Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft
File:                     d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft (raw, json)
Hash identifier:          Nwt2PxXu4w5gx/6Q77gn+Qv2NNwJ7ipbndl5ATfslXo=
Subject key identifier:   6E:BB:D5:C7:72:79:7D:B1:37:FE:2D:6E:D6:19:58:B1:35:77:29:78
Authority key identifier: 77:C7:B4:57:F9:AF:04:29:24:14:23:73:CE:09:0F:7F:A8:76:25:7E
Certificate issuer:       /CN=77c7b457f9af042924142373ce090f7fa876257e
Certificate serial:       019D2884CCF49E9BF30EDE795E676E3D0E2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft
Manifest number:          1147
Signing time:             Thu 26 Mar 2026 05:01:24 +0000
Manifest this update:     Thu 26 Mar 2026 05:01:24 +0000
Manifest next update:     Fri 27 Mar 2026 05:01:24 +0000
Files and hashes:         1: VxfD5b_ylAB_MTnBIwWLQed3wsQ.roa (hash: dPV7nvv66J/N7qMIMaqxbPZi7u5SK+lm/oBP/6Z99x8=)
                          2: d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl (hash: khei/Oi/4j9n1nCq6c02rHTbA6EizO/mwB8v0g1S2so=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:cc:f4:9e:9b:f3:0e:de:79:5e:67:6e:3d:0e:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c7b457f9af042924142373ce090f7fa876257e
        Validity
            Not Before: Mar 26 05:01:24 2026 GMT
            Not After : Mar 27 05:01:24 2026 GMT
        Subject: CN=6ebbd5c772797db137fe2d6ed61958b135772978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:bd:54:b9:5b:24:c2:23:84:eb:87:dc:af:a0:
                    92:c5:4b:a1:29:da:64:27:ce:9f:13:9b:30:f6:52:
                    41:c0:e5:75:cf:8a:9d:15:68:7a:00:3f:55:4e:21:
                    4e:de:4d:80:32:86:fd:04:f9:29:3b:e9:66:aa:3b:
                    e2:56:6a:ab:28:a1:4b:85:85:9a:71:17:b4:b9:74:
                    75:a5:49:ce:46:8c:c8:51:d0:67:64:64:18:90:9c:
                    52:e7:5f:de:99:4e:c0:c0:97:56:26:5f:44:f5:4d:
                    6e:ab:ef:cc:b9:7e:22:82:17:90:8b:d8:f4:1e:68:
                    17:be:8c:d8:f5:7c:e4:0d:f0:9d:af:8a:cc:2a:b6:
                    34:22:eb:8d:d8:cf:59:82:6a:10:f1:d1:2e:8d:63:
                    4c:d4:53:9c:7b:1a:39:76:d8:10:4d:46:72:17:da:
                    23:01:ae:5c:ae:eb:0c:a8:04:36:ce:13:67:a1:db:
                    b0:f9:41:c3:83:49:9f:da:17:f6:1d:26:3d:38:45:
                    a6:6e:05:db:ae:c9:a0:6e:01:d5:b4:08:d0:ac:ae:
                    95:ac:2b:16:da:e9:3b:80:99:7f:83:08:df:0b:56:
                    e5:cc:90:ce:85:56:2f:63:e1:bb:4c:84:73:0b:ef:
                    cd:55:34:cc:01:cf:e2:32:2e:8d:5e:1b:42:17:73:
                    12:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:BB:D5:C7:72:79:7D:B1:37:FE:2D:6E:D6:19:58:B1:35:77:29:78
            X509v3 Authority Key Identifier:
                keyid:77:C7:B4:57:F9:AF:04:29:24:14:23:73:CE:09:0F:7F:A8:76:25:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:21:d8:41:ca:ef:08:df:25:e9:f4:c9:b6:67:70:2c:88:54:
         c2:a1:b9:ee:35:24:c2:d3:24:b0:90:27:90:00:dd:60:bd:3e:
         6f:48:fa:a1:ff:20:63:d5:db:29:ec:a2:9f:c2:ab:11:d2:dd:
         08:84:3c:a3:8c:0e:d6:70:75:7b:a3:19:14:08:eb:fb:a7:78:
         fa:e8:89:3b:50:03:e4:90:29:e0:8c:83:49:99:00:4b:3a:ba:
         26:23:1b:b6:02:c5:12:41:b7:cf:29:58:ad:dc:1e:ae:5d:94:
         0e:55:50:89:0c:47:9e:21:4b:c1:46:99:76:ec:77:29:4e:6f:
         ce:91:cb:33:dc:9d:9c:8e:0d:af:d3:90:f0:2a:13:13:ff:1d:
         7a:a9:26:7f:a2:3e:32:11:09:a9:77:9d:6c:35:60:ac:35:f0:
         52:e5:44:f5:86:f5:49:b5:ba:12:ef:b5:85:06:e5:2e:d9:95:
         5e:19:d0:48:b3:dc:dd:35:8c:d0:93:78:6a:bb:c7:8d:3c:d9:
         d2:2b:88:37:9a:8b:bd:75:60:72:c7:fa:c5:53:d0:6f:c2:14:
         03:56:34:97:32:f8:d8:a7:9c:38:1a:f1:83:9a:9d:17:f6:b1:
         cd:e6:10:e1:4e:e8:ee:bf:3a:10:b8:b3:e7:2a:79:01:27:d1:
         9b:99:f6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:55:45 2026 by rpki-client