Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
File:                     DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft (raw, json)
Hash identifier:          PzaaGYWYQO45gIwvVY7TdT/RmNZ7qE1MxZ3f/flnKpQ=
Subject key identifier:   9C:87:17:B4:6B:EE:B1:2E:BA:9B:E7:93:62:1E:5E:61:F3:18:02:2D
Authority key identifier: 0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3
Certificate issuer:       /CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3
Certificate serial:       019D28BB24D7C6FB12803AD82110695275A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
Manifest number:          188A
Signing time:             Thu 26 Mar 2026 06:00:46 +0000
Manifest this update:     Thu 26 Mar 2026 06:00:46 +0000
Manifest next update:     Fri 27 Mar 2026 06:00:46 +0000
Files and hashes:         1: DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl (hash: /KQGBn+L+3CEDLPW3CSF9C609oXAcJ1cSXuu4ScxIQo=)
                          2: KAtyNFRu0nGkFIQ31UZVhuZVup8.roa (hash: YYWx9qqk5yZ7cfiJEDfLmx13WTy9RC2Y4Yty+5dwt2A=)
                          3: Mx6UIzbNO3Bm-ZPN13wn4uov6Qg.roa (hash: KtCxVhRpFwySEkS5UZDhWr1MQTEnHKhuscd/bkCMZDA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:24:d7:c6:fb:12:80:3a:d8:21:10:69:52:75:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3
        Validity
            Not Before: Mar 26 06:00:46 2026 GMT
            Not After : Mar 27 06:00:46 2026 GMT
        Subject: CN=9c8717b46beeb12eba9be793621e5e61f318022d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9d:7d:41:72:8a:3f:13:51:b2:14:90:aa:06:
                    00:45:b7:59:b9:b5:93:b9:e6:f8:4b:d1:94:8f:45:
                    2a:cb:7d:74:69:99:d8:c4:7c:02:3b:d1:b3:32:a8:
                    08:43:2a:46:fc:cc:3a:a8:98:01:1a:7e:41:87:2d:
                    0e:96:45:78:78:af:cf:95:79:36:33:2f:e1:60:ac:
                    23:ad:7d:9f:8a:be:9b:57:35:b4:b9:36:df:1f:ed:
                    35:e3:e4:fc:80:fa:8e:f8:ba:bc:57:0e:90:13:54:
                    fb:75:62:3f:f2:fa:31:23:11:5b:1e:ca:e7:25:a8:
                    75:02:1e:4e:67:f8:58:39:c7:9b:8c:62:ca:a4:1d:
                    b2:a8:80:3b:ae:8f:a4:4e:ad:8a:63:04:b0:14:79:
                    3c:a4:6b:13:1d:92:95:08:a7:a0:52:ee:73:ee:45:
                    dc:13:48:fa:9c:05:f6:76:e0:bd:cb:31:83:51:6d:
                    49:ba:6e:ca:6a:09:d1:21:89:50:a4:db:7b:0b:43:
                    44:e6:18:70:d8:03:8f:d2:1a:ef:c5:1a:71:b3:76:
                    39:f9:b0:22:fb:ab:6b:ea:32:eb:ad:d1:c5:15:ec:
                    36:eb:95:84:a8:10:48:8f:d2:03:72:f0:63:10:7d:
                    1a:2a:9c:e5:6f:75:95:20:43:57:c0:71:f4:1b:2a:
                    f6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:87:17:B4:6B:EE:B1:2E:BA:9B:E7:93:62:1E:5E:61:F3:18:02:2D
            X509v3 Authority Key Identifier:
                keyid:0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:55:58:84:20:35:e3:54:f7:7a:f1:26:5b:3b:5d:a7:40:3a:
         39:41:ab:0b:07:0c:52:ee:cb:98:48:81:af:6f:15:49:88:9d:
         ca:ed:7d:c0:f1:27:6b:d5:f2:9c:be:5a:9d:fc:9c:83:a3:51:
         02:49:35:a6:33:be:15:51:17:c9:8a:b6:d9:a3:39:0b:7d:61:
         34:95:a4:80:d8:ab:66:3d:f7:ae:e0:8e:69:6a:18:04:94:09:
         65:52:9b:1a:e6:4b:0b:22:48:fb:07:33:31:2a:ff:e3:47:99:
         cc:97:7f:be:77:4b:f1:5d:30:67:6b:cd:a1:42:85:e9:55:cc:
         21:0f:c5:8d:66:e7:28:5a:f5:0f:8f:9e:ef:0a:bd:98:9a:45:
         ea:9b:6a:59:1e:08:9e:2c:ae:80:e7:30:1c:d3:4c:a7:ad:a5:
         96:60:3a:79:ad:8f:a0:32:fc:da:9a:53:79:86:7c:4f:c2:81:
         87:df:3d:0f:d1:85:9a:6f:d3:01:c4:7b:40:1d:bc:c1:ae:96:
         bd:0b:69:1b:f6:6b:76:ed:da:6d:eb:34:29:c3:5e:64:be:c7:
         b1:53:7e:af:50:d6:28:ab:9c:9a:a3:06:d6:be:70:fb:d9:fc:
         d5:a9:3a:0d:29:2e:87:e4:de:5a:4a:37:a4:5d:4c:a7:81:9a:
         c7:18:78:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:47:05 2026 by rpki-client