Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
File:                     R-lMy3tgHaDKCUafYPZTZA_tjBw.mft (raw, json)
Hash identifier:          fIMZpg6n3dX37of8Rpnv/f/4FaYk80lCrBXMM3kRZFQ=
Subject key identifier:   7B:95:31:58:F1:AE:E7:B9:0E:6A:77:53:C7:EA:F9:19:92:9C:D9:F5
Authority key identifier: 47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
Certificate issuer:       /CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Certificate serial:       019D2A72648C00CC46577BAE57B8B2DBA3A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
Manifest number:          189C
Signing time:             Thu 26 Mar 2026 14:00:33 +0000
Manifest this update:     Thu 26 Mar 2026 14:00:33 +0000
Manifest next update:     Fri 27 Mar 2026 14:00:33 +0000
Files and hashes:         1: AFEWredyAjvqwTGptAJ8OUVB7P4.roa (hash: 2m1v01Idcr237fiGD0VAWcDdfdXlJYmgXEBaQhLhLnM=)
                          2: NDSds1zweD0ntatyUwleIAzeIJM.roa (hash: +ZrwYT4v0e9jZWWQ6oW4TJF+kc5mZHurMYfZvW1kcaw=)
                          3: NG0J62IT4TEYyBuMqKM6OpYG_0Q.roa (hash: 0M3OIOezZ3BNzW0tJgVErTfGfdQ/cL0eGWBKnFHK6bA=)
                          4: R-lMy3tgHaDKCUafYPZTZA_tjBw.crl (hash: QpdPuFiNMJENxwfh4aDz0PPU8eZikEChlZlhnOD7bDc=)
                          5: c4vO0T2N1wxzMzxlgtz0m8cOMRE.roa (hash: 8oVfciD817bSEs2qpkUByGlM63u7F5Is6kgsu7Ks33U=)
                          6: eUCYKUszQzKLl5y0TD_e2TpUs_M.roa (hash: sXPTK8NFfl134JTfg8VQ0nOUGTnLwDMaXmy5yBYZ7ag=)
                          7: ydzz4qC4IHTCEdAs_sR3u8QA-U0.roa (hash: BxYGaauFkfj9FqWYAmJGU+STO4UuDXKQhKUEiwoFjr0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:72:64:8c:00:cc:46:57:7b:ae:57:b8:b2:db:a3:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
        Validity
            Not Before: Mar 26 14:00:33 2026 GMT
            Not After : Mar 27 14:00:33 2026 GMT
        Subject: CN=7b953158f1aee7b90e6a7753c7eaf919929cd9f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e0:88:0e:d9:e7:ea:f4:f5:0b:c7:ce:8f:50:
                    cb:1e:6c:51:1e:03:07:45:2d:a6:31:76:05:72:7a:
                    7c:ab:3e:d7:c2:ae:be:81:45:50:ef:90:a8:01:57:
                    cc:fb:22:cf:07:ee:66:33:71:11:d4:82:1a:70:02:
                    92:d4:75:9e:a4:75:a9:69:de:7b:2e:83:6e:88:98:
                    ea:66:9a:0f:0f:ab:01:fc:75:93:d8:5c:47:fd:bb:
                    b4:9c:85:34:5c:bb:41:d9:c4:95:a6:52:8f:72:be:
                    fc:c1:f6:31:ea:91:19:fa:fa:d6:5d:8d:ea:b3:4c:
                    29:9d:54:85:53:19:29:8e:8b:6e:b4:30:87:97:38:
                    ab:c7:d7:e4:ce:4d:51:03:fb:84:99:97:fd:f1:a1:
                    f2:f6:85:b7:f7:c1:90:d1:e9:21:56:7a:a4:c0:be:
                    33:44:07:01:f3:5a:47:ae:00:46:68:75:ce:53:6f:
                    c2:f9:65:6d:ad:85:7c:0b:20:95:1f:d4:b3:13:6c:
                    86:b7:58:16:9e:4d:fc:34:b7:fe:4b:47:75:81:73:
                    aa:86:e7:e7:0c:ce:d4:af:08:0d:17:d0:37:e7:0f:
                    72:05:00:82:ff:62:4b:ff:3d:f9:af:47:74:41:61:
                    81:2f:91:8e:df:90:3e:b1:45:99:a0:68:96:10:d0:
                    dd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:95:31:58:F1:AE:E7:B9:0E:6A:77:53:C7:EA:F9:19:92:9C:D9:F5
            X509v3 Authority Key Identifier:
                keyid:47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:89:50:c0:45:0f:a8:b1:e9:7a:68:a6:ff:22:42:21:f1:c3:
         e6:49:13:20:d0:f5:41:5d:1d:e2:85:4e:9e:f3:5b:16:92:ed:
         ce:03:09:00:26:0a:bb:de:ff:8d:c0:d3:a7:af:c6:10:a3:b4:
         74:a3:95:1b:88:ee:40:c6:59:e3:94:4a:5a:10:fb:94:49:04:
         23:3f:09:be:99:27:ff:21:57:b4:60:56:ea:d0:3a:0a:44:42:
         f5:de:33:c4:79:81:d4:4b:6d:b3:83:2f:7e:13:2e:cf:0c:af:
         ed:09:d0:63:d7:c4:2c:c0:d0:ce:ac:65:d2:0c:53:c2:e4:b6:
         aa:78:bf:1e:05:a2:c4:57:71:d4:52:28:e6:69:00:99:ae:c7:
         9b:35:62:66:1c:3c:46:79:f1:8f:db:f0:b2:79:cc:d4:89:a3:
         25:67:52:d8:95:92:c8:26:0b:92:6f:3b:40:1a:61:39:1d:36:
         e0:52:f9:c8:47:5d:f7:b6:72:10:82:3a:43:1e:77:0e:aa:10:
         29:40:16:d5:84:0c:18:76:e2:b0:b9:b1:9b:9d:3e:d5:24:4f:
         68:5b:b0:e2:1d:74:da:9f:9d:1c:66:a0:53:e4:44:29:c4:69:
         eb:52:de:48:f3:df:1c:cc:4b:c9:75:40:7b:9d:4c:d9:99:f5:
         83:75:02:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:54:07 2026 by rpki-client