Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.mft
File:                     v-V8w9sYQEcMc6CWBdGH172Vlcs.mft (raw, json)
Hash identifier:          DK9mOUw5B1WO4ejbOtyuxQ9zkmlz7S6ytqw5sBLURBE=
Subject key identifier:   CE:2D:DE:A4:0C:EC:5A:D5:B7:36:F9:63:0D:E9:7A:49:3E:5D:66:C0
Authority key identifier: BF:E5:7C:C3:DB:18:40:47:0C:73:A0:96:05:D1:87:D7:BD:95:95:CB
Certificate issuer:       /CN=bfe57cc3db1840470c73a09605d187d7bd9595cb
Certificate serial:       019D2772B874379247EDEB3525E8FCFA9AC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v-V8w9sYQEcMc6CWBdGH172Vlcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.mft
Manifest number:          1889
Signing time:             Thu 26 Mar 2026 00:02:02 +0000
Manifest this update:     Thu 26 Mar 2026 00:02:02 +0000
Manifest next update:     Fri 27 Mar 2026 00:02:02 +0000
Files and hashes:         1: 2ikB92Z1YZga53T_5TgPbCYNO2U.roa (hash: 6LYS7/XU1c9VFgwkPm/Cq36EgEjl8++/LJln5tJD5X8=)
                          2: v-V8w9sYQEcMc6CWBdGH172Vlcs.crl (hash: PlBKteUWq9BGZiOXWuyIm7ZkwVidekz+/6e4njYUGl0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v-V8w9sYQEcMc6CWBdGH172Vlcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:b8:74:37:92:47:ed:eb:35:25:e8:fc:fa:9a:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfe57cc3db1840470c73a09605d187d7bd9595cb
        Validity
            Not Before: Mar 26 00:02:02 2026 GMT
            Not After : Mar 27 00:02:02 2026 GMT
        Subject: CN=ce2ddea40cec5ad5b736f9630de97a493e5d66c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:75:d6:18:0a:86:77:29:43:34:53:67:42:7e:
                    93:b5:25:1a:1c:21:fa:33:52:2d:2c:b2:9b:b6:b1:
                    99:27:80:1b:ca:bb:75:a2:d2:c0:7a:55:91:6a:ed:
                    79:94:e5:55:33:14:d7:e0:87:b9:99:d0:ee:08:a5:
                    48:3d:fd:2f:3f:da:7c:5d:b7:ce:47:7e:03:43:3b:
                    18:08:b4:dd:f2:da:70:1b:99:6f:12:a4:69:76:1f:
                    34:f3:86:b8:76:42:3a:5e:22:64:10:12:73:60:30:
                    de:ea:5c:26:8e:23:42:6e:e2:30:b7:68:ff:06:1d:
                    77:8a:4f:e6:8b:cc:6e:16:bd:7f:0d:44:8f:88:c8:
                    91:eb:3a:33:75:85:26:59:d2:c8:25:7d:98:bc:51:
                    d5:8f:bf:11:1c:90:bd:9b:1a:96:23:cc:11:86:4f:
                    f5:3b:72:5a:f4:1b:b1:3f:3c:65:73:b8:19:e4:aa:
                    04:88:3d:a7:85:d2:64:14:37:43:22:21:a1:f9:a9:
                    3f:b8:b1:cd:ea:20:a3:22:b0:74:ed:16:4a:6d:6c:
                    97:7d:f6:9f:ae:2d:f4:65:81:59:93:8d:b5:b0:42:
                    a1:66:20:a9:eb:91:61:49:53:fd:e0:4f:af:eb:18:
                    29:a4:6c:59:cb:83:7c:27:cb:c3:59:b1:41:5e:b9:
                    cb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:2D:DE:A4:0C:EC:5A:D5:B7:36:F9:63:0D:E9:7A:49:3E:5D:66:C0
            X509v3 Authority Key Identifier:
                keyid:BF:E5:7C:C3:DB:18:40:47:0C:73:A0:96:05:D1:87:D7:BD:95:95:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-V8w9sYQEcMc6CWBdGH172Vlcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:24:6a:59:fe:cb:b4:78:68:09:3e:9b:7d:f1:81:f4:58:c8:
         29:88:bc:92:1a:ae:61:d4:df:37:0d:b2:78:b9:48:e0:64:09:
         93:64:bf:42:f6:39:b1:81:db:8d:e1:f1:f9:4f:16:95:c1:d6:
         94:41:98:d5:0d:ed:b1:75:7a:76:85:7f:b4:78:e3:45:ba:10:
         2f:4d:1e:8e:81:95:5b:e9:90:46:6a:e9:49:c3:16:be:d6:75:
         ad:d0:38:12:f4:d5:fc:64:f3:61:d7:5b:f5:33:59:95:31:a1:
         88:37:dd:8e:34:d9:c1:79:43:71:84:11:9f:a5:56:00:17:91:
         b1:ff:1a:68:13:5d:df:4a:87:c7:a2:60:d5:e2:f4:5a:5c:8c:
         fc:64:c0:8e:4f:50:b5:a6:37:13:0b:9e:19:78:be:e0:25:a4:
         26:24:05:2c:7a:7f:4a:de:fc:39:32:e9:89:da:fe:77:0e:5d:
         44:4b:41:f8:9d:65:70:2b:d3:ac:5a:8c:19:72:a3:e3:88:96:
         c9:e1:bf:8a:00:dd:80:71:15:67:e9:f1:cc:f1:aa:ea:3e:eb:
         a3:70:16:02:a3:c1:0d:46:c8:38:81:bc:55:d7:b0:2f:4a:26:
         c8:62:14:2c:a0:41:d1:b6:c5:ad:5d:bd:0b:c1:1a:55:82:ad:
         b4:f4:70:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:03 2026 by rpki-client