Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.mft
File:                     b13p-du9RhiFe1gQXGdDcgoRvG4.mft (raw, json)
Hash identifier:          z1HcReQkksGx0MzAED/VoSfE4yVY1S/u1MT6bOtr0y4=
Subject key identifier:   CB:52:A2:BB:FD:F2:1E:AF:72:06:04:14:3F:55:5E:FF:94:61:6C:3B
Authority key identifier: 6F:5D:E9:F9:DB:BD:46:18:85:7B:58:10:5C:67:43:72:0A:11:BC:6E
Certificate issuer:       /CN=6f5de9f9dbbd4618857b58105c6743720a11bc6e
Certificate serial:       019D27A8C644494CFF282A502B332F96648C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b13p-du9RhiFe1gQXGdDcgoRvG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.mft
Manifest number:          1889
Signing time:             Thu 26 Mar 2026 01:01:05 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:05 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:05 +0000
Files and hashes:         1: GQ9oHmVrhqbw1ueu_Pk60wFQwT0.roa (hash: xIR+V2pRoZHqDiZfSfGurV0kCSe0HD6UwJQI7Hsc8KE=)
                          2: b13p-du9RhiFe1gQXGdDcgoRvG4.crl (hash: Ewa8tihgPRDAdyvduhJKbk9L2Qk+03ruDDZiw18taZY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b13p-du9RhiFe1gQXGdDcgoRvG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:c6:44:49:4c:ff:28:2a:50:2b:33:2f:96:64:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f5de9f9dbbd4618857b58105c6743720a11bc6e
        Validity
            Not Before: Mar 26 01:01:05 2026 GMT
            Not After : Mar 27 01:01:05 2026 GMT
        Subject: CN=cb52a2bbfdf21eaf720604143f555eff94616c3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:75:0e:31:77:9e:7e:87:68:f8:a1:f6:05:bf:
                    9b:e5:f9:38:85:45:de:60:a7:f4:d7:34:7e:81:8c:
                    ba:c4:a9:db:e2:63:6a:84:96:4d:f5:79:59:dc:68:
                    7d:17:3a:3b:70:fa:a0:ff:13:be:c9:4d:65:b3:34:
                    c6:ec:98:bb:e2:99:98:8d:7b:31:d3:2f:d5:37:d3:
                    79:87:c3:9c:cb:50:dd:36:e7:14:30:3b:66:48:76:
                    d4:17:1c:2e:82:4a:53:75:c0:44:5b:c4:8d:5b:f3:
                    0d:7e:cf:30:dd:06:d0:6b:5b:81:b1:72:1d:30:21:
                    6f:c1:fb:36:39:fb:92:7f:f4:af:18:a2:c7:7a:8f:
                    34:b3:9d:33:95:14:92:bf:a1:ca:f1:89:92:4a:05:
                    cd:f2:f4:08:ea:45:7e:02:a3:2c:88:15:49:ce:d4:
                    ee:56:a6:62:6f:43:53:e7:4b:7f:12:71:5c:5a:9a:
                    17:dd:69:54:39:fb:00:8a:d5:a6:fc:fc:56:4b:fe:
                    8d:aa:3c:5b:7a:bc:77:18:43:12:89:34:57:e2:06:
                    5c:31:72:87:5f:78:f3:ec:2f:a7:f6:2e:b1:23:a2:
                    fe:59:bd:e1:5b:b2:ef:3a:fc:6e:ed:dc:e9:eb:3f:
                    5c:1b:4a:a4:cf:70:cd:2d:90:59:6c:94:65:31:ff:
                    d8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:52:A2:BB:FD:F2:1E:AF:72:06:04:14:3F:55:5E:FF:94:61:6C:3B
            X509v3 Authority Key Identifier:
                keyid:6F:5D:E9:F9:DB:BD:46:18:85:7B:58:10:5C:67:43:72:0A:11:BC:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b13p-du9RhiFe1gQXGdDcgoRvG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:5b:0d:af:6d:76:5c:45:00:6f:57:58:ce:9b:a9:b8:07:c7:
         a0:a3:a2:43:c8:c7:74:24:8b:48:48:28:63:45:26:c0:9f:3f:
         44:42:dd:bc:57:64:60:f7:66:0d:19:5f:2f:2d:e1:9a:38:aa:
         7b:f5:b5:4c:fa:44:0e:be:7d:c5:f6:cd:b6:76:72:64:58:d5:
         ce:42:13:a5:47:5c:97:5d:09:dc:44:8d:3c:7a:f3:bf:f0:2d:
         aa:a3:68:f8:4f:f3:2a:62:c9:93:3d:42:75:4a:84:92:ab:cd:
         59:5c:c0:60:78:65:c4:bf:65:04:c3:05:53:79:c9:d0:3c:84:
         f7:2f:6a:13:6e:47:2a:c5:ff:59:71:d8:de:b8:0e:02:5f:fc:
         46:d9:78:3a:18:93:4d:91:9f:ca:57:6b:da:a2:df:55:c0:1e:
         78:bb:39:a6:57:75:db:58:11:bc:61:e3:6a:ef:85:79:00:ca:
         cf:a2:af:e7:87:68:c5:45:47:c3:af:88:00:08:63:e7:1b:73:
         20:21:d3:4b:e5:4f:9e:2f:43:3e:b6:f0:43:d5:a4:22:df:3e:
         cd:1c:4e:d9:56:c5:55:ac:67:b9:44:69:95:c4:c7:eb:91:c0:
         95:87:d3:3c:91:87:95:0b:91:c1:d5:ab:14:73:25:59:15:fb:
         20:1f:7e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:48:36 2026 by rpki-client