Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
File:                     AsLBh9mLRgOATtEWWttFCbYwqDo.mft (raw, json)
Hash identifier:          ZHegWT2WiKTuB6mewF5AUg0IyArukhChoXoXv/QGHnQ=
Subject key identifier:   E7:A8:26:2F:5C:E4:7A:6A:B9:46:8C:62:27:3C:A1:7C:C8:E9:AA:10
Authority key identifier: 02:C2:C1:87:D9:8B:46:03:80:4E:D1:16:5A:DB:45:09:B6:30:A8:3A
Certificate issuer:       /CN=02c2c187d98b4603804ed1165adb4509b630a83a
Certificate serial:       019D28BB937210357FA664E3ECD5969235E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
Manifest number:          0D7C
Signing time:             Thu 26 Mar 2026 06:01:14 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:14 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:14 +0000
Files and hashes:         1: AsLBh9mLRgOATtEWWttFCbYwqDo.crl (hash: n1zFbgRyK0BnIhUbXpmNH9JhsxGfk7vIVDuphBetSWE=)
                          2: WuVnfkB6n82FOg4W-IcUzY3Fe0M.roa (hash: DZE6yI97kbfPPegu/0turhmXzDIWBsKrThF8bRlEJlI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:93:72:10:35:7f:a6:64:e3:ec:d5:96:92:35:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02c2c187d98b4603804ed1165adb4509b630a83a
        Validity
            Not Before: Mar 26 06:01:14 2026 GMT
            Not After : Mar 27 06:01:14 2026 GMT
        Subject: CN=e7a8262f5ce47a6ab9468c62273ca17cc8e9aa10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:72:83:fe:8a:b8:4a:af:a7:7d:55:52:f4:4c:
                    54:84:21:cc:ae:fb:46:af:50:ae:a1:60:33:cc:26:
                    28:a5:ef:90:1d:5e:13:be:83:6a:90:2d:61:59:f7:
                    e4:f4:af:fa:0b:4e:fe:02:99:f7:8c:b3:48:35:bb:
                    a2:40:34:e4:ba:ac:af:35:14:c7:7b:23:60:01:0f:
                    bb:6b:16:f8:6d:f2:83:eb:e8:24:79:eb:87:7d:66:
                    1b:1c:be:f6:c1:17:32:d8:45:7f:ac:0f:60:20:95:
                    66:a2:d7:8d:09:85:e4:92:30:f9:a3:68:87:9f:42:
                    9f:18:36:a4:45:3d:25:58:3c:07:c8:03:ac:64:c9:
                    ab:c0:b4:5f:73:e0:70:15:07:ea:62:a0:61:79:d8:
                    39:99:ee:3b:9d:0e:f9:d6:c1:a4:e1:34:7e:57:69:
                    7e:fe:3a:56:df:7e:2b:7b:ee:fd:c9:27:16:62:99:
                    cb:b0:48:86:a1:52:88:ec:57:e6:60:f6:1d:3a:24:
                    1a:f6:8f:16:11:42:cf:f1:28:55:30:58:ce:17:ea:
                    ec:87:59:7b:f3:7d:8d:0c:1c:49:d5:34:04:cf:44:
                    98:81:63:29:7e:1a:f8:75:f5:47:c8:37:96:7d:f7:
                    c0:90:55:d0:af:3b:6b:82:64:71:e8:03:57:44:59:
                    6a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A8:26:2F:5C:E4:7A:6A:B9:46:8C:62:27:3C:A1:7C:C8:E9:AA:10
            X509v3 Authority Key Identifier:
                keyid:02:C2:C1:87:D9:8B:46:03:80:4E:D1:16:5A:DB:45:09:B6:30:A8:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:5e:ed:3a:3f:7b:fb:c0:5a:b2:e8:cc:e1:c2:c3:de:83:79:
         7d:b0:30:44:6e:5e:df:7a:b3:bd:8c:40:a1:b2:60:2c:74:50:
         ad:86:80:59:05:a1:84:43:9e:01:1e:1d:e9:e3:f6:76:13:df:
         43:fa:12:73:7c:67:ca:53:8a:15:4c:a6:6e:62:e6:66:03:39:
         cb:a8:ac:44:03:62:78:5f:79:69:bd:be:68:b5:c6:5c:f1:bb:
         53:8a:f9:31:6a:f4:53:8b:ad:20:6e:bf:75:b1:62:2e:39:3c:
         29:4b:af:14:38:70:15:96:82:85:ae:0a:cc:ee:11:98:dc:d5:
         44:fd:a1:d0:22:3e:7a:7c:0c:99:a0:13:d4:88:09:c8:b4:a5:
         27:d7:db:51:28:bd:7b:4b:7e:1d:6c:43:8c:7b:61:c9:19:a8:
         82:ce:0e:24:39:6f:6b:26:c8:23:df:b5:16:7b:c9:9e:3b:55:
         62:06:f2:9a:a2:19:63:95:b1:6e:f7:e3:31:e4:9d:4f:33:8a:
         05:cc:d4:5b:bc:ed:64:89:ce:c8:3f:f0:1b:03:19:79:7f:29:
         8d:94:32:ea:fe:5d:d1:48:65:ea:cc:d6:70:a8:8e:10:02:19:
         ad:69:3a:6e:b6:4f:1a:22:77:89:93:8a:3d:86:ae:c2:c4:c9:
         a8:26:92:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:01:45 2026 by rpki-client