Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft
File:                     rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft (raw, json)
Hash identifier:          90yhV12tfr3OplZyXgZzPPjlu7VJ8fAo6W6u6DrMfBI=
Subject key identifier:   A3:BC:C5:E9:3A:7C:41:94:E6:F9:B5:56:31:56:A3:5F:28:33:A0:24
Authority key identifier: AD:3D:D8:D3:2C:FC:71:7A:6E:69:0E:BE:3E:1D:B4:38:6D:8F:6C:64
Certificate issuer:       /CN=ad3dd8d32cfc717a6e690ebe3e1db4386d8f6c64
Certificate serial:       019D27A938905D76499B488073EA6433F8EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft
Manifest number:          144C
Signing time:             Thu 26 Mar 2026 01:01:34 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:34 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:34 +0000
Files and hashes:         1: rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.crl (hash: /CbiJurLj1zo4cSf2wWaENJzkHYnJsWN7VkXqH85FKg=)
                          2: r_FLcT2tc4F6vUmQkNvpWkE0C4g.roa (hash: /09Y96qJxubCRG9li9cUUz3NScNzI4efXUDMFZocGUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a9:38:90:5d:76:49:9b:48:80:73:ea:64:33:f8:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad3dd8d32cfc717a6e690ebe3e1db4386d8f6c64
        Validity
            Not Before: Mar 26 01:01:34 2026 GMT
            Not After : Mar 27 01:01:34 2026 GMT
        Subject: CN=a3bcc5e93a7c4194e6f9b5563156a35f2833a024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c8:79:69:3b:98:bc:3c:f0:95:b4:a7:af:96:
                    d8:31:71:60:0c:09:21:c6:c5:2c:c3:10:79:90:ca:
                    34:b0:30:09:63:67:b9:62:f5:7e:c4:0e:e8:5d:f3:
                    d7:d6:e2:96:4e:ad:67:d1:8f:fa:12:1b:a5:c1:5c:
                    34:ae:49:73:37:90:cd:9e:12:4e:f8:26:42:15:11:
                    4b:a5:eb:3e:98:66:2a:c1:ab:f3:8b:70:14:9b:d0:
                    4c:5f:f0:28:41:ee:fb:34:92:ee:bb:d1:62:12:d3:
                    bf:d8:05:0a:6f:f5:f9:e1:e7:59:04:46:1c:83:ca:
                    db:62:ef:8b:fe:e4:1a:b1:6f:fd:bf:36:b5:da:f3:
                    13:05:b6:99:e4:d6:06:85:3d:30:90:2e:95:d4:86:
                    19:e9:67:a0:45:55:a1:56:51:50:ad:94:8e:6e:ed:
                    7d:9c:0a:bf:3a:6c:3d:31:eb:04:f4:79:8c:ee:f8:
                    40:4e:2f:25:fb:6d:01:70:f9:64:5a:bc:f5:9a:72:
                    4f:f9:7f:33:7f:7a:26:36:b6:03:fa:69:47:bc:41:
                    d3:14:e6:42:04:42:b0:16:72:26:aa:d8:5b:2a:6f:
                    dd:ee:f7:37:b2:4c:33:41:27:b6:b0:ba:07:eb:e6:
                    5f:4e:57:dd:6d:1e:b2:ae:3c:33:47:6f:9f:40:49:
                    c4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:BC:C5:E9:3A:7C:41:94:E6:F9:B5:56:31:56:A3:5F:28:33:A0:24
            X509v3 Authority Key Identifier:
                keyid:AD:3D:D8:D3:2C:FC:71:7A:6E:69:0E:BE:3E:1D:B4:38:6D:8F:6C:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:58:47:dc:b1:86:75:91:8e:02:37:88:31:b3:fb:2d:0c:d5:
         70:17:e2:1e:45:c8:6f:ed:24:4b:bf:33:3e:96:fb:09:97:66:
         b2:6b:b1:2c:91:21:8a:5c:29:3b:ea:5a:d6:06:37:0c:de:ec:
         ae:03:9a:00:c6:ec:b4:de:27:39:2c:32:46:f0:48:d7:e6:a1:
         ef:0f:06:8c:ad:44:b9:e9:0a:87:dc:d1:44:f6:fc:9c:7e:26:
         91:3f:45:5b:98:ad:81:6e:e6:f1:9c:8d:33:11:13:01:5f:d9:
         95:83:0c:72:83:61:09:b9:90:f6:8b:5a:9e:f3:e9:f8:07:86:
         1f:47:ff:6a:e7:57:54:ba:d4:21:14:68:85:d2:20:cd:5b:12:
         4c:5e:48:78:b6:85:e8:d4:47:00:3d:b0:3b:63:64:39:de:d9:
         00:e0:2a:84:5d:f6:8b:97:1d:f8:7d:b1:9a:ee:21:9c:c1:b4:
         de:33:cc:27:de:06:37:84:6b:86:42:14:cc:f9:fa:f6:cc:fd:
         d7:16:c6:ba:2b:89:dd:01:e8:ce:be:19:10:e1:d5:30:bc:1b:
         02:97:7b:ae:5e:b6:43:ef:59:50:35:8d:a4:b8:27:c3:ca:c8:
         6f:d5:62:74:b7:92:a9:9d:68:29:7c:6d:5b:de:c2:63:0a:84:
         2f:58:16:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:56:04 2026 by rpki-client