Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
File:                     k47pUc2rw86AXsjfC_NAO9-pxlc.mft (raw, json)
Hash identifier:          FgdhBK7uBUH6cUNVp3zdWQ3K6RPWDC+lyz2AkyIu5qA=
Subject key identifier:   E2:26:BE:80:C2:8F:6A:19:D9:EC:F4:29:4C:08:4A:B6:28:47:7D:90
Authority key identifier: 93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57
Certificate issuer:       /CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657
Certificate serial:       019D2816576CEBF7C71EEBC61FCFC8A229A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
Manifest number:          1887
Signing time:             Thu 26 Mar 2026 03:00:45 +0000
Manifest this update:     Thu 26 Mar 2026 03:00:45 +0000
Manifest next update:     Fri 27 Mar 2026 03:00:45 +0000
Files and hashes:         1: Q_ee8py1cZcXFZRaXUkP3TowZDc.roa (hash: w/aCOcSaWrdKUscNCfCU/09gr8uTxVVmhx8jtZuT2dI=)
                          2: ReMMCAErUt1VBD8DVEIFL-Hpask.roa (hash: wWfg4EEHh6Y+sLSB59zGm12sGRwnX3Xts8Wy3xO33k0=)
                          3: k47pUc2rw86AXsjfC_NAO9-pxlc.crl (hash: eE3LTQjJ7Gt2ZVdESbpg6Rq7pCddke9C26vOBpcw1vM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 03:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:57:6c:eb:f7:c7:1e:eb:c6:1f:cf:c8:a2:29:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657
        Validity
            Not Before: Mar 26 03:00:45 2026 GMT
            Not After : Mar 27 03:00:45 2026 GMT
        Subject: CN=e226be80c28f6a19d9ecf4294c084ab628477d90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b0:e0:b7:6b:bc:d4:75:5e:15:fa:df:f1:cb:
                    6d:95:6a:5e:bb:61:8c:d8:75:d8:b0:d8:30:b9:da:
                    86:32:41:c8:b7:2d:59:7b:7a:8c:3e:71:42:6d:f7:
                    b1:de:3a:f0:2e:0f:19:14:c3:ea:73:d5:84:32:c0:
                    ca:db:d4:99:40:63:0d:eb:ec:f4:e5:da:fb:59:97:
                    01:4f:11:85:82:5b:95:be:fa:f2:52:a9:03:67:f8:
                    80:bd:a8:1b:66:c3:61:65:6f:52:ba:0d:f8:71:9b:
                    a4:17:17:bd:08:ff:3b:28:b3:a3:4a:43:19:73:ea:
                    27:8a:b2:7f:e0:fe:90:90:0d:a9:3b:20:1b:f5:40:
                    eb:06:c7:19:3e:ec:f7:84:c4:a6:0e:9f:8b:20:91:
                    8e:51:91:f1:a2:2c:63:72:72:f5:37:a7:26:cd:5f:
                    a9:07:d2:ba:7a:7b:4c:10:55:6e:f2:c2:ca:a4:a1:
                    3e:43:cc:5a:fa:1e:d1:86:c1:70:28:3c:da:2f:d0:
                    08:18:e7:df:0d:dc:f5:0c:03:dc:80:b2:6a:7e:f3:
                    53:fe:01:49:fb:97:06:13:c6:30:db:9e:cf:d4:0d:
                    8f:50:2a:d4:69:9d:e7:46:c5:35:d9:c1:07:a9:dd:
                    b3:c5:8d:32:f6:ef:ef:30:d0:a3:97:c5:5a:5c:7d:
                    cc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:26:BE:80:C2:8F:6A:19:D9:EC:F4:29:4C:08:4A:B6:28:47:7D:90
            X509v3 Authority Key Identifier:
                keyid:93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:51:c0:62:96:22:63:3e:e9:62:44:68:03:04:58:ea:09:54:
         f2:19:34:d3:15:66:93:0a:60:31:dd:23:d7:68:fd:8b:42:39:
         02:30:3d:9f:82:00:a1:1b:f8:4b:e1:9b:06:ea:21:89:9c:f0:
         c4:e1:61:66:12:72:88:13:0b:98:20:67:47:54:ba:80:d3:7a:
         58:2c:d2:b1:82:6a:c2:63:8c:17:c6:c6:2e:ec:54:cf:64:0f:
         b6:56:ca:66:87:c9:3b:64:60:1d:21:60:b0:56:ad:a1:95:21:
         7c:20:9b:7d:1d:33:9a:3c:61:37:95:b7:20:ef:41:1e:fa:48:
         26:db:89:43:88:36:b4:c9:45:a7:79:ed:88:de:42:99:a1:a8:
         69:c5:90:90:b4:25:32:05:e8:a7:ff:4a:e7:83:f0:86:74:57:
         f2:55:49:d1:78:01:78:a9:01:0e:8c:a0:9a:98:da:46:44:c5:
         09:e9:1e:dd:09:f6:57:66:da:ba:74:5a:89:23:23:63:6c:8b:
         3f:30:00:e1:ee:57:97:c7:a4:05:c0:3f:2e:ae:6e:d0:c7:c4:
         94:a5:c5:d8:79:7a:65:36:5f:f9:68:b9:71:48:c8:8d:d1:c2:
         1c:36:ad:2a:98:c8:56:eb:e6:b5:9f:a1:70:23:7d:21:8c:e9:
         37:cc:68:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:11:43 2026 by rpki-client