Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.mft
File:                     S1KaTSL67yMTXW7_iRImZiPEklU.mft (raw, json)
Hash identifier:          loMp0plIuVo56qdPVB9iAxZyzMc2DQKlBMwd/FP8V7I=
Subject key identifier:   CC:4C:3B:22:D5:D8:1D:23:3F:4C:01:35:04:AF:49:E0:F5:8C:59:5D
Authority key identifier: 4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55
Certificate issuer:       /CN=4b529a4d22faef23135d6eff8912266623c49255
Certificate serial:       019D2772B9618D48BF10D070D8350F4110E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.mft
Manifest number:          18A4
Signing time:             Thu 26 Mar 2026 00:02:03 +0000
Manifest this update:     Thu 26 Mar 2026 00:02:03 +0000
Manifest next update:     Fri 27 Mar 2026 00:02:03 +0000
Files and hashes:         1: 8JTBQJyqUxIFa2P7t0W6NdfJ7CI.roa (hash: bvR7uwT6CerdByDmx1xzty2bHjJMPuqJsJHdeopKM9Y=)
                          2: IAcgHGi2lFpmozwldAdI6otCCf8.roa (hash: BMvZpTPd4wPptVWAuFWagP2MsiisY343W0Dlxwe5jk8=)
                          3: PGdzQPbVNWOAAR-X1BVXtgxofwg.roa (hash: dnLVHCkUAzZBzW5KJgWgdjrJ3f9Bmjq6lfV0HEQ9YaI=)
                          4: S1KaTSL67yMTXW7_iRImZiPEklU.crl (hash: sxp1x9PCJKnCWAHf2y+nLVIA8yO6k/xX+IqECLkecLQ=)
                          5: UeKejWBuRMBTzBVkphHiwU6F1G4.roa (hash: 4Va/WDHUaUbqMZBtGC/uemvvWN5D2KRgvotniu/r8z8=)
                          6: bspFglFUNNfB3BfctmrtidkBJJ0.roa (hash: b4qzed65X33LBM+fRSUuJ6eNd3msfTHJCKt5GOuVSMY=)
                          7: qz9PIkYKwP9WQn8ECobRGBHsRvQ.roa (hash: UZfIONpLoP6LhX/7gUJb7axOulXZjtNAWJUg7Z+a+S4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:b9:61:8d:48:bf:10:d0:70:d8:35:0f:41:10:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b529a4d22faef23135d6eff8912266623c49255
        Validity
            Not Before: Mar 26 00:02:03 2026 GMT
            Not After : Mar 27 00:02:03 2026 GMT
        Subject: CN=cc4c3b22d5d81d233f4c013504af49e0f58c595d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:99:c9:76:24:e8:19:5a:d5:e4:d0:f4:03:ad:
                    70:a5:fa:a4:7b:b6:41:f7:e9:ad:92:bf:34:4b:31:
                    9d:68:63:28:af:b3:9e:ba:32:b9:b3:d1:56:e1:b4:
                    c9:cc:31:75:0a:7d:79:70:7f:34:10:90:fa:8d:1a:
                    98:cd:d2:6a:aa:1b:fd:b9:be:55:cc:7f:b1:42:47:
                    d1:96:1c:8b:61:de:f8:a1:fa:54:1b:d5:81:3d:09:
                    ae:13:7d:71:67:8b:cb:39:c4:8a:fa:f0:e8:f4:3c:
                    15:f1:6b:36:1e:5c:b0:ad:a8:8e:d5:98:a3:56:29:
                    46:16:0a:ee:3e:89:5d:56:6b:62:ca:64:49:50:05:
                    82:ec:0e:9a:fe:a9:1a:40:91:ec:7a:9e:9f:aa:9c:
                    46:f7:aa:ee:62:56:db:02:29:88:eb:7e:8f:e8:e6:
                    78:60:d7:3f:8d:65:bd:c7:82:df:bf:f4:00:11:10:
                    44:59:85:ff:24:0b:68:5c:4e:e0:79:d5:51:0e:8d:
                    c9:2c:ea:98:51:e0:2c:c0:32:c3:c5:bf:01:6f:9e:
                    67:82:47:f0:46:e2:d6:13:c3:b9:fb:e2:17:89:58:
                    5f:d9:dc:1c:4f:91:d9:19:a4:83:8c:9f:b3:62:92:
                    43:51:20:73:ac:d6:84:27:2b:59:e6:03:bf:e3:84:
                    b1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:4C:3B:22:D5:D8:1D:23:3F:4C:01:35:04:AF:49:E0:F5:8C:59:5D
            X509v3 Authority Key Identifier:
                keyid:4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:f9:63:13:76:10:b1:b2:eb:96:72:f9:80:7f:64:17:5f:9a:
         ec:d8:8a:bc:25:ee:94:42:4f:9c:26:bc:22:70:ef:ad:57:dc:
         7c:4b:b7:e2:dd:52:05:7b:59:f9:0a:d6:c5:19:6f:18:72:23:
         f4:b0:fb:ba:e1:2c:4f:2b:c0:a6:8c:92:9f:75:e9:5b:c5:a3:
         d7:ef:af:27:46:3d:f0:72:57:3e:75:5b:cd:c5:ae:c0:5b:34:
         7e:38:1d:8a:47:1e:5f:17:ee:7e:e7:3e:09:93:fe:01:59:f0:
         16:ba:64:e3:7f:d7:6e:49:ec:75:39:e5:db:c8:88:09:95:a3:
         96:cd:40:98:77:ec:0d:b9:5c:03:91:b9:8c:cb:b3:e5:24:b0:
         b2:e9:b8:79:92:6b:32:b0:94:75:f5:e9:92:ad:17:c6:32:49:
         57:6d:e7:cc:2a:39:f7:29:db:bc:a7:e2:16:6d:0c:26:01:be:
         b4:c0:af:8b:0a:c4:46:3e:63:d5:12:1f:7d:52:8f:5c:41:d4:
         85:0f:05:87:b2:75:1a:19:af:79:12:aa:e8:48:1f:d1:42:07:
         56:98:90:e9:9b:18:b3:d2:a4:6c:40:5a:46:0f:49:c0:5a:25:
         d1:6a:1a:d4:ff:59:e8:49:c0:c2:18:f3:84:98:14:b5:99:a3:
         de:ce:e1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:07 2026 by rpki-client