Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
File:                     x3FxpeRVBshskBa75bFLPbi8bMM.mft (raw, json)
Hash identifier:          8kO2eXTypTFe6PJ4P6NdOOHbQN0d8aB+iwaHfljhigU=
Subject key identifier:   9F:C7:4E:FD:D4:80:7B:17:07:9D:F7:9D:88:86:FD:04:D8:EE:B9:B6
Authority key identifier: C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3
Certificate issuer:       /CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3
Certificate serial:       019D25BAD9DC9E4E9A8C40F8C27414126259
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
Manifest number:          1885
Signing time:             Wed 25 Mar 2026 16:01:35 +0000
Manifest this update:     Wed 25 Mar 2026 16:01:35 +0000
Manifest next update:     Thu 26 Mar 2026 16:01:35 +0000
Files and hashes:         1: O7DvE_j0yVa8Neokc-i_HaDtXmM.roa (hash: 3lAq1Q6ERq8LruEXX9XUeCK19VsJiVKMmGnOXIPs3os=)
                          2: x3FxpeRVBshskBa75bFLPbi8bMM.crl (hash: qnVj+1B85yEKKoSH2RtHwyQMAQdB3KgufFDUpHgUzgg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:ba:d9:dc:9e:4e:9a:8c:40:f8:c2:74:14:12:62:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3
        Validity
            Not Before: Mar 25 16:01:35 2026 GMT
            Not After : Mar 26 16:01:35 2026 GMT
        Subject: CN=9fc74efdd4807b17079df79d8886fd04d8eeb9b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e1:cc:4f:f4:99:19:71:dc:37:b6:98:7d:e9:
                    46:4a:65:b8:f2:42:62:bd:e6:0f:e4:41:e8:0c:1d:
                    1d:41:c0:44:be:2c:42:9b:3d:11:b4:cf:a2:4c:5f:
                    aa:9e:8b:a1:42:e4:5f:32:84:7f:27:b8:0d:b7:07:
                    c4:f4:5a:b6:46:af:3b:75:26:7c:15:7a:15:19:f8:
                    e6:c7:ec:b3:fd:2d:97:27:07:42:8e:17:c5:a8:1e:
                    49:1e:05:91:cb:24:1c:ed:4b:97:9a:5c:5a:cc:1d:
                    11:66:a7:99:2d:40:7e:fd:db:93:23:0f:36:b7:68:
                    56:61:80:0a:60:2b:5a:56:4e:41:86:cb:1c:4b:38:
                    9c:32:55:ad:b8:8a:e6:18:b9:51:53:cc:75:25:fe:
                    5d:89:28:3d:78:85:e6:e4:27:8d:db:bc:fd:f4:43:
                    4a:a5:68:0a:69:da:0e:44:6a:b3:94:6a:eb:62:5f:
                    a1:aa:7b:51:d3:4a:ba:bf:e6:ad:a2:fa:8a:85:d4:
                    24:71:81:e6:40:2f:a6:70:28:45:77:40:84:1c:c1:
                    c9:c7:3c:cb:d2:59:65:d4:0f:96:fe:6a:1a:e2:30:
                    2f:c1:dc:cc:40:19:1e:93:e5:cb:fb:22:b8:00:64:
                    a0:3d:41:b7:c1:33:c4:b8:73:49:8d:78:05:c8:5c:
                    c9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C7:4E:FD:D4:80:7B:17:07:9D:F7:9D:88:86:FD:04:D8:EE:B9:B6
            X509v3 Authority Key Identifier:
                keyid:C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:43:f1:d9:c6:96:06:64:9e:82:5f:3f:e2:ad:be:df:04:38:
         0e:2d:c7:5b:6f:54:d1:e6:e6:01:8f:48:98:9a:67:af:08:36:
         f2:c1:51:41:32:12:23:69:6a:49:e2:74:ad:9e:2b:9a:89:22:
         9c:78:78:bd:c9:77:0d:df:e2:60:48:26:7f:e3:41:93:56:96:
         d2:32:2b:d0:fd:cc:92:f4:27:dc:40:72:af:e9:49:5b:4f:3a:
         a2:8b:df:56:95:36:92:0a:07:66:6e:2a:a3:7c:58:4c:fb:01:
         b8:00:34:75:11:3c:96:09:21:1e:f3:56:06:16:a0:8f:f5:fe:
         cb:24:17:eb:e5:dc:a2:7c:54:b3:cc:e2:22:85:be:68:4e:c7:
         9f:6c:e0:10:0d:9f:73:d1:88:df:ab:9a:d4:0e:56:a9:8f:47:
         d1:d9:a5:20:8c:c3:30:ed:b6:a6:bd:fd:e4:05:ca:e5:d2:96:
         16:b3:22:d7:11:b5:4e:43:8a:23:88:e4:78:df:e6:a0:a6:3e:
         39:23:a6:58:6b:1a:79:17:05:35:db:89:86:68:49:b8:ab:0e:
         0a:7c:0d:f4:fd:3f:14:7a:b5:d2:9b:80:a8:66:3b:c3:f4:ec:
         8a:44:e4:91:ed:6d:3b:52:89:74:b8:17:0d:9b:d1:96:7b:0e:
         49:d7:9c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:45 2026 by rpki-client