Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.mft
File:                     v-nxLJa6IGg6_1yVi_rY5MV39_4.mft (raw, json)
Hash identifier:          J9N4ifU+04KeOy6QI69fW59IWvnmdfiDIdPOGfJ4GwE=
Subject key identifier:   74:E2:48:EE:5C:54:CD:F0:54:E3:2A:59:9F:C6:C3:96:D0:10:D3:27
Authority key identifier: BF:E9:F1:2C:96:BA:20:68:3A:FF:5C:95:8B:FA:D8:E4:C5:77:F7:FE
Certificate issuer:       /CN=bfe9f12c96ba20683aff5c958bfad8e4c577f7fe
Certificate serial:       019D24DF37A1EB9557ECA52B6FE2F3991D18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.mft
Manifest number:          18C6
Signing time:             Wed 25 Mar 2026 12:01:41 +0000
Manifest this update:     Wed 25 Mar 2026 12:01:41 +0000
Manifest next update:     Thu 26 Mar 2026 12:01:41 +0000
Files and hashes:         1: B6Pi1uUnJZff0yH4k55r2kXtjkI.roa (hash: nFONkjpIyEwX4XgmL0VMVIS4fv9/E+OheTtNPB+NA0c=)
                          2: EDqPMphbUpVtTYoN1fyLYCs1biU.asa (hash: lzmUumz35rDjeAtkzbB8yQczkltYxxEG7y14DOkobdY=)
                          3: SBR1uR2716chaIz8ARk-u390kmk.roa (hash: KMB+rFlRFYjz2c5NYp4cUVbd4MaEgtDB59J+raHbbCY=)
                          4: V_rYxZ2-w4BK9fVkZwQrsUeAmMA.roa (hash: p4HomaDXAg/ZM1GQeP5HFcuB4PlFPPuMGy91Y+Q7mpg=)
                          5: v-nxLJa6IGg6_1yVi_rY5MV39_4.crl (hash: 7z8FdqzJmRHjjLmRjHzI1D2Wx5xEVYjq6bLOxC0/q2o=)
                          6: xK5lepFsVqEA8HJ242lSB1FdUvg.roa (hash: e9QjfU3jbqWuuABsY4opqKsE0OXAV7tXCJ/nRo7Cxsw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 12:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:24:df:37:a1:eb:95:57:ec:a5:2b:6f:e2:f3:99:1d:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfe9f12c96ba20683aff5c958bfad8e4c577f7fe
        Validity
            Not Before: Mar 25 12:01:41 2026 GMT
            Not After : Mar 26 12:01:41 2026 GMT
        Subject: CN=74e248ee5c54cdf054e32a599fc6c396d010d327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:16:b7:b7:6d:4a:6f:a7:56:91:0c:a4:54:a4:
                    ae:63:60:d4:51:46:1e:06:7a:cb:7c:c2:c5:43:40:
                    4f:c8:d0:90:82:66:f3:f4:8b:60:2b:62:df:f3:f8:
                    38:8b:17:42:df:93:60:57:2a:93:a7:01:51:6c:27:
                    80:9d:9d:22:af:b1:f0:2d:03:80:f8:c3:19:73:0c:
                    ca:32:ed:db:53:29:43:5f:f7:f2:9f:28:66:6b:66:
                    4b:9e:df:9b:c1:bc:a5:57:df:2e:73:a7:56:87:58:
                    78:e0:a7:39:cd:34:e9:75:34:ec:f8:a4:1d:a1:e4:
                    76:92:fa:e2:a9:90:e2:d7:87:22:6e:bc:4d:df:6f:
                    83:c2:68:cc:57:0a:fd:fc:53:21:a0:07:75:16:a0:
                    33:49:01:f5:ff:e7:82:3d:16:b3:9f:82:75:68:5c:
                    8f:61:6a:82:bc:cd:44:e1:9e:1a:f1:1d:f1:a5:7a:
                    3b:37:52:c9:29:07:16:d8:e4:7f:f7:13:54:d7:91:
                    ee:45:7b:af:85:87:e3:30:fa:f6:da:37:33:07:79:
                    79:b0:07:59:41:c7:97:13:fe:37:01:7f:56:e5:04:
                    36:c7:b4:e9:2d:5d:a9:f7:e5:02:ff:d7:73:a6:57:
                    0a:52:96:33:ff:98:c6:2c:95:5c:ba:57:07:12:a3:
                    71:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E2:48:EE:5C:54:CD:F0:54:E3:2A:59:9F:C6:C3:96:D0:10:D3:27
            X509v3 Authority Key Identifier:
                keyid:BF:E9:F1:2C:96:BA:20:68:3A:FF:5C:95:8B:FA:D8:E4:C5:77:F7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:01:b2:9e:6f:c8:20:d4:4b:89:1a:ef:f7:76:38:7f:0a:b1:
         d3:47:37:ee:5f:86:35:3c:ea:3d:33:0e:7d:88:b5:0e:07:a4:
         6f:ae:99:39:b8:ea:51:37:35:4a:12:d0:5c:fa:22:3f:58:81:
         d9:a9:3f:25:75:d1:78:d1:c1:69:8c:e5:9c:c8:a9:1a:d6:6f:
         dd:f8:36:bb:e5:78:83:f7:1e:4e:20:52:27:e6:54:f2:6d:7b:
         a2:83:1d:80:e5:df:dc:97:3a:56:55:00:a0:07:7a:46:c5:37:
         5c:5f:9d:3f:5b:b1:96:01:d6:6f:d2:fe:12:aa:dd:71:e7:9d:
         ab:1f:55:3d:84:ce:c9:73:06:17:bd:31:93:3a:06:be:91:c2:
         0a:81:23:77:38:5b:7b:f4:38:65:ba:71:c2:23:67:b0:65:bf:
         fc:af:68:95:c8:ae:71:f0:a7:b2:8e:47:e6:9d:57:b3:5c:ad:
         8a:25:38:6a:1f:85:6f:4a:bc:47:eb:fb:ef:6b:22:93:d7:e8:
         e1:a9:8e:a5:7e:61:44:10:db:51:8a:13:4d:9a:68:11:b8:0d:
         b5:b2:89:ac:46:33:1d:18:7f:b0:eb:45:28:45:46:06:7f:0e:
         d9:ba:90:1f:f7:75:0c:91:08:e2:f9:ed:90:39:1c:05:2d:c5:
         a3:ad:a3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:30:29 2026 by rpki-client