Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
File:                     pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft (raw, json)
Hash identifier:          RUIeVe3yJYw8y9gju92lVeKH+cih7rmLTVYFnWque/0=
Subject key identifier:   24:C8:BD:E4:FF:01:66:36:55:12:0A:AD:4D:06:6A:C7:5D:94:36:9D
Authority key identifier: A4:C9:3A:B3:64:C8:78:32:E7:77:62:26:EE:E6:C1:31:DB:E1:53:BB
Certificate issuer:       /CN=a4c93ab364c87832e7776226eee6c131dbe153bb
Certificate serial:       019D273A9F59429CE0B7F232643E898F581B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
Manifest number:          1888
Signing time:             Wed 25 Mar 2026 23:00:46 +0000
Manifest this update:     Wed 25 Mar 2026 23:00:46 +0000
Manifest next update:     Thu 26 Mar 2026 23:00:46 +0000
Files and hashes:         1: lI1XK5SZ4unF2gsULOFdifpJAaI.roa (hash: rfS2OFj3wmP/4G5TYdNqf/vwvU8JRB0c9MwtD5rUi20=)
                          2: pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl (hash: kFrEawdDwrsRJTEtvu7HvvD2dt18OHF6CDYqFLgFmCE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:9f:59:42:9c:e0:b7:f2:32:64:3e:89:8f:58:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4c93ab364c87832e7776226eee6c131dbe153bb
        Validity
            Not Before: Mar 25 23:00:46 2026 GMT
            Not After : Mar 26 23:00:46 2026 GMT
        Subject: CN=24c8bde4ff01663655120aad4d066ac75d94369d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9e:0a:5e:d4:e1:ba:e8:37:7e:96:b1:52:35:
                    8f:21:b7:a2:ff:5b:fa:b3:02:b0:24:fc:6c:25:39:
                    27:16:7d:89:d4:df:03:f6:fe:2a:b0:70:60:2d:01:
                    e9:51:1b:26:d9:c6:25:43:21:c1:83:d0:4e:45:e8:
                    84:81:63:40:8e:a2:55:9c:85:38:24:1e:fb:1b:19:
                    6c:ed:18:5e:ad:4e:b3:d8:9f:ba:31:41:49:03:00:
                    56:39:1d:de:65:97:7d:b6:a1:aa:c0:69:a0:71:00:
                    45:83:d2:9b:9f:69:19:58:d7:97:90:2f:4b:af:9b:
                    84:b2:67:e7:d3:59:7f:01:66:b1:01:95:34:89:42:
                    bd:64:73:cf:33:fe:1e:0e:0c:3c:14:00:17:02:fa:
                    e2:c3:89:03:7b:19:1f:18:91:13:10:bc:8e:05:22:
                    ce:d1:e4:60:93:37:5c:3d:13:ef:89:24:3b:a6:52:
                    54:aa:c6:9a:3a:f3:92:1d:17:95:ab:dc:a8:b5:9c:
                    b7:f0:49:59:da:b3:0d:d5:5d:25:56:59:b7:51:7f:
                    55:1f:28:22:5f:c5:2a:7f:fe:8c:b0:af:9f:1d:b7:
                    1a:0e:cf:46:58:f7:a2:1c:f9:3a:a1:07:10:de:e9:
                    a3:04:94:bf:2e:f1:c6:14:c1:31:7a:ce:a0:04:1c:
                    d1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C8:BD:E4:FF:01:66:36:55:12:0A:AD:4D:06:6A:C7:5D:94:36:9D
            X509v3 Authority Key Identifier:
                keyid:A4:C9:3A:B3:64:C8:78:32:E7:77:62:26:EE:E6:C1:31:DB:E1:53:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:3f:6f:33:9f:ee:2a:08:b3:4e:d7:81:e7:e0:1f:b5:87:9b:
         a9:45:ab:6b:83:ba:04:d4:6d:22:8b:fb:54:62:2c:1e:91:b8:
         03:b7:d1:bc:43:02:a6:39:a3:f2:cf:77:bf:a3:3c:bc:94:07:
         40:2c:76:2c:29:94:e6:6f:15:91:76:09:29:76:bf:85:8e:af:
         ae:f2:1a:1e:52:87:08:c0:48:ea:c1:fc:fc:0f:df:df:78:61:
         ff:44:e0:b0:b8:f0:f7:a1:a4:ff:9a:10:c2:46:c4:8e:d6:f8:
         8e:35:50:83:7c:76:ae:93:d1:47:1f:d0:f6:d0:df:8a:b9:d8:
         73:f5:ee:93:6b:2f:5b:45:99:e0:3d:37:7b:8c:f6:2e:01:31:
         f1:c3:54:9a:a5:a1:b6:eb:3b:f6:4d:f6:c8:0d:1f:8a:d0:0b:
         cf:5d:95:ac:72:51:e7:22:3f:ea:56:bc:d4:79:56:50:a5:ed:
         f4:f2:f7:cc:7a:a7:8c:b3:6b:39:8f:5e:65:c0:93:44:98:fb:
         60:d7:8b:2a:5c:2e:73:5d:47:1d:5c:dd:78:32:3c:7b:07:cd:
         94:34:66:a8:e2:14:e6:58:fd:e5:8e:34:d9:87:ea:87:7c:d2:
         07:47:b0:9f:6c:85:97:18:89:4a:b1:69:82:bb:0d:8c:e4:bf:
         24:7c:65:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:13 2026 by rpki-client