Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft
File:                     do75wQS-IihL97J1bSqBc5RqOG4.mft (raw, json)
Hash identifier:          9eQCrMsZZJ2C6sEpoAP8FEeDIpxsd2LH6E4V820VdXg=
Subject key identifier:   C4:9C:8E:22:9A:10:FA:AD:CA:0A:1F:67:00:75:F4:AF:0D:6F:7F:4D
Authority key identifier: 76:8E:F9:C1:04:BE:22:28:4B:F7:B2:75:6D:2A:81:73:94:6A:38:6E
Certificate issuer:       /CN=768ef9c104be22284bf7b2756d2a8173946a386e
Certificate serial:       019D27A8F4920B41FACE6815DD7A1CB2B8C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/do75wQS-IihL97J1bSqBc5RqOG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft
Manifest number:          1886
Signing time:             Thu 26 Mar 2026 01:01:17 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:17 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:17 +0000
Files and hashes:         1: IjagGyFWurObl2pWMvY0N09uD1o.roa (hash: hWJUOuTqtYv/o+T0eJBFqPEt0KW/yUBcSYg2LFL48DQ=)
                          2: do75wQS-IihL97J1bSqBc5RqOG4.crl (hash: mb45Q86ehu5DlcsKQwDp4DATqJQMCMUEROyCHZUYo+8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/do75wQS-IihL97J1bSqBc5RqOG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:f4:92:0b:41:fa:ce:68:15:dd:7a:1c:b2:b8:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=768ef9c104be22284bf7b2756d2a8173946a386e
        Validity
            Not Before: Mar 26 01:01:17 2026 GMT
            Not After : Mar 27 01:01:17 2026 GMT
        Subject: CN=c49c8e229a10faadca0a1f670075f4af0d6f7f4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0b:58:24:7b:af:e8:16:2b:c4:e9:a1:e1:f0:
                    64:e6:58:47:3a:39:f3:00:99:ef:bd:0e:13:f6:8f:
                    67:8d:a9:09:44:76:38:40:97:6b:af:eb:e5:10:1c:
                    c2:eb:2c:38:cc:9a:3f:ef:d3:2d:fd:9e:28:14:18:
                    ba:e0:8e:bc:a9:9d:d5:ae:c0:74:16:d6:35:9c:da:
                    ff:43:de:8f:f2:b0:4c:52:e5:8a:48:ca:c8:cb:00:
                    98:8f:eb:41:89:d4:25:28:6e:21:b3:e3:22:2f:cf:
                    51:e0:bf:64:01:1c:dd:b7:58:6d:6c:b0:a3:c4:df:
                    4a:4e:af:87:0b:04:8f:46:99:06:71:73:00:12:f1:
                    93:6f:bd:44:63:87:83:eb:9d:c4:2a:2e:4e:6e:e7:
                    f1:5b:77:91:55:d4:04:65:bd:16:cd:b9:df:19:92:
                    3d:b0:b2:a7:eb:22:a7:d6:ae:8d:ef:1b:95:46:24:
                    16:84:3e:45:a8:d7:1a:7b:49:87:ee:a0:44:8e:3a:
                    61:80:d7:fb:11:8f:4f:13:0b:de:9d:a3:11:7d:11:
                    d2:cf:d7:da:f1:35:36:54:f4:e3:0a:4b:a1:45:9b:
                    42:95:de:ab:d7:75:bd:66:2c:c1:07:cd:8e:32:68:
                    70:96:23:2b:7c:54:12:d1:7f:a2:14:27:11:73:98:
                    cc:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:9C:8E:22:9A:10:FA:AD:CA:0A:1F:67:00:75:F4:AF:0D:6F:7F:4D
            X509v3 Authority Key Identifier:
                keyid:76:8E:F9:C1:04:BE:22:28:4B:F7:B2:75:6D:2A:81:73:94:6A:38:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do75wQS-IihL97J1bSqBc5RqOG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:19:10:18:2c:91:ed:ca:30:24:a3:84:7a:5d:6d:5f:d7:1e:
         46:5a:46:fe:c0:53:00:36:cf:eb:05:5d:78:51:2a:2b:f7:1e:
         00:01:ee:24:be:a1:c8:c5:88:81:c4:64:24:27:5e:24:c8:09:
         85:c2:54:25:67:70:d5:47:0b:12:5e:d8:20:e0:5a:8d:50:b8:
         aa:b6:8b:e6:7d:e3:f4:4e:04:c2:c9:ab:07:53:1e:0c:bb:cd:
         4b:99:db:dc:f2:bb:c5:20:b9:0b:9b:24:de:52:27:55:90:b9:
         e0:03:a6:46:eb:d1:86:69:a9:3a:58:0e:4a:d6:c0:75:96:5d:
         b2:83:0d:33:81:65:26:ef:8b:90:97:67:37:82:d3:48:22:61:
         3f:c4:1a:4b:ef:26:31:7a:3d:ca:37:a8:3d:a4:67:a0:60:dd:
         d1:75:2c:24:dc:bb:e3:ce:28:ba:62:9d:56:1b:18:d1:bf:8c:
         7f:d1:94:a6:ba:d6:8b:f0:88:32:73:50:47:8a:fa:3a:90:2f:
         09:13:c6:e5:10:77:38:9a:ea:11:00:57:5c:83:ba:03:2f:b8:
         7b:b8:f0:15:57:aa:8b:d9:21:4e:9d:9a:37:6f:4b:38:c4:bf:
         b4:4c:4c:14:9c:8a:4e:dd:59:6d:cb:87:38:a0:c9:70:23:1d:
         1b:27:72:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqPSSC0H6zmgV3XocsrjGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2OGVmOWMxMDRiZTIyMjg0YmY3YjI3NTZkMmE4MTczOTQ2
YTM4NmUwHhcNMjYwMzI2MDEwMTE3WhcNMjYwMzI3MDEwMTE3WjAzMTEwLwYDVQQD
EyhjNDljOGUyMjlhMTBmYWFkY2EwYTFmNjcwMDc1ZjRhZjBkNmY3ZjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QtYJHuv6BYrxOmh4fBk5lhHOjnz
AJnvvQ4T9o9njakJRHY4QJdrr+vlEBzC6yw4zJo/79Mt/Z4oFBi64I68qZ3VrsB0
FtY1nNr/Q96P8rBMUuWKSMrIywCYj+tBidQlKG4hs+MiL89R4L9kARzdt1htbLCj
xN9KTq+HCwSPRpkGcXMAEvGTb71EY4eD653EKi5ObufxW3eRVdQEZb0WzbnfGZI9
sLKn6yKn1q6N7xuVRiQWhD5FqNcae0mH7qBEjjphgNf7EY9PEwvenaMRfRHSz9fa
8TU2VPTjCkuhRZtCld6r13W9ZizBB82OMmhwliMrfFQS0X+iFCcRc5jMaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMScjiKaEPqtygofZwB19K8Nb39NMB8GA1UdIwQY
MBaAFHaO+cEEviIoS/eydW0qgXOUajhuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG83NXdRUy1JaWhMOTdKMWJTcUJjNVJxT0c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84NmI0MDItZTQzYi00YjdlLTk4ZWUt
YjZiNzRjYjI5OWIwLzEvZG83NXdRUy1JaWhMOTdKMWJTcUJjNVJxT0c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC84NmI0MDItZTQzYi00YjdlLTk4ZWUtYjZiNzRjYjI5OWIw
LzEvZG83NXdRUy1JaWhMOTdKMWJTcUJjNVJxT0c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIxkQGCyR
7cowJKOEel1tX9ceRlpG/sBTADbP6wVdeFEqK/ceAAHuJL6hyMWIgcRkJCdeJMgJ
hcJUJWdw1UcLEl7YIOBajVC4qraL5n3j9E4EwsmrB1MeDLvNS5nb3PK7xSC5C5sk
3lInVZC54AOmRuvRhmmpOlgOStbAdZZdsoMNM4FlJu+LkJdnN4LTSCJhP8QaS+8m
MXo9yjeoPaRnoGDd0XUsJNy7484oumKdVhsY0b+Mf9GUprrWi/CIMnNQR4r6OpAv
CRPG5RB3OJrqEQBXXIO6Ay+4e7jwFVeqi9khTp2aN29LOMS/tExMFJyKTt1ZbcuH
OKDJcCMdGydyWA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:09:57 2026 by rpki-client