Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.mft
File:                     T0Es0mmU-vYJva1ONdV2wsrkZVU.mft (raw, json)
Hash identifier:          n77WZvaws14e8fFlF6GUt/4vb1jaka5i/Obqw//QN1g=
Subject key identifier:   85:81:C7:C5:12:9C:DF:09:3E:C4:9E:49:BB:BA:39:26:57:54:B7:E2
Authority key identifier: 4F:41:2C:D2:69:94:FA:F6:09:BD:AD:4E:35:D5:76:C2:CA:E4:65:55
Certificate issuer:       /CN=4f412cd26994faf609bdad4e35d576c2cae46555
Certificate serial:       019D2997171D95A2D443EB4540A3F9A41D85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T0Es0mmU-vYJva1ONdV2wsrkZVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.mft
Manifest number:          188A
Signing time:             Thu 26 Mar 2026 10:01:00 +0000
Manifest this update:     Thu 26 Mar 2026 10:01:00 +0000
Manifest next update:     Fri 27 Mar 2026 10:01:00 +0000
Files and hashes:         1: T0Es0mmU-vYJva1ONdV2wsrkZVU.crl (hash: THG2wNNN9pGJZyZragyInZNiPCmwauLnZWIrtpVr45o=)
                          2: saKUd1nXbIug4fGWqb0fMv0LqfE.roa (hash: UTNxxWMancSqCn9jNpepiP9P3sBxTQaMyddSyFTQ6ag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T0Es0mmU-vYJva1ONdV2wsrkZVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:97:17:1d:95:a2:d4:43:eb:45:40:a3:f9:a4:1d:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f412cd26994faf609bdad4e35d576c2cae46555
        Validity
            Not Before: Mar 26 10:01:00 2026 GMT
            Not After : Mar 27 10:01:00 2026 GMT
        Subject: CN=8581c7c5129cdf093ec49e49bbba39265754b7e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:89:16:6c:ef:59:48:15:bd:21:99:4a:9e:b5:
                    e9:14:13:d7:1f:a9:7c:d3:7a:f7:60:6c:4f:c4:a4:
                    f3:84:56:5a:b0:8d:01:b1:76:a2:03:7a:42:18:ea:
                    91:86:e0:89:14:81:13:0f:97:e6:f6:02:5b:26:51:
                    8d:8a:60:d5:6c:61:19:f1:7a:ed:bd:68:f9:71:c1:
                    0a:fe:58:fa:8b:36:6d:0b:10:cb:ba:9c:78:b8:df:
                    1f:a3:1a:0b:54:1b:e3:b6:9f:48:d9:34:a9:87:35:
                    4a:7c:9d:56:d9:d0:7f:bc:21:94:49:a5:8f:6b:2d:
                    9c:38:9b:1e:cb:19:1d:fc:81:69:0e:2e:4d:dd:e6:
                    52:0a:c8:c2:ff:6d:70:f2:26:2f:ef:26:2a:f3:6c:
                    0f:94:46:72:53:49:37:5f:8c:09:40:f1:46:3e:f5:
                    74:9b:53:e1:2f:16:83:f7:4b:80:e6:b1:8b:98:c7:
                    99:b8:da:a0:a8:38:c1:cc:f6:ec:31:bf:b8:c7:84:
                    d8:3f:e0:44:e5:00:2f:c2:da:11:23:04:30:22:d5:
                    76:22:48:61:c4:65:81:41:59:63:1c:8d:e5:42:7b:
                    be:ad:df:f1:05:27:ed:18:f3:32:b8:93:f4:bf:38:
                    bd:64:ae:2f:27:fd:9c:5e:31:07:01:f7:8b:67:ad:
                    7f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:81:C7:C5:12:9C:DF:09:3E:C4:9E:49:BB:BA:39:26:57:54:B7:E2
            X509v3 Authority Key Identifier:
                keyid:4F:41:2C:D2:69:94:FA:F6:09:BD:AD:4E:35:D5:76:C2:CA:E4:65:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0Es0mmU-vYJva1ONdV2wsrkZVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:ad:31:8f:80:23:ff:69:23:0c:02:b6:bb:17:7d:7f:1f:15:
         72:9d:2c:9f:d9:9f:3e:f2:95:a8:30:72:9b:68:17:f9:06:b2:
         a2:5f:10:d4:e9:56:58:b1:5d:b1:27:3d:c5:9e:1b:27:fc:90:
         5b:50:64:6b:4f:ed:c2:1c:94:2e:69:cd:b9:e8:1c:6c:ee:3e:
         cc:a6:ab:6e:a6:c1:73:2d:74:fc:90:15:34:c6:2f:ba:45:61:
         50:d5:bf:07:49:7d:a3:49:e0:6c:67:c6:2a:f8:b1:fa:3d:9e:
         4e:30:13:b7:32:a4:43:6b:ab:6d:1e:c3:6b:9f:39:f1:95:b8:
         e0:9f:a6:a4:dc:30:c5:21:01:aa:fc:40:20:54:fe:a5:cb:45:
         9d:23:af:54:aa:3f:75:69:5b:bf:8b:5c:cb:00:11:3d:7d:4b:
         3f:2e:cb:de:4d:ae:1e:28:fd:e7:96:7b:34:2f:a0:99:25:08:
         49:a1:08:95:fc:04:44:c2:da:c4:6b:d1:c7:89:66:bd:f1:d6:
         5a:5c:10:c9:a5:d1:58:41:61:45:94:7d:c4:f5:d4:e8:6a:ce:
         d2:ab:e2:f4:27:61:cc:e4:53:12:ed:78:ff:df:0f:9f:d2:7d:
         c4:10:3d:61:40:73:ec:c7:9b:08:7b:c5:cd:f6:af:b6:c1:87:
         1a:28:b5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:12:04 2026 by rpki-client