Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft
File:                     iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft (raw, json)
Hash identifier:          Q8echcVmvtc00S5DdHl+EMSkViSjPdPow39PoMA5PAo=
Subject key identifier:   E7:A0:6C:83:CC:1D:DA:2F:1A:BC:A2:9A:2C:A1:51:16:A6:C0:B6:47
Authority key identifier: 89:6E:D6:E4:B5:C7:C1:9D:B9:8C:57:43:2A:F4:DC:F6:30:BF:60:AE
Certificate issuer:       /CN=896ed6e4b5c7c19db98c57432af4dcf630bf60ae
Certificate serial:       019D26CD66047E9C63D493380137B5245F2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft
Manifest number:          1047
Signing time:             Wed 25 Mar 2026 21:01:28 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:28 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:28 +0000
Files and hashes:         1: 9D_hL6BTFMqVDteQVeKe20j1dLA.roa (hash: NIOHGASDD2CfBiUud4MTlBzLoCpd2hk9q9QgBiWLS7s=)
                          2: BWlmWVMxkNnS9PCmlrzVPHTr0Qw.roa (hash: 0mnB5pl7WzlDcgHTanlrlKrT0b7HdGshZ3gTbOkWWLE=)
                          3: HPyUHxxjQD21zBw_1-laG68F_FM.roa (hash: zfFvv4NZ2UhldU+XWf+RuLM3pxW1pdjT1IVU+Il8uRw=)
                          4: MYqosqYznshSBHhJRCRXz5w9vvU.roa (hash: YCd4lsvChvCvSXFOE9n0zc8M89HnW32oRzu9rQpmrMo=)
                          5: iW7W5LXHwZ25jFdDKvTc9jC_YK4.crl (hash: YOEnb84/YOfDg5r/AlwUnG+ISFZvMmNedEFhNdHgvow=)
                          6: v2pVbuDIo2QFLf9tgf0AgEZfKsg.roa (hash: gXOCFkUMTWDAXQIKNOf9kMl0WJuvQJli0ZTnKwQ3NNo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cd:66:04:7e:9c:63:d4:93:38:01:37:b5:24:5f:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=896ed6e4b5c7c19db98c57432af4dcf630bf60ae
        Validity
            Not Before: Mar 25 21:01:28 2026 GMT
            Not After : Mar 26 21:01:28 2026 GMT
        Subject: CN=e7a06c83cc1dda2f1abca29a2ca15116a6c0b647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:db:da:41:2f:ff:0a:56:28:39:25:af:49:83:
                    ef:0d:c5:58:09:45:da:0d:3f:b5:97:ec:0e:45:4c:
                    5f:d8:91:22:6b:d4:45:41:69:fc:33:2d:bb:65:d0:
                    2b:44:79:d9:d2:a0:49:1f:0e:0b:11:7e:86:ed:6e:
                    df:69:28:e1:5c:e7:99:ea:a3:b1:77:2e:ca:f8:3a:
                    36:96:e6:1d:60:88:c4:43:fc:62:43:05:94:4f:e9:
                    ea:19:00:1b:1a:3c:6c:36:bd:fa:00:ba:d5:95:c5:
                    3d:f2:07:da:2c:82:7f:56:00:b2:fe:2d:68:68:3d:
                    95:34:2d:b8:d7:cf:2d:0c:ff:ab:ed:8e:3c:90:4a:
                    a7:18:59:e0:9a:67:a1:e6:f1:dc:33:f5:18:24:02:
                    72:a5:b2:cf:b1:7e:7f:df:93:8f:42:7c:ae:2d:a6:
                    57:32:e1:1c:6f:16:38:84:2a:6b:57:e7:c7:b2:cb:
                    d6:a1:1c:2c:52:b1:b4:ff:ae:8e:07:f3:fa:16:25:
                    cb:4a:5c:66:8a:7a:19:83:6f:f0:6a:fd:f5:d5:37:
                    1e:56:f0:b4:78:99:3d:40:0c:3c:d9:73:96:d2:b5:
                    fb:ca:5c:37:e0:f3:12:02:90:6d:c0:22:b1:3a:cf:
                    6a:9a:97:45:32:5d:0d:8e:30:54:28:f9:72:67:27:
                    92:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A0:6C:83:CC:1D:DA:2F:1A:BC:A2:9A:2C:A1:51:16:A6:C0:B6:47
            X509v3 Authority Key Identifier:
                keyid:89:6E:D6:E4:B5:C7:C1:9D:B9:8C:57:43:2A:F4:DC:F6:30:BF:60:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:ff:a4:1e:00:6b:95:44:b9:2a:f3:88:99:34:d1:87:96:51:
         95:85:2e:60:6e:fc:0a:2e:bb:3a:70:7c:05:72:9e:34:9c:9f:
         c7:12:30:48:ec:54:87:b0:61:3b:b7:08:f8:1e:5c:f5:15:24:
         ed:75:d8:91:13:fd:14:c5:f7:54:8a:a3:70:93:2d:e8:98:cc:
         dc:f8:7d:7c:3b:e6:90:d0:aa:c0:ba:f4:7b:5c:f3:94:b6:f8:
         36:a7:f5:e6:e8:51:68:dd:98:b6:ee:85:05:c1:c2:aa:25:61:
         7d:c7:1f:e1:de:29:64:a2:16:f4:b5:07:a3:80:35:98:e7:28:
         13:f7:a7:c2:98:49:12:8b:32:2e:27:b3:6f:f5:97:47:b8:0c:
         ca:ea:b8:a4:60:ed:fd:e0:9c:9d:2b:4e:cf:5e:2b:2e:50:6a:
         16:b1:21:30:6b:9d:38:d8:ab:02:a4:ec:48:65:85:f9:0f:85:
         62:7d:40:fa:2f:b1:cb:12:f2:a9:c3:2b:e9:ed:3c:18:d8:7a:
         97:e8:67:b7:84:0b:39:fe:f5:4e:cb:e3:4d:e8:39:3c:34:19:
         c1:8d:bb:31:72:9a:45:70:95:e6:0e:fb:ae:5d:6e:80:30:d7:
         d6:b5:13:2b:bb:1a:93:c3:89:bd:16:29:8c:12:84:dd:f1:e3:
         ce:20:e7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:46 2026 by rpki-client