Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
File:                     i_ynyW6ARQWki5lgPZshJPHdNwI.mft (raw, json)
Hash identifier:          kTDOfSznSyA5OAqj+b42sgU9UTq+Mr1ubgTfIiVNIKE=
Subject key identifier:   72:D8:42:87:65:4E:D5:51:53:E6:72:CF:B9:2F:0A:4D:6D:06:A5:9C
Authority key identifier: 8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02
Certificate issuer:       /CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
Certificate serial:       019D2627EA5ECE4FAD7EFE6BEF2AF73B10CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
Manifest number:          1888
Signing time:             Wed 25 Mar 2026 18:00:43 +0000
Manifest this update:     Wed 25 Mar 2026 18:00:43 +0000
Manifest next update:     Thu 26 Mar 2026 18:00:43 +0000
Files and hashes:         1: 3fmRvkperMmvyU4KqpsUtOxTyt4.roa (hash: 7eZzl4W/3A8ZztuV2lmxwvx6VP7+Qvs+/fsXhTjc0rc=)
                          2: 7Tcz0pE1-IDNMp7AQ99DVCGrgjI.roa (hash: IYa4nqDQg0w4fOWwfwmQezvrBABwOK7SbfWTarCYxSQ=)
                          3: 7W1NXgkMSkIdBVSG746iQwH_IUI.roa (hash: 8/Z+GxzPEApZfT9MVxqAMLn34ihqPk9rP7wFg/FqfLU=)
                          4: EdFWUcc8IVOoO0eCHGrnGkFmsGg.roa (hash: hRMzKjUqKk1WuOs7kzmRaFOXrwrTn6B37s4zIKdomao=)
                          5: Ljk83VCvMFaaB88IfYzmXG7UKBY.roa (hash: f8wXBBWZbB++s5ojWl86XJPa1ZQ8YeSsSho2itzHWeE=)
                          6: MVvq6Rgk9g4xb6udrHASJS9rhUU.roa (hash: M5I2tbJMcYnMo8jDDImO8+z5cJdQDV2EBlWZ+aqbq4Q=)
                          7: i_ynyW6ARQWki5lgPZshJPHdNwI.crl (hash: akAJEImnE72DAFGeiryZmqqhVPrPXVeSghYSPGmwYLE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 18:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:27:ea:5e:ce:4f:ad:7e:fe:6b:ef:2a:f7:3b:10:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
        Validity
            Not Before: Mar 25 18:00:43 2026 GMT
            Not After : Mar 26 18:00:43 2026 GMT
        Subject: CN=72d84287654ed55153e672cfb92f0a4d6d06a59c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fc:50:04:f8:62:2b:b1:22:08:89:72:5f:e0:
                    25:6b:4d:ce:44:bc:fa:98:2b:0c:82:bd:15:15:f2:
                    0c:2d:1b:26:79:f4:ad:01:12:ca:d4:80:12:c1:47:
                    0f:dc:d1:69:f6:bb:67:c0:42:c2:0d:ea:85:5e:5b:
                    49:af:7e:67:0f:03:17:cf:05:29:3d:6e:e7:59:fa:
                    e5:ec:53:98:fa:16:53:9b:ad:b7:44:7d:a5:9f:70:
                    cc:09:6f:ae:31:b8:c4:39:a1:a0:85:20:bc:92:eb:
                    a0:60:87:29:eb:b7:25:cc:aa:d0:48:12:8b:38:b3:
                    fc:24:f6:e6:33:2f:01:cc:d6:bb:1a:f1:09:98:c1:
                    e3:15:ba:57:e7:56:98:de:a8:1e:8b:74:7d:c8:ee:
                    c9:74:56:fd:f1:a6:62:98:16:35:d8:5f:39:fe:d3:
                    48:7c:cc:f9:de:f9:a0:d3:9b:94:20:76:25:56:6c:
                    21:44:cb:81:ef:68:5c:c7:f7:97:d8:39:94:a9:9a:
                    2d:9a:a1:ff:66:d2:ca:86:ea:5b:38:f1:b5:10:65:
                    79:7c:98:90:f3:a1:f9:75:c8:21:76:37:d4:e9:89:
                    9b:40:fe:1c:f8:3a:2b:fb:5e:10:b0:35:bc:b2:4d:
                    c6:c5:5a:75:2f:ea:2c:36:9b:6e:0a:f2:08:fa:55:
                    21:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D8:42:87:65:4E:D5:51:53:E6:72:CF:B9:2F:0A:4D:6D:06:A5:9C
            X509v3 Authority Key Identifier:
                keyid:8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:0c:a8:03:b7:4b:f9:d3:29:c8:f4:79:a6:5a:cb:33:6b:72:
         82:d1:41:3c:20:b1:87:d3:51:83:5a:2c:c2:05:d0:16:be:4d:
         6e:6e:47:94:4f:f0:f2:d1:c3:36:b6:64:5a:a3:10:e2:7d:db:
         b7:07:47:41:61:66:01:e2:ed:e4:73:2b:2e:55:ae:be:65:31:
         26:1f:50:3b:35:20:16:a3:22:f8:4a:86:c9:9e:9e:e5:ca:81:
         56:47:93:b0:47:8c:81:06:bc:09:a0:28:20:ab:5d:12:73:5e:
         cb:1f:59:c3:05:6e:d0:75:1c:cf:b7:23:76:d0:d3:82:2e:83:
         c8:61:45:da:0b:81:71:1d:ec:00:2b:20:21:d5:3d:94:c6:99:
         66:72:12:0b:d7:c8:d1:ac:18:51:75:8e:8c:dd:eb:54:4a:f4:
         0e:09:9b:3e:ba:68:51:7d:df:98:6e:68:67:9a:2b:0b:b0:c1:
         b8:ea:22:44:5b:15:f0:ab:e6:21:b0:ff:c4:de:50:0b:d7:a1:
         2c:87:05:e6:16:b1:b0:a3:4b:27:c8:76:49:f9:ab:ab:a5:dc:
         b7:04:90:d4:4f:e9:bd:c1:19:7e:56:07:1c:6c:b8:9f:ae:ba:
         be:54:27:2d:bf:6b:e5:b6:5e:db:2b:ff:ed:92:a8:48:df:4b:
         bc:fd:9f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:36:14 2026 by rpki-client