Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
File:                     IwNA0n5LJPkSSXcyLts2lC4tFgw.mft (raw, json)
Hash identifier:          EzHdh9r2T6FxIJGogCuXf7t6MoL/yn144BlmpopT1Qc=
Subject key identifier:   06:F0:55:96:C2:F8:5F:BB:4C:3F:07:F2:D0:69:EE:FE:F7:31:75:FD
Authority key identifier: 23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
Certificate issuer:       /CN=230340d27e4b24f9124977322edb36942e2d160c
Certificate serial:       019D2C2A7041E50C90D7CD8A44AD8FC2608C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
Manifest number:          188D
Signing time:             Thu 26 Mar 2026 22:01:11 +0000
Manifest this update:     Thu 26 Mar 2026 22:01:11 +0000
Manifest next update:     Fri 27 Mar 2026 22:01:11 +0000
Files and hashes:         1: 4Yk_IaIMOFlSvQlmWzU3D7V9Ww0.roa (hash: 95l63lLqTUI0fetfFavGHFZZGMfnTIwSEKulFFxrxpc=)
                          2: IwNA0n5LJPkSSXcyLts2lC4tFgw.crl (hash: yTayZuoMJx1NyNyaAWiXmbZZuKnwPnGZnvfjgTtwk28=)
                          3: XuKWpFnXaJB0gtal7fqUS1fMEg8.roa (hash: fZ0gDaNy7iCopngCMQx3WGFJao02SoThGdAJ/JuVVp4=)
                          4: YkLn8tz3hbcMIIBgz23I2SUwFt0.roa (hash: 7e3Ahg7cLmv6KRLYOyXJchFQCZ5bapXqbWjili8cMRY=)
                          5: i2ip3ClaBDk8K-xOqpebdwt1qZk.roa (hash: n9wEOC6qCVKNONqpdVLm6uWq7MOOkRaDBcCMVsbbO38=)
                          6: ogEjhX2zW6tgVtz_pOmSPCqvyBk.roa (hash: dF9i4unUQNdYa+sgOQav50pelR9XCvdYshIMM/dzsiM=)
                          7: sD8yyKxgqD60hgzKcX-gPGQxeh4.roa (hash: //5uDqVbcxyKWzTpZS8757S/2Ry/Wbbw/UQbM8VY0LM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:56:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2c:2a:70:41:e5:0c:90:d7:cd:8a:44:ad:8f:c2:60:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=230340d27e4b24f9124977322edb36942e2d160c
        Validity
            Not Before: Mar 26 22:01:11 2026 GMT
            Not After : Mar 27 22:01:11 2026 GMT
        Subject: CN=06f05596c2f85fbb4c3f07f2d069eefef73175fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2f:87:e9:a7:2c:ca:db:23:37:0c:5c:ef:88:
                    3f:d6:46:eb:53:9b:ee:cd:cb:a7:08:30:f3:87:a3:
                    54:02:92:78:cc:1f:f7:14:47:19:86:71:12:fe:d0:
                    1b:c5:b5:73:9e:c3:97:e5:bf:f9:ed:55:f3:6e:ba:
                    09:95:55:60:0e:ac:71:7e:f8:b8:df:99:9f:96:c8:
                    df:4d:16:76:6c:55:89:66:d3:9b:43:73:16:4f:69:
                    c1:29:5b:6f:4f:ec:26:d8:3c:53:86:a7:c2:3d:a9:
                    d6:d7:12:2a:d5:1e:76:6f:07:94:2c:fa:36:cc:e1:
                    83:ac:65:02:09:45:ef:b0:3a:60:ba:26:3f:85:a2:
                    be:01:67:45:2b:40:71:7b:75:a8:01:9e:21:23:7b:
                    77:7b:72:29:11:c0:0e:b7:c8:3a:57:91:a7:c2:2b:
                    46:42:cd:e6:53:0f:a4:ce:4e:18:de:13:01:46:74:
                    30:dd:ca:10:6a:bc:0f:5e:38:52:54:d6:aa:ec:36:
                    37:ff:8a:fa:71:b4:62:43:d1:51:1e:3b:17:b6:0c:
                    c5:d2:f8:06:6d:78:66:2d:e6:cb:2b:5b:11:b9:f0:
                    ba:92:0d:24:88:78:be:87:95:20:b5:73:54:cb:1e:
                    f9:77:61:bd:45:38:f7:4d:c4:ce:31:47:ad:d0:72:
                    99:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F0:55:96:C2:F8:5F:BB:4C:3F:07:F2:D0:69:EE:FE:F7:31:75:FD
            X509v3 Authority Key Identifier:
                keyid:23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:a2:4e:f8:88:00:b9:ce:61:d4:70:c0:fe:44:31:d0:5c:5d:
         08:3f:78:85:1c:85:d8:8a:13:cc:c6:ee:54:42:eb:70:c7:72:
         a3:30:13:18:71:3c:f6:88:f7:07:90:13:e4:a5:2e:8c:e4:7c:
         39:db:42:a2:ff:bf:d6:24:91:25:7e:fe:7a:c2:62:a8:18:36:
         b9:66:bb:dd:91:0f:a9:12:ea:31:0d:3f:66:6f:b0:d9:55:03:
         a2:9b:4a:6b:d8:af:ee:f9:e7:ed:66:c0:8c:d9:54:0a:fa:e7:
         a4:58:40:ca:c5:ec:90:59:f1:52:85:2a:84:52:33:a8:b6:d0:
         a8:e6:69:03:7b:68:09:4b:67:f7:00:b4:60:55:37:9d:2b:a8:
         97:f1:73:6a:a6:e1:d8:33:25:87:ee:0d:09:bd:c1:8b:58:75:
         2e:bb:a5:d7:5b:8a:3a:9c:06:16:6c:41:70:01:25:8a:94:53:
         12:c3:cf:fd:5c:e1:20:51:b8:ba:d0:0e:18:89:ee:8e:52:75:
         7f:80:16:84:f9:8e:5f:af:ca:a3:e2:33:02:03:11:01:9e:39:
         36:57:50:8f:8e:d5:51:44:e6:90:c7:fc:df:08:04:df:32:5b:
         ec:fc:82:83:7c:6c:fb:9e:6f:c8:7e:47:37:d8:93:a8:54:4b:
         7d:d9:cf:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:21:59 2026 by rpki-client