Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.mft
File:                     i5LFXos1lQd133Y-dJMNUinJ-gA.mft (raw, json)
Hash identifier:          mLDWD4m5kia7ukjakVTbpJ9FzJEpuM2njXL7pX8XYPM=
Subject key identifier:   F2:6C:35:DC:FE:33:20:98:17:82:BD:F5:F5:20:4E:B8:D9:BF:0B:7F
Authority key identifier: 8B:92:C5:5E:8B:35:95:07:75:DF:76:3E:74:93:0D:52:29:C9:FA:00
Certificate issuer:       /CN=8b92c55e8b35950775df763e74930d5229c9fa00
Certificate serial:       019D28BB7EBECCC155F25819D16FBF8B4025
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i5LFXos1lQd133Y-dJMNUinJ-gA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.mft
Manifest number:          181A
Signing time:             Thu 26 Mar 2026 06:01:09 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:09 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:09 +0000
Files and hashes:         1: AcZ8FStQphDwf4rYqOH4PuPnRcU.roa (hash: D5qSvfuIZWoy+nszBYnw8cGDkpXy8F40zHUSNBaMNOE=)
                          2: i5LFXos1lQd133Y-dJMNUinJ-gA.crl (hash: G8lWgAgT+Z0vN27pSm0ZQrVXVHsfJksg9h6UU/Hs6vs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i5LFXos1lQd133Y-dJMNUinJ-gA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:7e:be:cc:c1:55:f2:58:19:d1:6f:bf:8b:40:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b92c55e8b35950775df763e74930d5229c9fa00
        Validity
            Not Before: Mar 26 06:01:09 2026 GMT
            Not After : Mar 27 06:01:09 2026 GMT
        Subject: CN=f26c35dcfe3320981782bdf5f5204eb8d9bf0b7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:17:70:dc:33:5d:ec:30:0d:35:e6:b7:f9:81:
                    7d:07:47:e1:63:dd:75:b7:fd:2c:38:ae:58:84:1b:
                    88:ea:84:8b:6f:d1:d4:e4:b3:3a:ce:ee:48:3a:c7:
                    ed:c8:19:fc:2a:8d:a8:7c:8e:ab:a0:89:e1:a2:d1:
                    78:b2:a6:41:2d:3a:00:0b:e4:4f:08:2c:44:74:f6:
                    06:89:49:89:77:db:50:18:d8:16:df:de:c6:23:82:
                    0a:dd:48:bc:01:de:63:ab:61:83:b2:ee:25:71:ce:
                    7c:ee:2c:fd:a2:c2:87:b8:d0:cc:38:44:fc:60:63:
                    35:57:db:7e:14:57:05:50:5d:7d:23:1b:94:55:c2:
                    3f:34:39:ce:f4:7c:43:d5:b1:7d:82:7b:a5:bd:3b:
                    8d:d0:90:3e:14:13:79:bf:9d:cb:36:ab:95:73:15:
                    22:2c:87:f7:b3:00:a3:57:77:3f:df:69:d6:49:06:
                    7b:b4:3a:44:e0:a0:3f:15:c0:e9:9b:4f:98:04:ac:
                    66:3f:33:14:59:0a:3d:a7:bd:86:ff:76:dc:d1:89:
                    92:de:57:7b:12:79:b8:ef:fb:8f:1c:cc:23:fc:86:
                    1b:e6:86:1b:bc:c7:83:a4:6a:f9:62:22:5e:48:b5:
                    ad:30:9a:cc:99:e0:ab:61:2f:67:4f:b4:b5:fa:0b:
                    03:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:6C:35:DC:FE:33:20:98:17:82:BD:F5:F5:20:4E:B8:D9:BF:0B:7F
            X509v3 Authority Key Identifier:
                keyid:8B:92:C5:5E:8B:35:95:07:75:DF:76:3E:74:93:0D:52:29:C9:FA:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5LFXos1lQd133Y-dJMNUinJ-gA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:90:9e:b3:d4:79:25:38:6d:b7:90:d7:a4:60:7f:b2:cd:db:
         33:60:57:18:47:05:60:c5:0c:f9:48:ff:62:f1:c7:21:a4:1b:
         32:4c:48:c8:f2:7f:1f:81:52:95:34:f0:30:d7:d5:41:66:04:
         1a:a5:27:96:27:e9:9a:d5:f8:db:3b:a9:01:55:69:1a:38:17:
         23:4b:18:44:61:ba:e6:05:f5:1b:64:1c:86:f3:11:c5:7e:e3:
         f1:88:fc:a6:79:c3:82:1a:cb:e4:d0:d3:fb:b7:f3:92:aa:77:
         4a:f7:c8:5a:be:38:b2:cd:6d:40:fa:c7:96:7f:25:de:f1:cb:
         79:3f:d7:a5:87:66:7a:7e:13:d9:67:c3:93:95:a2:ea:ef:41:
         c9:58:4c:8f:e7:97:b1:22:9f:d8:c9:f6:c8:3e:39:da:bb:92:
         a2:5e:a7:07:61:b5:9c:c1:f7:9d:99:16:54:b8:a4:6b:e0:27:
         d9:05:6d:7e:53:c0:57:39:ce:b5:94:85:5e:f0:89:57:df:84:
         79:9c:9b:86:f5:74:fb:af:43:ea:e5:d8:19:d2:47:fc:80:50:
         6c:3d:bd:b5:30:6b:bb:b0:96:60:0f:49:b7:50:06:56:bf:7d:
         07:64:97:6b:0f:86:a7:0c:bd:c4:96:32:bb:08:83:ae:36:81:
         91:e6:9e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:56:08 2026 by rpki-client