-J2ipbI98X-SF-76YbY.mft
File:                     V2tXrthT-J2ipbI98X-SF-76YbY.mft (raw, json)
Hash identifier:          ZU1zcD7jhFMqtoi2uMiJWECDJS4gQytxfIQjDJ0pmEk=
Subject key identifier:   49:D1:54:AA:87:B5:C0:67:06:00:5C:49:E9:0E:81:FE:E0:6E:AD:99
Authority key identifier: 57:6B:57:AE:D8:53:F8:9D:A2:A5:B2:3D:F1:7F:92:17:EE:FA:61:B6
Certificate issuer:       /CN=576b57aed853f89da2a5b23df17f9217eefa61b6
Certificate serial:       019D28BB09D712620E04A16762023F9D5976
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V2tXrthT-J2ipbI98X-SF-76YbY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/46f501-7745-49da-b1d8-07309e796c78/1/V2tXrthT-J2ipbI98X-SF-76YbY.mft
Manifest number:          1886
Signing time:             Thu 26 Mar 2026 06:00:39 +0000
Manifest this update:     Thu 26 Mar 2026 06:00:39 +0000
Manifest next update:     Fri 27 Mar 2026 06:00:39 +0000
Files and hashes:         1: L5IMZs754Co_x1FOI24kT4PtqBs.roa (hash: GSYk238NmjU6z5E8b0YRRQrT7uOenGCF93WcmI24gj8=)
                          2: V2tXrthT-J2ipbI98X-SF-76YbY.crl (hash: O80FdFvmxAQo4H+PGqnl2V9NvXMwWxlCPjTRQcLIkVo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/46f501-7745-49da-b1d8-07309e796c78/1/V2tXrthT-J2ipbI98X-SF-76YbY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/46f501-7745-49da-b1d8-07309e796c78/1/V2tXrthT-J2ipbI98X-SF-76YbY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V2tXrthT-J2ipbI98X-SF-76YbY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:09:d7:12:62:0e:04:a1:67:62:02:3f:9d:59:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576b57aed853f89da2a5b23df17f9217eefa61b6
        Validity
            Not Before: Mar 26 06:00:39 2026 GMT
            Not After : Mar 27 06:00:39 2026 GMT
        Subject: CN=49d154aa87b5c06706005c49e90e81fee06ead99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:39:06:83:12:a9:1c:8f:32:68:d3:ab:db:fe:
                    23:d1:90:b0:bb:40:a4:4f:c4:fc:60:3e:3e:e6:4f:
                    21:bd:e1:36:4a:15:75:33:76:a3:7c:a9:ee:46:01:
                    c3:2c:fd:e3:93:f9:02:98:e2:ef:cf:a8:2b:11:25:
                    38:91:08:e2:5d:25:09:15:4a:73:6c:fd:7a:8b:a2:
                    8e:bc:bb:d1:b3:e0:e1:5d:85:91:09:fa:c8:b0:3b:
                    05:da:68:e1:fe:a5:84:33:b7:13:dd:08:79:82:89:
                    8e:d4:29:62:09:17:b7:13:ed:51:b3:d8:66:a8:be:
                    d9:26:d4:bb:b0:22:83:fc:43:00:aa:41:7e:08:f3:
                    2a:0c:9f:d6:69:0b:2a:d1:b8:4c:48:76:73:b7:7e:
                    0d:1c:c1:9e:d0:a9:fd:36:4a:68:16:e2:cd:5f:cc:
                    18:25:dc:16:19:bb:c5:3d:98:50:6c:30:dc:c5:e2:
                    40:54:87:5a:cf:36:9d:5f:14:c3:16:28:2e:90:d5:
                    ca:34:6b:9e:93:55:54:74:53:5b:fe:48:b9:f2:4b:
                    82:a2:6b:95:d0:e1:30:61:20:2e:55:2a:ad:d9:21:
                    cb:fe:5b:b3:0c:82:bd:ec:c6:32:f2:87:f4:6f:c0:
                    6c:c9:6f:1d:08:bc:4b:64:d9:77:33:06:32:47:db:
                    59:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:D1:54:AA:87:B5:C0:67:06:00:5C:49:E9:0E:81:FE:E0:6E:AD:99
            X509v3 Authority Key Identifier:
                keyid:57:6B:57:AE:D8:53:F8:9D:A2:A5:B2:3D:F1:7F:92:17:EE:FA:61:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2tXrthT-J2ipbI98X-SF-76YbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/46f501-7745-49da-b1d8-07309e796c78/1/V2tXrthT-J2ipbI98X-SF-76YbY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/46f501-7745-49da-b1d8-07309e796c78/1/V2tXrthT-J2ipbI98X-SF-76YbY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:8d:cc:10:40:fe:1d:4e:61:b4:6a:aa:ae:1c:7a:a9:20:56:
         52:05:fc:8a:2d:5d:8e:d1:c1:39:6e:98:63:3d:72:d9:0a:3d:
         48:d0:60:2c:03:ba:9c:b4:aa:7a:6f:c7:58:60:40:20:29:98:
         44:f4:3c:b0:88:c1:54:59:ff:11:91:ca:5b:85:98:aa:19:30:
         bd:b7:d5:ea:47:fc:05:52:4b:18:b4:5c:77:e7:ef:91:01:07:
         b5:49:c7:f4:32:b3:6d:7b:17:9d:1d:09:60:d3:bd:31:dc:c5:
         7c:23:3c:79:ce:d6:7e:f8:73:48:25:bd:1a:d2:88:96:2b:d3:
         04:73:50:97:8e:98:5c:0e:1c:e1:15:ff:20:19:08:45:22:3d:
         ed:bc:dc:77:d3:36:e8:98:35:44:e1:ce:71:e5:31:2f:f1:19:
         f8:a8:b2:21:c2:b3:76:bc:c0:9a:60:68:18:d8:f7:5f:91:65:
         f2:21:77:16:69:a9:23:db:f8:88:b7:77:08:b9:27:1d:2c:b5:
         2b:8d:29:96:87:1f:f0:6e:f6:00:df:5e:28:fa:af:53:22:9e:
         16:3c:31:7c:2d:36:43:fd:d9:00:2a:8b:b3:a4:f2:2d:ce:d3:
         85:10:7c:f9:e7:c3:57:7f:0b:3a:c6:4f:e4:0a:74:f4:4e:bb:
         1e:02:da:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:35:39 2026 by rpki-client