Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
File:                     SXIqDKi7yU1IpctIzMku_vhFp-M.mft (raw, json)
Hash identifier:          bjUP3nfvWX6y1zW+qU+q1mej+AJX7YUFTRcTPwU6wng=
Subject key identifier:   73:10:EE:57:F3:AC:77:FA:71:4A:2D:20:D0:5D:25:49:41:34:73:EF
Authority key identifier: 49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
Certificate issuer:       /CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Certificate serial:       019D27729DDBC99ADE50E6A9F49EE519E6EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
Manifest number:          1842
Signing time:             Thu 26 Mar 2026 00:01:55 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:55 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:55 +0000
Files and hashes:         1: 1-usL6AhsVQgwEOwqtzcx1h6pdYk.roa (hash: m452RcDS2XKhnRlqiqlaVh44Ww74b5nqeYQy1A7OC7I=)
                          2: SXIqDKi7yU1IpctIzMku_vhFp-M.crl (hash: V7qIjOxZheHQtPshIUJR0jj8FCR/a/WpNCZao1bxbLY=)
                          3: Y7BflHpDTlEOWh8-FjDosgwANDI.roa (hash: BNh1IcHDcawtVTnT8ZLo5aKLUrVIe97SR3mZxwBAYlo=)
                          4: boGX-Lm30GkI9QUngxbSV2vTHmE.roa (hash: 1TGckGRRsW7vYkWReEMx8JTWtzITaj+EKpmTBDFaV7c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:9d:db:c9:9a:de:50:e6:a9:f4:9e:e5:19:e6:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
        Validity
            Not Before: Mar 26 00:01:55 2026 GMT
            Not After : Mar 27 00:01:55 2026 GMT
        Subject: CN=7310ee57f3ac77fa714a2d20d05d2549413473ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a5:b5:3c:65:07:e6:9e:6f:32:52:69:5c:74:
                    35:e1:07:e9:9f:39:5a:8b:ed:17:70:fe:4d:3a:c5:
                    26:f7:8e:87:5e:77:a0:8a:c8:f9:ba:ce:12:a0:ec:
                    d9:b1:a5:0c:ea:28:51:9d:d6:f7:ca:32:44:9f:4d:
                    6d:20:4a:dc:19:3f:b3:e2:f3:17:45:fb:6e:e8:9d:
                    4d:8d:30:74:57:eb:fa:41:71:44:3b:51:7b:a1:e5:
                    1d:cd:be:e6:50:f9:d6:f7:9d:f0:79:21:72:d1:34:
                    df:51:b2:94:34:ef:2e:ea:8b:45:1e:df:ed:a6:00:
                    f8:f4:ce:e9:ca:f9:6a:d2:1f:b3:33:36:74:f7:14:
                    8c:06:4e:72:41:5b:30:76:a5:73:46:c8:c3:d9:ec:
                    bb:a5:bc:a0:82:a9:4e:68:b3:62:59:9d:aa:48:36:
                    e7:c9:0d:aa:97:b2:51:25:eb:4e:66:af:9a:07:1e:
                    7a:59:6c:6c:92:26:df:c5:c8:54:e6:92:f1:db:f9:
                    31:ba:da:c9:e8:a4:5e:45:3d:fc:85:14:82:29:21:
                    78:d8:c7:7d:1f:19:84:13:9b:12:64:ca:12:90:67:
                    17:42:58:fd:5e:d2:6d:1c:0e:ce:48:1b:1d:ce:12:
                    2e:b3:15:67:70:93:c6:6d:41:37:35:bf:41:47:4c:
                    49:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:10:EE:57:F3:AC:77:FA:71:4A:2D:20:D0:5D:25:49:41:34:73:EF
            X509v3 Authority Key Identifier:
                keyid:49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:65:54:89:9f:5f:92:d9:74:42:a3:7e:1a:6e:3b:ff:ae:a3:
         8a:1e:be:bd:83:a3:0e:db:d7:d8:61:be:54:15:b7:a5:4c:24:
         f6:9c:20:98:31:3c:bd:f4:78:1c:8c:b3:90:97:bc:d5:4b:43:
         f5:f7:e6:34:8e:84:1e:bb:ef:6b:6e:90:cf:0d:61:03:8a:3e:
         40:82:d6:f5:43:5b:71:98:40:b0:9b:25:42:e4:e5:e2:1f:d4:
         cc:72:c8:e2:97:8d:75:22:91:fe:d2:07:6f:a3:91:72:35:dc:
         52:d1:0c:e1:7b:b8:17:cd:dd:fc:31:52:a4:5c:f7:d9:30:11:
         f9:19:88:32:ed:86:ea:c6:65:b7:57:c9:da:db:a1:be:ed:14:
         0a:9d:d8:94:11:aa:01:e9:03:e5:ee:60:44:cb:89:12:3a:60:
         55:d0:9d:7f:43:8f:59:7a:06:a1:11:5f:53:14:6c:32:50:19:
         9a:e4:81:11:40:46:e0:cd:e7:00:23:12:35:a3:c1:a3:4c:e6:
         04:de:34:bc:f8:3b:23:20:3e:c2:1e:c7:38:23:8d:09:00:47:
         7c:8c:a7:7d:a3:f7:56:03:d5:7b:30:14:e9:46:63:4f:14:53:
         cf:62:ab:43:f2:e5:7d:ad:3e:17:37:c8:e6:d9:cf:f1:4e:8a:
         94:12:ca:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:15:13 2026 by rpki-client