Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.mft
File:                     _z73u2pGuvTbG6633ySkDB1MFU8.mft (raw, json)
Hash identifier:          +TtRJygQSwzNs/p18gs8W4wIFBzOq7UazmH6tz7vPcg=
Subject key identifier:   A4:9B:D5:AC:1B:24:1E:A0:C2:AA:70:5C:D4:C6:72:9E:C5:A2:75:B7
Authority key identifier: FF:3E:F7:BB:6A:46:BA:F4:DB:1B:AE:B7:DF:24:A4:0C:1D:4C:15:4F
Certificate issuer:       /CN=ff3ef7bb6a46baf4db1baeb7df24a40c1d4c154f
Certificate serial:       019D2A3B5A9CF6F9077397056BF78F49183F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_z73u2pGuvTbG6633ySkDB1MFU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.mft
Manifest number:          0535
Signing time:             Thu 26 Mar 2026 13:00:26 +0000
Manifest this update:     Thu 26 Mar 2026 13:00:26 +0000
Manifest next update:     Fri 27 Mar 2026 13:00:26 +0000
Files and hashes:         1: CJURcqwB7YHkxFpJ_fIfOAj4rb4.roa (hash: tQFv2xzZePQDySWn8V6OIcXlKLekKjdaEAGUmEMYLQo=)
                          2: _z73u2pGuvTbG6633ySkDB1MFU8.crl (hash: dgWzys+YZ3Ws7kfYLPJgOMobAP5xpUnhB3nHfGJ6Y2o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_z73u2pGuvTbG6633ySkDB1MFU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 13:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:3b:5a:9c:f6:f9:07:73:97:05:6b:f7:8f:49:18:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff3ef7bb6a46baf4db1baeb7df24a40c1d4c154f
        Validity
            Not Before: Mar 26 13:00:26 2026 GMT
            Not After : Mar 27 13:00:26 2026 GMT
        Subject: CN=a49bd5ac1b241ea0c2aa705cd4c6729ec5a275b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0e:a0:d7:9f:ff:e6:1b:46:a7:a9:1e:07:9b:
                    60:d9:df:0a:75:31:b0:65:6a:bc:60:85:f7:cc:8e:
                    bd:c8:17:91:9f:8b:89:a6:aa:63:29:28:a1:75:66:
                    26:ff:0b:22:8a:eb:f3:ee:4f:be:7c:5f:8f:c0:2c:
                    3a:ac:08:b7:72:3b:9e:55:74:ea:0f:b5:7b:4c:7b:
                    9e:16:79:37:f3:0f:17:0b:3e:37:95:99:ae:55:ea:
                    a6:a2:81:73:c5:62:e2:5d:31:2a:3a:7c:a4:04:74:
                    4d:e3:0e:26:34:63:e7:58:08:f3:1e:f6:7c:81:29:
                    f1:1a:f7:8b:86:1f:ed:1b:cb:b6:93:2f:0b:9d:63:
                    c7:14:0f:57:9c:98:6d:1a:08:84:d6:d3:7b:e1:7d:
                    ba:11:5c:86:f0:c4:2e:27:2e:ac:41:d2:f4:a6:c7:
                    ad:95:29:08:4d:5e:ea:df:e2:9c:51:43:e2:d0:72:
                    26:64:0a:69:bf:04:63:97:63:e7:de:95:8c:0c:cd:
                    c3:d9:82:68:04:9e:91:f9:43:b0:01:4f:74:4b:39:
                    4e:cb:c9:d0:b8:8a:6c:c4:58:ee:82:28:b0:fc:74:
                    5e:57:4e:85:a9:3b:ad:44:00:57:f4:90:c6:0b:25:
                    72:98:4d:0b:75:71:51:e5:79:84:02:ea:37:65:bc:
                    ec:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:9B:D5:AC:1B:24:1E:A0:C2:AA:70:5C:D4:C6:72:9E:C5:A2:75:B7
            X509v3 Authority Key Identifier:
                keyid:FF:3E:F7:BB:6A:46:BA:F4:DB:1B:AE:B7:DF:24:A4:0C:1D:4C:15:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z73u2pGuvTbG6633ySkDB1MFU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:b4:c9:42:8c:bc:f3:fc:2d:23:4d:c3:51:a9:94:a9:fa:d4:
         58:62:46:13:1b:c0:f1:83:32:26:79:9c:f9:79:f8:d4:8c:e5:
         0b:00:8d:40:01:00:b3:0a:f4:b6:0a:b4:2d:58:8d:40:08:b6:
         90:10:d7:2c:c8:c4:f4:5c:6b:11:3e:6c:eb:9c:e0:da:26:7e:
         dd:71:d4:02:a7:fe:1b:66:38:4a:31:45:ca:1e:9d:5f:5c:6a:
         e0:c0:a9:28:74:42:b3:6a:42:ba:7f:30:b0:1d:78:f6:9c:6a:
         dc:54:0f:6e:4d:3a:47:a4:21:a6:e3:49:cd:3e:71:9a:71:cf:
         ce:89:96:3f:6d:d2:6c:16:3d:8d:72:41:05:d7:0f:2c:60:d4:
         c7:6e:98:ef:6e:28:8e:81:bf:40:18:27:3e:f0:c3:2c:e7:a2:
         59:43:1a:3e:1b:d1:85:4e:f7:d1:fc:92:c7:31:f1:72:ac:0c:
         5b:66:39:08:6f:53:ff:a5:42:60:fe:d3:df:7b:8a:3a:50:dd:
         ab:a4:44:71:b4:83:05:1b:9a:e3:e7:e4:cf:ed:3b:3c:b5:c2:
         17:14:97:5d:a5:da:21:4c:a7:25:00:54:ae:17:73:3c:5f:14:
         28:92:91:70:77:52:f6:da:73:4e:93:b5:3c:2d:b8:cf:d0:db:
         05:40:fd:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:34:52 2026 by rpki-client