Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft
File:                     ANCpW-DmARCcsZiEJouiIERVx5A.mft (raw, json)
Hash identifier:          wI0iVZemGFnerrF9FG6ylYfzrEPbvqT6q2iY1I70hug=
Subject key identifier:   E7:86:32:BA:58:3B:15:81:BB:60:02:BA:C9:6E:3C:85:C6:FC:46:5D
Authority key identifier: 00:D0:A9:5B:E0:E6:01:10:9C:B1:98:84:26:8B:A2:20:44:55:C7:90
Certificate issuer:       /CN=00d0a95be0e601109cb19884268ba2204455c790
Certificate serial:       019D27A8BF4D50D7B7A30B6FA8F9A4E65F6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ANCpW-DmARCcsZiEJouiIERVx5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft
Manifest number:          1886
Signing time:             Thu 26 Mar 2026 01:01:03 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:03 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:03 +0000
Files and hashes:         1: 7LsBYX6UnQJjHO1OTwDr7b5AbQQ.roa (hash: x1DmSRqiESbAlCSOZoAMtbVAuMjmRTF3G6bOp+G4clM=)
                          2: ANCpW-DmARCcsZiEJouiIERVx5A.crl (hash: Ev6QZCv+JgHKuKvtDBem/PKfuxs76d4S96nvVv7f/oE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ANCpW-DmARCcsZiEJouiIERVx5A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:bf:4d:50:d7:b7:a3:0b:6f:a8:f9:a4:e6:5f:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00d0a95be0e601109cb19884268ba2204455c790
        Validity
            Not Before: Mar 26 01:01:03 2026 GMT
            Not After : Mar 27 01:01:03 2026 GMT
        Subject: CN=e78632ba583b1581bb6002bac96e3c85c6fc465d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c2:84:d8:7f:50:8a:01:a3:4b:4d:cb:44:2c:
                    22:0e:1b:71:c3:b0:ec:69:4a:a5:81:42:9e:a1:16:
                    28:b8:8f:a2:95:26:3e:23:4d:87:a7:0b:43:34:8d:
                    62:38:d2:d2:0e:97:2c:49:2f:4e:37:f9:d4:6e:12:
                    05:56:40:59:7b:2c:20:ce:a8:6c:9b:46:41:ca:16:
                    0e:01:1d:52:60:2e:de:08:91:ca:7f:ae:2d:56:25:
                    b8:33:74:7c:1e:8e:99:e3:61:14:00:c3:ab:95:93:
                    a3:c0:68:90:ad:21:fc:02:c9:9a:ed:95:56:1e:d2:
                    88:a6:7f:5d:67:92:41:a7:52:b3:fc:74:40:60:5c:
                    0a:f3:cd:25:bc:bd:3b:b8:6a:5a:e3:8e:98:94:6b:
                    77:86:a7:4d:ff:8f:4d:35:28:e7:de:c4:7a:30:a4:
                    fa:0a:05:b8:10:f5:a2:be:68:10:3d:7c:20:26:37:
                    82:33:f5:9a:69:74:62:27:35:6e:ec:4d:ec:9f:2c:
                    be:45:d6:ea:2f:17:f8:a8:08:cf:26:31:4d:08:9d:
                    83:13:7c:ff:b3:ea:57:a8:1b:f7:90:ba:9a:d3:c2:
                    b7:5c:c3:60:34:4c:26:e8:58:87:7e:ee:3d:e4:1e:
                    f4:16:01:56:30:b3:bc:57:9c:ea:8c:fe:59:88:eb:
                    36:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:86:32:BA:58:3B:15:81:BB:60:02:BA:C9:6E:3C:85:C6:FC:46:5D
            X509v3 Authority Key Identifier:
                keyid:00:D0:A9:5B:E0:E6:01:10:9C:B1:98:84:26:8B:A2:20:44:55:C7:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANCpW-DmARCcsZiEJouiIERVx5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:0c:aa:a2:8a:58:25:a5:6b:55:1f:8e:99:71:fe:c0:5b:cd:
         f6:04:b8:bb:16:b2:53:3e:c1:f6:8d:d4:57:75:f3:d9:23:53:
         c3:74:eb:ec:48:6e:fe:27:61:fa:fd:c1:3a:15:cf:26:0e:cc:
         f7:da:27:5e:e2:08:64:b9:46:aa:b6:42:cc:38:6e:5f:b5:55:
         9c:85:45:4d:a9:a4:bd:54:49:05:26:9c:26:c3:7a:c0:ca:b9:
         a7:34:8a:b9:24:ce:d6:dc:39:1a:90:35:2b:14:a5:1f:80:0e:
         c7:6f:c7:dd:cb:b3:ee:3f:4d:57:53:b1:fd:59:9d:da:45:21:
         71:0e:7e:5e:df:48:f3:82:2e:f1:94:4f:0f:15:49:48:57:5b:
         3a:c6:1d:c5:77:40:1e:f8:dd:7f:cf:2e:08:57:1d:98:cd:bb:
         4d:4b:5b:b7:6c:39:64:cf:be:0b:1e:35:fc:cb:68:5c:b2:66:
         90:a9:21:19:fb:a1:5a:1c:8b:77:de:75:95:b2:d5:6d:ef:29:
         00:ea:e7:e0:85:fd:e6:09:85:aa:6e:e9:6e:b5:67:23:40:73:
         87:37:01:11:17:ad:f7:0e:09:04:61:3d:de:2b:fb:76:64:e2:
         02:3c:ac:5f:f9:07:61:91:09:d7:8a:99:53:68:7d:62:9b:ae:
         85:a5:6a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:54:39 2026 by rpki-client