Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.mft
File:                     R-ph18wsJ4p8S8-8ITezlKImVK0.mft (raw, json)
Hash identifier:          mpPRmsgr9/cdno/uuwL6cjxJ/8kOVpmTL7rj+0rjMnI=
Subject key identifier:   94:91:17:76:56:9A:67:D3:B3:E0:D0:36:3C:FF:92:4C:39:E7:7B:58
Authority key identifier: 47:EA:61:D7:CC:2C:27:8A:7C:4B:CF:BC:21:37:B3:94:A2:26:54:AD
Certificate issuer:       /CN=47ea61d7cc2c278a7c4bcfbc2137b394a22654ad
Certificate serial:       019D28BB79FCF17B1AEA893787A92BC30DC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R-ph18wsJ4p8S8-8ITezlKImVK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.mft
Manifest number:          0753
Signing time:             Thu 26 Mar 2026 06:01:08 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:08 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:08 +0000
Files and hashes:         1: R-ph18wsJ4p8S8-8ITezlKImVK0.crl (hash: KwJ8GvO6b6J81Rxmjq6PrOMriByq9LWzPVncU75fra0=)
                          2: zkZYJhWSPz3cmCOa-oaMr0B4Hz4.roa (hash: l5UKf0qTnkJaMSM/u8sIK416WIDgHsGFudsRfCdoBTs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R-ph18wsJ4p8S8-8ITezlKImVK0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 06:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:79:fc:f1:7b:1a:ea:89:37:87:a9:2b:c3:0d:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47ea61d7cc2c278a7c4bcfbc2137b394a22654ad
        Validity
            Not Before: Mar 26 06:01:08 2026 GMT
            Not After : Mar 27 06:01:08 2026 GMT
        Subject: CN=94911776569a67d3b3e0d0363cff924c39e77b58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:35:77:92:bd:f3:d4:c6:c6:c8:98:ad:41:fd:
                    61:fd:80:6c:19:b0:1b:c7:22:69:e0:99:a1:57:e7:
                    ca:ef:7d:c4:0b:bb:ec:c3:4b:97:ed:68:34:3f:8d:
                    a5:87:b7:d1:74:cb:45:d4:a5:52:40:fb:ec:f9:7d:
                    9b:c6:6b:cc:77:29:16:8f:c2:88:08:91:ef:d3:c6:
                    fb:0e:c5:bc:db:87:f0:a7:ec:f7:19:3a:1c:ad:17:
                    ae:38:c5:5a:51:24:1c:bc:4b:60:44:67:3e:2f:6c:
                    e3:94:1c:34:30:c4:19:68:8b:60:32:6c:7c:c8:8f:
                    bb:f6:2c:dd:dd:5e:52:d3:53:ef:09:c8:c9:c8:96:
                    18:57:19:52:08:f8:e0:76:0d:b1:a0:45:9f:4b:49:
                    ee:a2:f2:db:da:1a:1e:54:e3:d9:6e:15:3b:bf:8f:
                    7b:24:2b:83:73:94:40:96:0d:74:52:91:91:48:43:
                    af:70:1c:c0:3b:5f:b7:07:97:92:b2:7c:4d:7d:58:
                    ac:d9:da:4e:f5:70:45:4a:56:0c:78:14:0c:b3:6e:
                    ab:0b:c3:bc:86:3c:4d:00:0e:aa:a3:83:2b:b4:38:
                    b7:80:cf:67:41:23:f1:9b:17:0f:50:4d:c4:a1:9d:
                    a4:c1:d4:78:e4:f7:64:20:60:d7:ed:c6:37:bc:21:
                    1a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:91:17:76:56:9A:67:D3:B3:E0:D0:36:3C:FF:92:4C:39:E7:7B:58
            X509v3 Authority Key Identifier:
                keyid:47:EA:61:D7:CC:2C:27:8A:7C:4B:CF:BC:21:37:B3:94:A2:26:54:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-ph18wsJ4p8S8-8ITezlKImVK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:05:1a:aa:2a:5e:87:f6:ed:43:23:6e:20:2c:1d:31:d2:5c:
         77:39:4d:59:a1:93:12:76:84:15:59:31:e7:20:b8:1e:1e:2d:
         20:31:7b:d6:6a:fe:a9:49:f1:3b:69:4d:07:e8:2e:57:f4:50:
         c5:10:92:ce:be:72:eb:51:e9:16:cd:6a:76:e8:7d:cd:51:bb:
         93:69:a3:2d:50:f4:17:a1:b9:fe:ff:07:cd:d7:a0:7c:29:7f:
         c2:ef:dd:84:a8:85:ea:24:52:71:69:c4:26:cc:1a:3a:76:46:
         79:dc:d9:67:5a:50:3a:80:28:14:49:9b:36:40:bc:c6:a8:66:
         36:12:a8:26:3f:1a:da:cd:ce:7f:d4:01:71:51:8d:14:21:ab:
         12:e9:66:20:4e:a8:93:52:b2:03:c5:98:e5:88:24:6f:fe:16:
         d5:cf:24:b3:39:f8:b2:e3:c8:b6:5d:33:16:0b:c9:94:27:84:
         a2:9f:29:28:dc:14:8c:03:10:e7:da:2e:f2:0a:76:33:28:0d:
         cc:10:1b:ea:df:01:07:01:fe:d7:f6:fa:bb:4d:e0:91:57:0e:
         bd:9f:91:94:ec:b5:78:d2:df:fb:c2:ef:62:fa:99:d6:23:d1:
         04:38:55:6c:37:5a:df:a7:0e:b0:f0:bb:4c:e6:a8:2f:62:89:
         7d:fa:27:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:14 2026 by rpki-client