Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.mft
File:                     bevRnamMJ_q6t7LylLz57Gr0SQU.mft (raw, json)
Hash identifier:          vkCGxx/Fxyqd9KGt8RldT30jBhkO5Xq+zf+Xzisp8F0=
Subject key identifier:   65:27:10:4C:3B:A1:90:09:EE:3C:F5:31:FE:13:63:33:84:F7:D3:3E
Authority key identifier: 6D:EB:D1:9D:A9:8C:27:FA:BA:B7:B2:F2:94:BC:F9:EC:6A:F4:49:05
Certificate issuer:       /CN=6debd19da98c27fabab7b2f294bcf9ec6af44905
Certificate serial:       019D2A046613AF85CCBA01B00318B9AD6F90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bevRnamMJ_q6t7LylLz57Gr0SQU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.mft
Manifest number:          188A
Signing time:             Thu 26 Mar 2026 12:00:24 +0000
Manifest this update:     Thu 26 Mar 2026 12:00:24 +0000
Manifest next update:     Fri 27 Mar 2026 12:00:24 +0000
Files and hashes:         1: Q0DDocvIKXHiQubA2ngrZtN9sss.roa (hash: 0a8d7PBCfHewby32uiXu3Z8pOtDp0RIdoWEgJJZMaoA=)
                          2: bevRnamMJ_q6t7LylLz57Gr0SQU.crl (hash: +d0LWMFc0nGxLNQKBiz5PWZRiKqpdW5AZaZLaXd16HA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bevRnamMJ_q6t7LylLz57Gr0SQU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:04:66:13:af:85:cc:ba:01:b0:03:18:b9:ad:6f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6debd19da98c27fabab7b2f294bcf9ec6af44905
        Validity
            Not Before: Mar 26 12:00:24 2026 GMT
            Not After : Mar 27 12:00:24 2026 GMT
        Subject: CN=6527104c3ba19009ee3cf531fe13633384f7d33e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2d:67:ec:50:de:47:ef:43:a2:d5:0b:2b:ad:
                    7c:fb:99:42:d6:82:06:0e:09:c9:e6:bc:58:97:ea:
                    eb:bd:65:8f:78:ac:32:1b:c7:b8:75:04:b0:21:9a:
                    5a:75:99:fd:de:7f:dd:ca:8a:21:6a:53:5e:9d:69:
                    ce:dc:4f:21:f5:55:a4:25:95:e8:9e:b4:4e:b6:b6:
                    68:90:8e:52:ce:9b:d1:17:44:5f:fa:15:c6:f0:da:
                    65:16:12:a8:9b:56:35:67:f0:d7:ca:62:02:64:3c:
                    14:10:d4:e2:16:13:82:cf:02:23:f5:1a:a2:45:71:
                    27:2c:69:33:0a:b6:f5:f6:ba:9e:3d:30:60:93:70:
                    34:b4:2c:38:68:d6:d1:f2:99:23:f5:fb:fd:57:44:
                    20:b4:ae:d5:0f:a6:19:18:12:f9:fd:d8:e0:ba:92:
                    83:06:d1:35:4c:cd:7b:9d:25:d2:d6:a6:5e:70:73:
                    58:df:17:70:07:d3:87:b8:e4:cf:6c:a2:2b:51:2a:
                    9a:5d:11:66:2b:6b:5a:01:a0:5c:ea:92:46:51:e2:
                    3f:7a:b1:9d:6a:79:0f:78:ad:8c:9f:c8:d9:da:46:
                    2e:15:56:f0:4c:51:8c:9f:f8:f9:0b:8e:b2:8d:b9:
                    3f:57:f1:92:09:3f:a5:af:29:32:26:d0:96:6f:12:
                    44:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:27:10:4C:3B:A1:90:09:EE:3C:F5:31:FE:13:63:33:84:F7:D3:3E
            X509v3 Authority Key Identifier:
                keyid:6D:EB:D1:9D:A9:8C:27:FA:BA:B7:B2:F2:94:BC:F9:EC:6A:F4:49:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bevRnamMJ_q6t7LylLz57Gr0SQU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:f8:72:5f:c3:fa:f3:11:88:66:e8:7f:da:9c:af:c7:94:ff:
         b2:df:c6:9b:cd:5b:2b:93:bc:3b:ef:3c:f6:07:f6:d0:80:b2:
         3e:06:9a:d6:57:d9:1b:38:5d:6d:b3:93:34:6c:68:37:f3:20:
         62:b6:b4:94:f2:3b:04:53:2d:6d:f6:d8:3c:f5:97:6a:08:8d:
         e0:c7:49:34:c3:d9:fd:53:b6:a9:8d:00:4d:9a:9f:bf:a1:97:
         57:d4:ee:a3:ac:38:0b:ab:b2:b6:a1:4f:a9:42:a1:06:14:7a:
         e6:ff:6b:4d:c8:63:ac:50:40:6a:e9:ca:a8:18:29:b9:10:33:
         c2:f2:2b:2f:49:1b:22:c2:e4:b9:7e:05:b6:20:cd:08:2c:88:
         fe:18:93:79:d7:54:f8:82:6c:69:d8:9f:9f:79:c3:3e:58:8c:
         9a:d0:86:a2:77:59:49:86:8f:d9:4d:b4:54:69:ac:68:a6:5c:
         02:85:fa:f9:ea:82:90:2c:9b:28:b7:fa:4d:9f:45:ff:26:84:
         ac:04:e7:70:ca:1b:24:fd:e5:30:2a:c2:6d:cc:cf:97:60:d4:
         59:3d:5d:bd:ac:95:e9:dd:d7:b8:26:0e:19:ea:9e:db:42:30:
         84:8c:d8:e0:53:e3:a8:26:37:86:8f:3b:b9:8d:e0:54:a7:14:
         f0:95:39:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:05:00 2026 by rpki-client