Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft
File:                     p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft (raw, json)
Hash identifier:          pY+kPMmbjaoRIEceyR8SSm6PBCct2DSPngq2q6CV8Co=
Subject key identifier:   F2:24:86:FA:89:EF:F3:F6:6C:7F:41:B7:04:BD:B5:3C:AB:32:BE:B4
Authority key identifier: A7:9D:A2:A5:BD:87:78:DB:62:21:D7:BF:66:12:DB:0E:0F:EF:17:64
Certificate issuer:       /CN=a79da2a5bd8778db6221d7bf6612db0e0fef1764
Certificate serial:       019D284D6EA9B4B1515A4D8D08749B797BAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p52ipb2HeNtiIde_ZhLbDg_vF2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft
Manifest number:          1886
Signing time:             Thu 26 Mar 2026 04:00:56 +0000
Manifest this update:     Thu 26 Mar 2026 04:00:56 +0000
Manifest next update:     Fri 27 Mar 2026 04:00:56 +0000
Files and hashes:         1: hMyApwMrzeADs4JM-qIwJsPE4j4.roa (hash: N+rY5dKbfdkSmOrM2ag355sQkPNPr9/XUkupxhQWn1w=)
                          2: p52ipb2HeNtiIde_ZhLbDg_vF2Q.crl (hash: SdQBhUNYaaxuh/JRmtWueJlV3X8gBKPj7xnAdG/JxBU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p52ipb2HeNtiIde_ZhLbDg_vF2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:6e:a9:b4:b1:51:5a:4d:8d:08:74:9b:79:7b:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a79da2a5bd8778db6221d7bf6612db0e0fef1764
        Validity
            Not Before: Mar 26 04:00:56 2026 GMT
            Not After : Mar 27 04:00:56 2026 GMT
        Subject: CN=f22486fa89eff3f66c7f41b704bdb53cab32beb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c1:17:41:31:2a:6c:c2:6a:3c:b9:9f:4c:a2:
                    1e:20:74:c2:64:2d:e4:7d:b3:a8:34:f0:fe:ce:dc:
                    5e:1f:a1:a9:41:d6:73:2b:af:38:d2:46:51:62:2b:
                    b0:6a:fa:6c:eb:97:a9:01:59:ec:9d:f7:1a:a3:83:
                    47:77:d2:7c:47:de:b4:8e:65:bb:42:47:5d:91:f8:
                    d6:1d:4e:33:8d:eb:8b:62:96:47:73:a9:fc:c0:3e:
                    6e:e3:f8:c5:05:a1:b0:f0:09:de:aa:ca:08:dc:22:
                    18:b2:ed:3e:36:ba:46:d4:30:21:82:d7:fd:d4:1e:
                    3e:f3:89:7a:e7:c1:8c:71:35:5a:57:11:3e:da:b5:
                    0e:c4:7c:56:c6:b0:e8:6d:de:ff:fe:b1:f5:04:b4:
                    67:b2:4b:4d:e3:57:2e:24:13:ff:5a:37:7a:cc:dc:
                    23:6e:de:de:58:f7:ee:66:9d:40:61:5e:c9:8c:1e:
                    f3:6c:ff:40:d9:cf:44:dd:e7:be:89:b1:b9:7b:11:
                    53:02:16:0f:e2:98:8b:1a:dc:b7:95:70:17:a0:67:
                    a3:3a:df:66:e9:24:f8:a5:7a:58:44:49:14:39:ed:
                    98:55:5c:0b:91:68:10:1b:db:29:be:7b:a8:8d:50:
                    c2:31:91:6d:92:0c:c2:3e:64:57:c4:71:71:79:dc:
                    c4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:24:86:FA:89:EF:F3:F6:6C:7F:41:B7:04:BD:B5:3C:AB:32:BE:B4
            X509v3 Authority Key Identifier:
                keyid:A7:9D:A2:A5:BD:87:78:DB:62:21:D7:BF:66:12:DB:0E:0F:EF:17:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p52ipb2HeNtiIde_ZhLbDg_vF2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:b1:68:16:c3:e2:f7:18:12:b2:51:8f:b0:98:60:3d:9e:84:
         2b:1b:d9:32:ef:05:82:44:c3:1f:29:a6:2f:da:4e:2e:8e:ff:
         f0:fd:4f:0f:a4:14:1e:ff:73:45:e7:b5:71:24:92:57:f5:9b:
         52:67:7c:e6:9b:3f:4b:9a:aa:45:3f:e6:43:40:f8:68:d5:3e:
         94:6e:1d:e6:34:58:03:85:2e:af:3c:e5:08:dd:44:17:4c:ff:
         f8:78:b2:45:4b:d7:0f:c3:f3:f0:71:f8:e9:35:86:3e:f4:01:
         0c:7f:b9:85:87:c4:15:e1:5d:f8:77:4f:59:34:f4:d0:33:16:
         24:7c:00:8c:a4:b0:f8:3a:83:3d:9b:1e:50:dc:2f:3a:2e:c2:
         6a:9c:fe:f9:66:4e:b5:cb:99:77:c3:08:24:85:73:42:2b:dd:
         06:e0:d1:37:a9:0f:ea:d7:21:8a:c2:93:47:ae:29:b9:15:92:
         06:54:e7:0f:34:4c:db:a4:0a:d9:a1:4f:80:61:09:8b:98:19:
         62:d7:30:45:61:f3:ad:9d:24:fc:83:cb:6f:24:67:d6:0e:14:
         f3:24:0c:c7:fd:ca:c0:cc:74:6c:5f:60:0a:3b:18:a5:7f:55:
         03:53:2b:4a:b4:de:8b:16:55:1d:a1:23:f1:7f:2e:06:bb:aa:
         01:02:2e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:15:05 2026 by rpki-client