Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
File:                     daWp6O8n4wJyk--E-4-NMPq25tY.mft (raw, json)
Hash identifier:          kpdbdGZ2TgpZbczoxXwVSQm+a6Q/81Zaqwe4dnP/+W0=
Subject key identifier:   16:8A:B3:78:71:47:67:80:BB:96:12:A2:D5:72:AE:9F:BF:B9:2B:34
Authority key identifier: 75:A5:A9:E8:EF:27:E3:02:72:93:EF:84:FB:8F:8D:30:FA:B6:E6:D6
Certificate issuer:       /CN=75a5a9e8ef27e3027293ef84fb8f8d30fab6e6d6
Certificate serial:       019D27A89A6C8A3B88AE14CC4C3992D4913E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
Manifest number:          1886
Signing time:             Thu 26 Mar 2026 01:00:54 +0000
Manifest this update:     Thu 26 Mar 2026 01:00:54 +0000
Manifest next update:     Fri 27 Mar 2026 01:00:54 +0000
Files and hashes:         1: daWp6O8n4wJyk--E-4-NMPq25tY.crl (hash: 6YR+e9yjBn8IsbXXsC2nK414i5S8dxnscoJzST08zVw=)
                          2: nDj9PT5N_QWx4Sz5FT7RF4CSpok.roa (hash: h0RW3y25bIVEC8aKObDu/RDtNTnrw2v6jC5PsgpIK5Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:9a:6c:8a:3b:88:ae:14:cc:4c:39:92:d4:91:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75a5a9e8ef27e3027293ef84fb8f8d30fab6e6d6
        Validity
            Not Before: Mar 26 01:00:54 2026 GMT
            Not After : Mar 27 01:00:54 2026 GMT
        Subject: CN=168ab37871476780bb9612a2d572ae9fbfb92b34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f0:17:72:1a:22:25:ca:6c:9b:b8:fa:fb:fe:
                    61:4e:b2:57:08:9c:7b:2f:f9:b8:b9:1e:a0:41:4a:
                    dc:b0:ca:5d:db:61:03:77:fd:e9:76:8d:11:a7:65:
                    4b:d8:67:f0:2b:05:a9:07:13:9d:6a:e1:c9:bf:f6:
                    27:21:e1:9f:9d:6c:4e:56:3a:46:76:d9:81:15:db:
                    4e:e4:2e:72:8d:06:1f:7e:e7:67:78:f4:4b:96:69:
                    4f:ec:3e:28:09:ed:c9:82:db:7f:a8:ba:5e:af:0c:
                    07:e6:fd:21:54:a3:6f:3c:54:42:f2:83:42:a6:78:
                    f1:c9:d2:b2:78:b7:67:de:65:8e:87:8f:97:0f:01:
                    9b:71:55:0c:b1:74:e7:61:0a:bc:4c:4c:fa:bd:a7:
                    af:50:d7:ad:cd:c9:97:75:e3:0f:0c:2b:24:56:a1:
                    1b:6f:9b:95:46:7e:ad:08:96:a0:8a:ac:18:16:c7:
                    8b:48:8f:a8:1c:0f:1c:24:26:a1:22:7a:50:cc:2a:
                    be:54:74:c3:41:36:a8:58:20:1b:69:32:ec:a8:be:
                    75:ab:ba:69:1e:13:4b:a1:41:d0:20:71:64:c8:21:
                    7d:61:37:c8:0a:23:4e:71:28:09:9a:e8:ac:fc:ed:
                    08:77:81:9f:81:c4:5e:ea:9a:04:d1:ec:74:f8:20:
                    32:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:8A:B3:78:71:47:67:80:BB:96:12:A2:D5:72:AE:9F:BF:B9:2B:34
            X509v3 Authority Key Identifier:
                keyid:75:A5:A9:E8:EF:27:E3:02:72:93:EF:84:FB:8F:8D:30:FA:B6:E6:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:1b:cd:26:14:c3:7a:26:d2:4d:79:e1:f9:75:e4:33:76:04:
         a3:92:a9:e2:b6:14:f8:df:60:de:9a:ca:e1:a9:d3:53:39:2a:
         89:9a:90:2f:32:2d:82:9d:57:3d:c2:59:70:8b:a8:ae:23:13:
         0e:40:f5:98:86:e0:b3:f8:f8:92:a9:a0:bd:c5:50:dc:9a:97:
         d7:cd:26:b2:e1:17:8f:64:a8:b9:34:be:c5:09:4e:8f:86:72:
         c8:16:50:21:62:14:c8:3a:68:6c:a2:40:95:b2:92:06:d4:b9:
         c5:a6:f9:e1:4b:92:39:74:07:89:a2:35:c7:77:6e:63:79:c5:
         85:db:fe:32:4f:5e:c5:ff:a0:59:3e:66:0c:30:40:1a:d8:c5:
         5e:b4:2d:fa:d5:8c:c5:62:8b:b9:a1:cf:be:f8:dc:9c:c5:e2:
         58:de:37:e2:58:57:f6:87:0a:e9:ae:6c:04:84:cc:c5:6e:12:
         33:1f:51:3c:6a:34:30:f2:ef:0c:9a:07:21:76:13:b2:0d:59:
         1d:9c:54:42:bf:c0:96:25:2d:40:78:95:0e:6f:01:8a:fc:22:
         49:be:0a:90:c3:65:c0:bd:74:10:9c:71:5b:e1:ba:d1:8d:2a:
         02:e7:67:a2:21:e4:9f:e2:f8:b1:74:4e:94:42:7a:8d:4d:15:
         d5:9e:6f:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqJpsijuIrhTMTDmS1JE+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1YTVhOWU4ZWYyN2UzMDI3MjkzZWY4NGZiOGY4ZDMwZmFi
NmU2ZDYwHhcNMjYwMzI2MDEwMDU0WhcNMjYwMzI3MDEwMDU0WjAzMTEwLwYDVQQD
EygxNjhhYjM3ODcxNDc2NzgwYmI5NjEyYTJkNTcyYWU5ZmJmYjkyYjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vAXchoiJcpsm7j6+/5hTrJXCJx7
L/m4uR6gQUrcsMpd22EDd/3pdo0Rp2VL2GfwKwWpBxOdauHJv/YnIeGfnWxOVjpG
dtmBFdtO5C5yjQYffudnePRLlmlP7D4oCe3Jgtt/qLperwwH5v0hVKNvPFRC8oNC
pnjxydKyeLdn3mWOh4+XDwGbcVUMsXTnYQq8TEz6vaevUNetzcmXdeMPDCskVqEb
b5uVRn6tCJagiqwYFseLSI+oHA8cJCahInpQzCq+VHTDQTaoWCAbaTLsqL51q7pp
HhNLoUHQIHFkyCF9YTfICiNOcSgJmuis/O0Id4GfgcRe6poE0ex0+CAyEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBaKs3hxR2eAu5YSotVyrp+/uSs0MB8GA1UdIwQY
MBaAFHWlqejvJ+MCcpPvhPuPjTD6tubWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGFXcDZPOG40d0p5ay0tRS00LU5NUHEyNXRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9jYTZmNjktNmZlYy00NzUzLWFkNzct
ZWI2ZjlkZjA0NWIyLzEvZGFXcDZPOG40d0p5ay0tRS00LU5NUHEyNXRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9jYTZmNjktNmZlYy00NzUzLWFkNzctZWI2ZjlkZjA0NWIy
LzEvZGFXcDZPOG40d0p5ay0tRS00LU5NUHEyNXRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVRvNJhTD
eibSTXnh+XXkM3YEo5Kp4rYU+N9g3prK4anTUzkqiZqQLzItgp1XPcJZcIuoriMT
DkD1mIbgs/j4kqmgvcVQ3JqX180msuEXj2SouTS+xQlOj4ZyyBZQIWIUyDpobKJA
lbKSBtS5xab54UuSOXQHiaI1x3duY3nFhdv+Mk9exf+gWT5mDDBAGtjFXrQt+tWM
xWKLuaHPvvjcnMXiWN434lhX9ocK6a5sBITMxW4SMx9RPGo0MPLvDJoHIXYTsg1Z
HZxUQr/AliUtQHiVDm8BivwiSb4KkMNlwL10EJxxW+G60Y0qAudnoiHkn+L4sXRO
lEJ6jU0V1Z5vKw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:41:09 2026 by rpki-client