Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft
File:                     sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft (raw, json)
Hash identifier:          mrjjWXxNM9p5uN0l7MVo/dF+sH6ByjfmWP+rHXH9Ubw=
Subject key identifier:   9F:AB:DC:1D:E9:97:3D:C9:39:F5:28:E3:B6:6C:BD:3C:DF:40:BB:F1
Authority key identifier: B1:81:4A:28:A8:C1:EB:E0:AD:C3:3A:15:19:B9:88:3E:30:84:BB:59
Certificate issuer:       /CN=b1814a28a8c1ebe0adc33a1519b9883e3084bb59
Certificate serial:       019D25838098114D76845E333C11ABE40ED7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft
Manifest number:          1190
Signing time:             Wed 25 Mar 2026 15:01:08 +0000
Manifest this update:     Wed 25 Mar 2026 15:01:08 +0000
Manifest next update:     Thu 26 Mar 2026 15:01:08 +0000
Files and hashes:         1: 1ZD-5sWPvLvF_F5r7aK4sjXeBa8.roa (hash: 9g3E8L94O35utFKdVj/OF7X+jv2TAGMuo7bfCk2FBWk=)
                          2: Jgh8TRgca-Yzk4zbDo1y-y8oAjA.roa (hash: 1YiIe3dsEVG85vOw2eS5VT5pNrhUblvJwxJsfNgGFh8=)
                          3: kpO4RG28fYYVmBuJSIXGaHvSxU0.roa (hash: i8inyU2Y1UbsH+wXnBk66d0sVuBHQPuFEaJpwKKuPzA=)
                          4: sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl (hash: LGA85vStQHJmjz2zmvAVwhJoMPsjIQybDsir7diqIC4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:83:80:98:11:4d:76:84:5e:33:3c:11:ab:e4:0e:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1814a28a8c1ebe0adc33a1519b9883e3084bb59
        Validity
            Not Before: Mar 25 15:01:08 2026 GMT
            Not After : Mar 26 15:01:08 2026 GMT
        Subject: CN=9fabdc1de9973dc939f528e3b66cbd3cdf40bbf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c5:ea:bf:25:5a:c5:0f:64:e7:d2:4d:9b:44:
                    13:cd:ab:68:ce:67:4c:46:70:09:7e:6d:37:ab:5f:
                    5c:66:04:3d:55:65:69:4d:ff:26:a7:24:a4:d7:8f:
                    ed:59:47:01:8b:6a:e9:74:36:6c:8b:8f:03:92:a2:
                    fd:86:78:63:f8:32:94:fd:7d:55:56:cc:af:89:75:
                    14:cb:11:8c:bc:5c:9e:c4:a4:3a:47:38:40:27:79:
                    c0:6c:84:08:4e:37:16:e9:c1:c1:14:55:9a:fe:f6:
                    81:a5:3d:85:88:a2:11:ef:06:1a:8c:eb:2a:85:71:
                    17:e3:4f:dc:5e:ba:e0:f2:13:ea:81:c3:fe:26:ec:
                    a5:a9:5e:90:4e:73:ba:18:6d:26:4a:86:44:d8:01:
                    c4:b1:12:1c:c5:89:ab:c1:95:58:68:f0:37:2e:b7:
                    fa:ec:4d:ab:23:2e:68:e3:b9:cd:6f:ae:d1:2a:48:
                    56:46:64:4b:29:72:dd:7b:18:cf:7e:71:ae:26:a3:
                    b9:8a:5c:bc:31:bc:61:c9:4f:39:3d:27:ab:c3:20:
                    c0:7f:e4:19:cb:b6:c8:a8:e5:d5:a1:86:d0:ed:0c:
                    15:12:e9:43:82:bc:bd:a3:af:bc:e8:4d:e6:a2:95:
                    d3:f3:42:6c:94:51:9d:7f:72:84:25:55:60:90:13:
                    b7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:AB:DC:1D:E9:97:3D:C9:39:F5:28:E3:B6:6C:BD:3C:DF:40:BB:F1
            X509v3 Authority Key Identifier:
                keyid:B1:81:4A:28:A8:C1:EB:E0:AD:C3:3A:15:19:B9:88:3E:30:84:BB:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:28:ab:64:6b:62:05:92:70:9a:ac:8c:4c:52:30:8c:4e:43:
         1f:d5:17:3a:49:59:6c:2f:57:e1:8d:0c:e6:f5:5e:ed:af:18:
         00:70:b8:63:fc:d1:91:11:fe:6b:b3:12:57:bb:a5:a1:32:33:
         0e:ec:2e:00:66:68:74:64:02:8a:5b:97:43:8b:5c:a9:26:1e:
         f1:23:a6:d7:91:a7:43:8f:02:ae:46:95:c9:66:0b:d0:c0:e1:
         f1:a2:16:89:59:77:28:36:dc:40:fb:59:c1:9f:e8:84:db:dc:
         40:54:9d:96:a2:90:09:e5:37:b7:4a:96:61:cb:be:3d:6d:8f:
         75:5b:f8:7e:88:9b:d0:6f:8f:a9:b9:95:fd:f6:6a:f5:fe:19:
         a5:82:ca:8e:79:ef:b4:6c:ac:8a:1e:d7:40:5d:90:1e:b1:a5:
         a8:ce:9c:53:8c:19:d5:1e:5b:a5:8d:67:cd:47:b1:e3:2e:d9:
         74:53:10:df:43:65:a4:1b:0f:e2:1d:53:45:5f:0f:0c:da:91:
         e1:1c:1c:1e:e1:f5:23:22:55:2c:62:81:c0:1c:4b:f6:e9:6e:
         b8:19:6d:84:a1:90:66:f3:10:3a:70:82:b9:62:7e:83:f8:09:
         65:12:48:77:fb:2a:90:f5:44:7a:ab:37:1e:4a:98:9e:f1:9a:
         8e:07:83:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:22 2026 by rpki-client