Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
File:                     250Zf7vuKh3MtPVXIqghDTEFsEI.mft (raw, json)
Hash identifier:          X0NZD6COYdEU/e9wHzvAjnonoJ2gWqmMVwCEWYgZ50I=
Subject key identifier:   D1:DE:09:03:BF:85:72:69:10:0C:57:76:3C:80:5D:AE:44:F8:BB:2F
Authority key identifier: DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
Certificate issuer:       /CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Certificate serial:       019D284DCAC44DE7A6F7020E11D176A44566
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
Manifest number:          1454
Signing time:             Thu 26 Mar 2026 04:01:19 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:19 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:19 +0000
Files and hashes:         1: 250Zf7vuKh3MtPVXIqghDTEFsEI.crl (hash: /sVLCDgf+1LNb3W8L/KAGWVCjhs/W32HXhQN1LZEsIQ=)
                          2: 6mzFB1254QH_scGmAESdwoJirew.roa (hash: ZqsDszUXMXErK5gprgiRcwaopoCcJJcjnl51ncaMD10=)
                          3: CHwEEgIG46KrfCZubP2sgaYyQKQ.roa (hash: 1VYNsORWI1Jnmpu8/KvoEN63QsZYW/dgbty42oD0bdY=)
                          4: NJD3vCg8LdZrgIhkarwqZcVQWlY.roa (hash: Eumr2+B2PPkKKeprpzIU6OMcVz3MM+ic7NoPgJaopMw=)
                          5: OIl66vV-_xpjBLdW_e37i3MHj7k.roa (hash: cSop5Hl7odCbvTkJ91gKwEE+cGwI/Owv1OQiaa9DbOI=)
                          6: V_9jRl4u_GQEezWDQos1yT-0bqE.roa (hash: F7HIunKap/oz5qtM7/jZgccS28Y+qRZ8R7fBgjRlXdI=)
                          7: iNKNZeSZcVKtwBDeM9cWD2QfKgw.roa (hash: Ufjl8hlKJynYjHQsITek/FLuhc46CrmvrHtUUc2zMOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 04:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:ca:c4:4d:e7:a6:f7:02:0e:11:d1:76:a4:45:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
        Validity
            Not Before: Mar 26 04:01:19 2026 GMT
            Not After : Mar 27 04:01:19 2026 GMT
        Subject: CN=d1de0903bf857269100c57763c805dae44f8bb2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f2:3e:c2:02:bf:53:64:9c:f0:f3:70:f1:c1:
                    e8:7c:a1:04:cb:44:ac:0e:84:3c:3f:b2:e3:9a:dc:
                    56:29:72:08:83:f8:ff:09:10:8a:67:af:4b:ba:ca:
                    6f:a8:c7:74:e7:32:33:fb:75:58:be:c1:f9:4b:c0:
                    10:7d:c9:36:87:b3:93:ba:84:10:7a:12:52:3c:0d:
                    cb:f8:9b:c5:fe:de:83:9f:1c:19:ad:ef:70:18:27:
                    f8:e9:81:f9:1c:84:a5:4a:5f:9a:15:e1:db:28:64:
                    29:86:c0:43:92:1f:96:de:90:f4:35:fd:f6:e2:22:
                    fc:21:d4:ab:df:61:96:0b:72:3f:08:df:e9:63:e2:
                    b4:84:2b:d8:6e:1e:b1:af:63:bb:b1:c5:73:4e:bd:
                    ea:6b:85:d5:fa:60:6b:98:36:62:0e:74:8c:9b:d6:
                    26:7d:48:c9:db:99:5c:a0:83:8a:59:24:22:65:ef:
                    4e:27:3c:d3:be:04:00:3f:f0:ac:e7:3a:c7:89:51:
                    78:68:bf:9e:5f:de:9c:f8:df:54:b4:d4:a8:8a:a1:
                    13:be:86:5f:59:c7:65:63:1f:ba:1a:18:87:5e:1f:
                    f8:3b:1d:50:05:2f:ca:ac:8b:7f:bf:67:75:63:39:
                    ee:e6:09:e1:ae:6d:1b:99:11:93:ce:26:03:6f:d0:
                    ff:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:DE:09:03:BF:85:72:69:10:0C:57:76:3C:80:5D:AE:44:F8:BB:2F
            X509v3 Authority Key Identifier:
                keyid:DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:b4:46:82:d3:92:b1:2d:89:35:3b:7a:44:58:8f:85:07:a8:
         e6:37:96:3c:20:6c:5e:4a:b9:ea:e1:ad:e0:f4:70:d5:4f:01:
         11:08:5d:24:c8:e0:91:1e:ef:a6:e6:ee:f7:ec:ff:3f:f0:95:
         6b:97:ab:2f:eb:a4:e1:54:2a:02:3a:b8:cf:9e:26:03:0f:db:
         d5:ab:46:0f:75:1b:eb:39:f4:88:66:48:c0:03:d5:b3:99:46:
         d6:bd:c2:0c:d5:c2:26:30:98:39:19:12:a2:8d:19:24:43:28:
         1f:17:c9:33:28:04:e8:6f:88:6c:96:b5:19:d5:3f:eb:97:92:
         36:4c:c9:69:8a:57:6d:19:35:be:40:e9:94:12:54:52:29:d8:
         a0:cb:47:d0:99:c2:72:09:dd:de:63:1b:23:ce:3f:a9:e3:d8:
         af:03:91:84:2b:af:b5:c3:ef:b5:86:a4:e3:09:16:8f:18:07:
         3f:ed:5d:67:c8:9b:4a:6c:26:7b:d4:28:24:98:d6:7f:38:53:
         a6:d0:73:78:6b:3a:1e:96:f3:2b:36:f7:74:6f:29:96:09:f6:
         e3:4a:0a:08:1e:00:e3:de:9b:cc:c9:1c:f1:e4:61:f0:23:aa:
         a7:61:f1:7a:58:86:b0:d7:17:46:ef:8d:14:dd:84:36:18:23:
         6d:b4:39:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:01:24 2026 by rpki-client