Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
File:                     axnRvKx1IxLsTeb1vTmszjKra9Y.mft (raw, json)
Hash identifier:          ZsVuG0bYcynf9q/T6JtMHZ9+C3FE9gTtFYnu1tg88i4=
Subject key identifier:   1A:28:E8:CB:63:C9:44:20:DB:BA:EB:CF:2C:AE:7C:A2:46:23:2C:79
Authority key identifier: 6B:19:D1:BC:AC:75:23:12:EC:4D:E6:F5:BD:39:AC:CE:32:AB:6B:D6
Certificate issuer:       /CN=6b19d1bcac752312ec4de6f5bd39acce32ab6bd6
Certificate serial:       019D29CEC6DE3957DCD47F121952E7B51C80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
Manifest number:          167D
Signing time:             Thu 26 Mar 2026 11:01:50 +0000
Manifest this update:     Thu 26 Mar 2026 11:01:50 +0000
Manifest next update:     Fri 27 Mar 2026 11:01:50 +0000
Files and hashes:         1: URIXovot20BpTLwGW5N6pOlLgy4.roa (hash: wvN6iNM+Z86YXZPPdosS4TWVox9d1Df0z+4sQXyWazA=)
                          2: axnRvKx1IxLsTeb1vTmszjKra9Y.crl (hash: 9vN42nsTxX9iZWK+wLypxpcoJkzYVoLw/4VZXQ2DjQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:ce:c6:de:39:57:dc:d4:7f:12:19:52:e7:b5:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b19d1bcac752312ec4de6f5bd39acce32ab6bd6
        Validity
            Not Before: Mar 26 11:01:50 2026 GMT
            Not After : Mar 27 11:01:50 2026 GMT
        Subject: CN=1a28e8cb63c94420dbbaebcf2cae7ca246232c79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1b:3c:64:7c:30:5c:24:26:a6:dd:fa:ec:6e:
                    78:de:0c:13:a6:30:34:5f:9c:a8:b5:da:68:ac:fc:
                    dd:22:61:e6:35:57:c9:e8:ed:53:93:a8:56:2f:e3:
                    2c:fb:02:27:c3:ad:49:35:30:4b:46:8b:dd:23:61:
                    96:1d:81:25:42:ef:80:90:b0:bb:1b:63:b4:d6:05:
                    6a:d8:31:0d:96:b2:31:eb:d0:45:97:ab:75:41:03:
                    fa:7a:31:55:fa:e9:03:f3:cd:a0:16:41:a5:9a:b7:
                    1b:bf:cb:ab:41:c8:42:84:fd:6d:16:79:f5:28:ec:
                    e6:40:b2:0d:d7:3f:93:a7:86:aa:0b:f7:dd:74:e0:
                    f8:d5:5f:5e:0c:f1:c5:1c:44:c9:d6:ce:bb:22:bc:
                    f2:93:bb:8a:d2:4e:2f:aa:39:7e:60:8d:c4:92:32:
                    7b:79:b7:7d:5f:b3:89:f0:7f:e8:46:37:06:5d:f0:
                    6f:bd:69:07:d1:d0:72:a4:c2:d4:bf:d9:96:4b:31:
                    9d:7c:6e:19:da:c4:9a:bd:9a:fc:71:9b:be:2e:a6:
                    94:15:69:23:ea:15:a4:09:cf:69:1f:33:b7:23:c3:
                    9f:c3:d5:23:06:dc:e3:94:ef:b9:88:ac:69:f7:d4:
                    ba:34:57:2f:c8:98:10:8d:0d:13:6b:4c:00:08:e8:
                    aa:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:28:E8:CB:63:C9:44:20:DB:BA:EB:CF:2C:AE:7C:A2:46:23:2C:79
            X509v3 Authority Key Identifier:
                keyid:6B:19:D1:BC:AC:75:23:12:EC:4D:E6:F5:BD:39:AC:CE:32:AB:6B:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:45:2c:af:91:ca:76:dc:1c:2f:aa:65:c6:d2:99:2e:dc:e2:
         81:7f:b6:28:b4:ca:16:9d:12:f7:06:01:69:f9:e1:f5:17:40:
         6b:12:e7:65:b8:fa:ea:8b:67:04:e9:06:ae:26:f3:61:fe:df:
         34:c1:76:77:0f:0b:05:fd:f9:c1:2d:9f:e0:27:4c:9f:93:65:
         a4:ec:f8:bf:9d:5e:1f:27:8f:6b:b8:29:06:e8:7f:92:89:85:
         7a:f2:cf:84:22:51:ea:af:17:e4:56:bd:1b:e4:08:0b:93:5c:
         63:46:a1:26:8b:e4:bb:30:ce:c1:79:88:46:fe:91:00:a1:48:
         ca:c1:4a:0e:78:f8:f8:b1:c4:4d:3f:22:07:1f:27:99:4a:8e:
         69:c4:60:0d:69:79:03:18:dd:95:3e:ac:31:5a:5b:fd:5c:1d:
         bd:27:8d:a1:ce:a4:63:eb:15:9a:b7:4e:6e:3d:5a:ec:09:02:
         21:98:e6:7d:e6:53:1c:c2:00:e1:32:28:61:05:3b:94:7d:cf:
         df:3e:1d:db:17:d4:a2:09:82:9f:b9:49:29:64:99:6c:37:c5:
         7a:2b:89:6e:2e:ce:e6:e0:a3:48:44:03:d1:ee:4b:70:d6:60:
         35:5a:94:b7:23:f5:4e:ec:76:98:93:dc:da:73:97:85:76:11:
         c6:48:fc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:03:45 2026 by rpki-client