Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft
File:                     F5WshDzYupAYj3MTZSu1YSmbKW8.mft (raw, json)
Hash identifier:          uQv5JQ/YAissjwvkiI7+4vErS15sbhaoLPIyOFqR2bM=
Subject key identifier:   E0:93:4C:1B:99:74:00:54:C1:34:87:F1:42:D1:FA:4E:7E:15:74:52
Authority key identifier: 17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F
Certificate issuer:       /CN=1795ac843cd8ba90188f7313652bb561299b296f
Certificate serial:       019D273B1203E3A8701A68F605C4FFE5FA9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft
Manifest number:          18B7
Signing time:             Wed 25 Mar 2026 23:01:15 +0000
Manifest this update:     Wed 25 Mar 2026 23:01:15 +0000
Manifest next update:     Thu 26 Mar 2026 23:01:15 +0000
Files and hashes:         1: 4cPUtGs5z3WzM8Tbf3sj19g9kLM.roa (hash: mztLsdxtv2MnNRJ0kNvEbAIy95WSyZD1lkeM0IDqVSc=)
                          2: F5WshDzYupAYj3MTZSu1YSmbKW8.crl (hash: GRLQ95s3Qgf0NCyuaQJTtMOVIOJMbqjxxnj0IIZ7UNQ=)
                          3: M32l6QcCzjNP1ZvVCiymNlZeu5M.roa (hash: 7yhUf6JrLXmGYFGl+/grMfR3bznSq0e/XMOFiemHb1Y=)
                          4: djYwV2YEd2ptt8Ib5gbwyt6_PJ0.roa (hash: EPuCK1qK8rFmB6GJAaNU9eGa1ttXRJS5gr+vN0RsIxc=)
                          5: qO1xGMDRTz1c6NG2XcRW45Jlxs0.roa (hash: lXx7crxtNnNAXWSdBnarR4QfhtaUFVtePQBiE/rqIY0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3b:12:03:e3:a8:70:1a:68:f6:05:c4:ff:e5:fa:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1795ac843cd8ba90188f7313652bb561299b296f
        Validity
            Not Before: Mar 25 23:01:15 2026 GMT
            Not After : Mar 26 23:01:15 2026 GMT
        Subject: CN=e0934c1b99740054c13487f142d1fa4e7e157452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:0b:72:18:00:fd:95:a3:91:42:6a:1d:d5:0f:
                    62:bf:6d:5c:3e:5b:33:1c:2d:63:aa:45:a9:49:4b:
                    db:b2:b3:c3:ab:a5:89:d0:a8:6d:3b:d3:5a:d5:c0:
                    a8:99:ab:cc:9b:96:3a:54:03:51:16:1a:57:40:7d:
                    3e:12:63:d9:35:40:de:3d:5e:8b:3a:3d:e1:df:e5:
                    0d:79:cf:fe:1b:c8:1d:3d:6c:c3:e7:c6:82:52:75:
                    08:17:0a:ff:42:ed:c3:87:20:dd:25:02:c5:d2:4b:
                    52:91:53:40:f2:90:2e:80:96:74:dc:61:48:95:99:
                    13:19:01:f7:33:ef:8c:05:22:c2:e3:56:85:bd:4d:
                    7b:61:1d:ae:9c:88:66:0b:82:b0:59:ac:dd:e6:a6:
                    ca:80:31:d6:13:9d:23:31:1f:11:23:0a:66:94:ab:
                    78:58:2b:70:ce:dc:c6:30:58:d4:a5:4e:dc:1e:88:
                    b5:a7:95:7f:27:c1:b9:47:76:3b:74:b5:f7:c6:4a:
                    a2:c8:ea:e2:c0:0e:09:2c:f2:88:30:ca:7e:9e:41:
                    5e:32:ae:bc:9a:82:38:d3:b2:f2:dc:ec:ba:ac:8f:
                    a0:80:2e:2b:f3:cc:d8:4c:e8:2c:b6:b7:89:1d:b0:
                    c6:ff:32:69:3a:ce:fd:d4:dc:c8:a1:d4:49:0b:94:
                    82:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:93:4C:1B:99:74:00:54:C1:34:87:F1:42:D1:FA:4E:7E:15:74:52
            X509v3 Authority Key Identifier:
                keyid:17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:b8:dc:91:89:dc:55:f8:a5:4b:11:b3:91:9f:c5:50:37:51:
         fe:b7:b0:10:e3:c4:d4:8a:13:6f:b1:fd:22:e8:28:95:b5:73:
         2e:fe:59:be:b9:a1:da:30:e5:e5:b8:32:59:6a:2f:3f:8c:9c:
         57:63:bd:6b:67:fd:c9:16:4a:6b:ea:47:77:d5:c7:25:82:9b:
         ae:c1:a1:d5:a5:1f:58:ac:92:3b:cb:ef:c9:3f:db:c3:00:63:
         42:9f:87:33:f0:da:0e:6f:16:f4:0a:a2:ff:37:d0:fe:64:20:
         8c:93:de:57:f5:3d:36:a7:b1:f4:2d:4d:2e:fd:df:e6:dd:6a:
         b1:c7:6c:78:ba:c4:f9:a9:fe:dc:7b:3f:4e:d9:0b:43:9a:9f:
         20:3a:30:0d:44:6b:0d:c4:e8:8d:4f:26:9b:c6:c5:ae:d1:eb:
         ca:22:77:85:e2:3a:df:99:87:9e:dd:d4:82:51:fc:2b:2d:a8:
         ec:fd:40:da:1d:e9:47:a7:28:8d:1e:5e:28:e4:3f:ab:e1:74:
         32:f4:63:d9:19:26:1c:af:c5:96:89:aa:ea:62:32:16:a1:bf:
         b9:63:4d:f8:62:86:f7:ee:a9:83:1e:8c:aa:93:30:54:60:79:
         e0:4b:5d:94:02:1a:74:e9:52:59:61:5b:b1:41:89:2b:3c:59:
         c3:5e:67:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:35 2026 by rpki-client