Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.mft
File:                     j32Qq83eC8bwvKryHOw6TyrPrk8.mft (raw, json)
Hash identifier:          /R/etS8Paoi5/V4NPdlZFJHa/uPIYSG/Ew0f87z3gWY=
Subject key identifier:   60:55:F8:69:AE:44:D5:B5:77:A8:82:06:51:ED:62:06:A5:E7:3F:44
Authority key identifier: 8F:7D:90:AB:CD:DE:0B:C6:F0:BC:AA:F2:1C:EC:3A:4F:2A:CF:AE:4F
Certificate issuer:       /CN=8f7d90abcdde0bc6f0bcaaf21cec3a4f2acfae4f
Certificate serial:       019D2A3BF609D67AF426C51ED4A66141A614
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j32Qq83eC8bwvKryHOw6TyrPrk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.mft
Manifest number:          1890
Signing time:             Thu 26 Mar 2026 13:01:05 +0000
Manifest this update:     Thu 26 Mar 2026 13:01:05 +0000
Manifest next update:     Fri 27 Mar 2026 13:01:05 +0000
Files and hashes:         1: j32Qq83eC8bwvKryHOw6TyrPrk8.crl (hash: vcbxrOkbHz84NkK8N6vaOpsOtiweHiE3BCPE9aUwmFU=)
                          2: peluW4JrzCD3jf4uXKxy_As6DB8.roa (hash: bj53NpUvQtHTcBwjTcnfuLGQSAy7sVwqOatu/bfRtXo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j32Qq83eC8bwvKryHOw6TyrPrk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:3b:f6:09:d6:7a:f4:26:c5:1e:d4:a6:61:41:a6:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f7d90abcdde0bc6f0bcaaf21cec3a4f2acfae4f
        Validity
            Not Before: Mar 26 13:01:05 2026 GMT
            Not After : Mar 27 13:01:05 2026 GMT
        Subject: CN=6055f869ae44d5b577a8820651ed6206a5e73f44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ba:22:61:f5:9c:8c:3a:ac:f7:a9:2c:c5:80:
                    e0:d6:5c:12:66:83:ec:27:5b:68:53:24:ac:f7:35:
                    d1:45:ab:58:ca:78:ba:70:3c:4f:4c:ec:c9:bd:c1:
                    9a:48:ec:04:4c:68:24:5c:4b:d2:f3:d6:29:36:8a:
                    1e:dd:28:aa:ab:30:d2:0b:d7:57:0c:d6:c8:b3:50:
                    d1:6d:b0:cc:dc:fa:17:4b:90:cb:61:ad:eb:36:77:
                    62:b6:af:84:49:b8:70:8d:ba:e7:20:2f:67:f2:dd:
                    ee:20:99:19:36:e7:ff:05:a7:e4:f3:a4:93:82:67:
                    74:a3:8d:85:c3:7b:3e:59:f6:ad:45:b1:2f:ca:ed:
                    41:46:8c:23:2b:81:83:b3:0e:16:4b:f5:02:2e:00:
                    ec:39:52:35:4b:1f:87:1e:4f:1c:fb:e5:17:5f:94:
                    1f:46:69:d9:a1:48:9b:1f:47:b2:24:c2:af:c7:14:
                    e7:93:8b:59:a3:42:b8:53:68:3b:30:ae:13:0a:0a:
                    03:e3:0b:06:a9:d5:13:44:1c:cb:87:89:d2:3c:5c:
                    08:54:c9:b3:38:bf:85:62:62:fa:ea:75:6f:ea:76:
                    6e:eb:13:f1:3a:72:da:c3:56:07:4f:48:76:d3:53:
                    76:f1:f0:8d:63:b8:b1:10:25:87:1a:40:01:43:66:
                    db:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:55:F8:69:AE:44:D5:B5:77:A8:82:06:51:ED:62:06:A5:E7:3F:44
            X509v3 Authority Key Identifier:
                keyid:8F:7D:90:AB:CD:DE:0B:C6:F0:BC:AA:F2:1C:EC:3A:4F:2A:CF:AE:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j32Qq83eC8bwvKryHOw6TyrPrk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:02:74:18:51:be:dd:c1:4a:7a:d6:56:2a:b6:23:6f:92:f8:
         fd:5c:61:cc:73:19:16:9a:13:b7:0d:6b:cf:d7:0a:46:36:80:
         ac:55:eb:3a:cb:2a:d2:ce:86:a4:2a:eb:6c:da:49:d3:cc:32:
         e3:4b:be:0b:02:ba:52:2e:a9:89:b2:ab:96:39:3f:2d:c2:a7:
         ea:44:66:c4:0b:4d:56:f2:47:0e:40:d5:45:8a:8b:12:70:01:
         c9:74:c0:36:fa:08:d7:14:57:ed:50:1e:92:c5:d9:48:a3:9f:
         d0:74:47:c5:e4:89:8f:b3:73:77:69:92:e3:77:54:7b:3b:b2:
         a6:8d:aa:f7:d4:d0:4e:33:1c:cd:dd:12:ff:eb:93:e7:9c:ca:
         3a:a7:7e:1f:96:c9:74:66:d7:d5:47:d9:31:b9:7e:d4:7a:7d:
         de:18:12:95:ff:63:03:53:e6:36:15:95:6f:99:34:ef:e6:85:
         3e:ff:09:09:9b:0f:73:36:64:c7:f8:1e:ad:9a:df:73:9b:3b:
         c1:26:d0:05:8b:2d:67:d8:91:6b:d7:d7:b2:54:68:e4:c4:ac:
         dc:79:65:fd:84:49:53:43:29:72:d3:9c:34:d5:c2:b4:e8:9a:
         af:22:ec:71:59:07:f5:a8:ae:80:2e:4b:41:6e:85:71:48:b3:
         c0:43:19:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:52:12 2026 by rpki-client