Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
File:                     _Laxe9Ll8UvTdaDA5p38d9lwL0o.mft (raw, json)
Hash identifier:          mVK85/zo/beaXmXr9Zu+I92ZFhdKcmNPY/lIRjjGb/s=
Subject key identifier:   99:35:40:DC:A7:76:61:EB:AA:84:E4:3B:98:3A:54:94:56:EC:DE:52
Authority key identifier: FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A
Certificate issuer:       /CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a
Certificate serial:       019D2AA9A3CC0E4C33E8B1218EC25622BB1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
Manifest number:          188B
Signing time:             Thu 26 Mar 2026 15:00:53 +0000
Manifest this update:     Thu 26 Mar 2026 15:00:53 +0000
Manifest next update:     Fri 27 Mar 2026 15:00:53 +0000
Files and hashes:         1: Ut1UIZXtvGvA8jqfjKx-zoSsSmk.roa (hash: 6WpPy4Xn98zqM430NxCO708hZN1RtW/qmGYYPyMXR+U=)
                          2: _Laxe9Ll8UvTdaDA5p38d9lwL0o.crl (hash: duCyVDaaJng1R96dIPBl81wxs6u5BZifQkQYjYJw4NY=)
                          3: mgP5YZ0JeZUMwTrpIOlo1p2fUnw.roa (hash: cQXWsVz483MH+u8vJNX4kMADAIEqmSIqmpJYaQ+Q26k=)
                          4: yfVS_2kk-uHktNjsFEZtdVuHL48.roa (hash: G0Cy8TBWtX3HCmdmOFr3FXRyCZ+xdfsoAZfGcB4o49c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:a9:a3:cc:0e:4c:33:e8:b1:21:8e:c2:56:22:bb:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a
        Validity
            Not Before: Mar 26 15:00:53 2026 GMT
            Not After : Mar 27 15:00:53 2026 GMT
        Subject: CN=993540dca77661ebaa84e43b983a549456ecde52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:53:3c:3f:cd:45:f6:82:5b:01:0b:49:d3:3b:
                    0e:7d:d0:b2:d9:df:55:84:66:a2:4d:ec:5c:bf:b3:
                    f9:cd:e3:df:a1:7a:e2:6d:58:d6:ae:03:a7:da:58:
                    f0:a3:42:5c:61:7c:43:c7:66:31:59:fb:89:db:22:
                    e3:f6:83:6b:00:c8:25:1f:12:51:bb:fa:5f:ea:fc:
                    56:93:04:a0:fc:5f:c5:50:11:30:ec:98:3d:b8:f7:
                    bb:be:2c:43:d0:2c:6e:f7:d9:a4:e3:65:fe:8d:6e:
                    7c:03:6e:88:68:b6:68:f9:74:b2:d6:44:33:a4:c9:
                    41:3f:71:80:23:1c:dd:ca:d8:c9:47:a0:f7:5a:a9:
                    1f:90:00:da:e3:d6:95:56:a7:8f:0a:16:21:cc:dc:
                    9c:2e:72:8a:24:66:e5:37:5a:67:cf:ee:23:78:9d:
                    62:98:25:4b:7c:f3:6a:f2:7e:7f:89:20:d3:0f:5f:
                    9e:bc:59:94:85:63:78:a9:53:c4:49:30:1b:89:b8:
                    8a:f2:e3:b8:d4:c5:92:c9:cc:7b:0f:91:62:3a:f0:
                    3e:f5:c7:1b:0e:30:c9:76:66:af:25:9b:35:0a:b3:
                    90:3d:c3:2b:a7:be:7e:d4:4a:6a:af:f7:ab:ac:d6:
                    07:06:70:37:70:1c:33:a1:68:b9:70:7e:2f:74:3c:
                    d5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:35:40:DC:A7:76:61:EB:AA:84:E4:3B:98:3A:54:94:56:EC:DE:52
            X509v3 Authority Key Identifier:
                keyid:FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:d1:7e:18:f1:8f:a4:60:aa:68:a6:8d:08:3b:e6:cc:b0:70:
         e5:64:ad:83:d9:5e:8b:22:d9:70:aa:fd:53:2e:e7:7a:6d:de:
         d7:0c:c2:9a:49:8d:d2:b3:2d:e2:4f:c3:86:93:7f:e1:e5:cf:
         a2:f0:d3:99:92:d8:2b:1a:6c:15:23:25:c6:72:3e:a7:1e:4f:
         15:b8:38:05:5c:ad:f8:28:26:00:2c:f8:c1:4d:7d:b8:0a:b0:
         c3:78:1f:4f:5d:ca:d1:20:99:50:e4:4d:e1:e1:03:2b:9d:0e:
         8b:2d:98:72:8e:bf:cb:1e:5f:8c:ea:57:34:81:60:6a:9f:eb:
         c5:1f:30:88:dc:4c:15:86:83:89:89:8b:43:a7:1f:c4:72:87:
         eb:eb:2b:54:d0:f0:5d:34:4c:18:d7:bc:b1:1d:6c:f5:c6:4f:
         a5:5b:25:9d:aa:f9:07:36:4b:93:86:f5:fb:9a:19:73:ee:99:
         7c:08:19:7c:91:a7:a2:3e:d0:9b:5d:90:29:47:01:e3:59:b1:
         d8:30:49:25:c7:02:c8:d2:6a:8a:b9:83:3d:53:9e:ff:f5:fd:
         20:44:c3:76:e2:f6:12:37:5e:ec:cb:59:34:48:53:50:ed:99:
         b1:9e:7d:63:81:a8:52:8e:79:f3:65:bc:20:9b:28:43:84:d6:
         94:57:72:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:50:29 2026 by rpki-client