Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
File:                     A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft (raw, json)
Hash identifier:          7OfRoTuhFiiVo7ZJ4CUh7bZUA0BEtAmw2Vhf0ohJsRw=
Subject key identifier:   17:89:2E:A2:E0:19:AB:1E:CD:7A:1B:3E:3B:A3:B9:E6:42:40:A4:E3
Authority key identifier: 03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61
Certificate issuer:       /CN=03f3f8259b30ec03722f942035a94e209f882861
Certificate serial:       019D25BA2B2B81038F87A3D3F4B0A0864FD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
Manifest number:          1886
Signing time:             Wed 25 Mar 2026 16:00:50 +0000
Manifest this update:     Wed 25 Mar 2026 16:00:50 +0000
Manifest next update:     Thu 26 Mar 2026 16:00:50 +0000
Files and hashes:         1: A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl (hash: 6yda1uePF8ZgezkXrs+zViUYTAa4HFBq9G8HTYR4oYg=)
                          2: DNy-Ywo37F1s94DzRvRfvjndiAw.roa (hash: kJUUhnZY4jdclwXVHJF/NcqyyZenLqwhpoq2KYT5Bxk=)
                          3: GtRmGH4bGG6oOP8kzT17gVxixR0.roa (hash: vabTUX5Qd4MvYjPie5N9mfB497dNe6aI2rUnS9Qyx28=)
                          4: nehss--I5fmpoVCvb0Oo4Ab0mGQ.roa (hash: QL6FWPRVEjAfMv/oZtTE230B/5xMRz1J6W0IaVZGkq0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:ba:2b:2b:81:03:8f:87:a3:d3:f4:b0:a0:86:4f:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f3f8259b30ec03722f942035a94e209f882861
        Validity
            Not Before: Mar 25 16:00:50 2026 GMT
            Not After : Mar 26 16:00:50 2026 GMT
        Subject: CN=17892ea2e019ab1ecd7a1b3e3ba3b9e64240a4e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c0:15:ee:48:38:56:32:6e:95:bc:a6:42:62:
                    ab:6a:df:3c:f7:e8:7a:a8:73:1a:9e:81:30:e2:5d:
                    ad:30:96:da:be:11:10:80:bd:32:f8:ea:0c:f4:67:
                    a6:ef:13:5c:69:65:1d:03:e8:e7:87:25:cc:58:77:
                    20:61:c5:3e:9d:cb:62:5c:53:c2:38:1c:fe:c1:f0:
                    12:80:db:51:e4:14:52:31:76:fa:ee:fe:d6:bc:03:
                    60:e2:3f:b0:21:65:35:9d:d0:72:2a:0d:14:1b:14:
                    3c:42:e6:87:5b:cb:27:be:3f:00:97:32:d0:8f:7c:
                    a7:28:cd:b7:81:5e:3b:94:0b:42:a9:af:39:d9:9e:
                    d9:02:ba:34:55:b3:c5:be:f8:50:cd:f1:10:86:32:
                    9e:b9:c0:35:da:ce:ba:50:45:7b:28:7b:71:e3:64:
                    87:c4:6a:48:fc:e1:11:6e:6d:5d:81:c0:b6:e6:71:
                    d1:0a:8e:78:8e:2b:09:c1:32:ad:73:39:f2:25:a5:
                    71:30:9e:a7:9f:98:97:2f:b5:52:86:5b:b9:c8:12:
                    c8:b1:e9:13:3d:47:f3:83:8f:cd:ac:7d:09:89:15:
                    88:18:2c:39:8c:69:48:89:69:86:c6:36:09:3d:bf:
                    68:69:d5:28:18:a0:ed:ab:01:0f:f1:91:fc:49:8e:
                    b6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:89:2E:A2:E0:19:AB:1E:CD:7A:1B:3E:3B:A3:B9:E6:42:40:A4:E3
            X509v3 Authority Key Identifier:
                keyid:03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:e2:55:74:1c:57:02:31:6a:e6:41:36:d2:0a:99:d7:95:db:
         76:67:83:e5:47:80:c1:10:fd:37:a1:76:0e:a9:73:3b:88:9f:
         d8:22:2a:36:ab:c2:9c:47:5c:53:0f:e2:56:98:39:fc:d8:c6:
         08:a1:0f:88:7c:42:19:4c:d6:07:da:e5:64:48:92:ee:e3:fd:
         da:e3:88:80:8c:c7:0d:3e:d4:de:2a:43:f2:1c:75:33:32:79:
         73:2c:ef:dc:cf:ed:9b:60:10:28:54:ef:65:84:c4:fc:17:b1:
         65:5f:cb:2c:e1:60:e1:57:8e:86:3f:63:c0:24:76:b0:ce:82:
         93:eb:c2:ff:8f:2d:84:4e:4e:6a:2c:10:82:ff:87:16:23:27:
         5b:81:31:5b:58:5b:50:b8:3a:dd:f6:b0:4a:30:93:63:44:c7:
         db:8b:63:de:13:d1:95:f6:c4:e2:2f:23:f4:40:80:65:93:bc:
         67:23:9d:e2:3b:9d:d6:24:47:02:d9:12:d1:23:18:a5:e7:1c:
         80:eb:ff:37:7b:1c:fc:25:14:02:d8:6c:76:2b:af:6e:07:ad:
         95:30:37:64:f4:c5:a7:65:0d:20:b0:78:96:b8:7a:3c:ec:b8:
         60:57:8a:9a:14:c4:49:03:75:22:b4:35:40:7c:9b:ac:f1:1c:
         b7:37:7e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:54:48 2026 by rpki-client