Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.mft
File:                     fPySsKdbia0uPFf3y6DkeGhCGc4.mft (raw, json)
Hash identifier:          NPlv7LtxjJYiLowJQinVWSeiNS8BfBbYat8B/rS8BYU=
Subject key identifier:   2A:11:1B:DA:50:78:1F:6B:EE:04:FF:64:34:40:8A:E7:2D:77:00:10
Authority key identifier: 7C:FC:92:B0:A7:5B:89:AD:2E:3C:57:F7:CB:A0:E4:78:68:42:19:CE
Certificate issuer:       /CN=7cfc92b0a75b89ad2e3c57f7cba0e478684219ce
Certificate serial:       019D2628886D1CB41206F00BCE524B4945DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.mft
Manifest number:          188B
Signing time:             Wed 25 Mar 2026 18:01:23 +0000
Manifest this update:     Wed 25 Mar 2026 18:01:23 +0000
Manifest next update:     Thu 26 Mar 2026 18:01:23 +0000
Files and hashes:         1: 06zDVhvC2wG0GB9x97qsiQizFTM.roa (hash: JvVnPN4nSkUYGY1CjK3ZJoX6NrGYaNBFt7orDkPoKJY=)
                          2: SFBk5U763P1fy8w9IXg_u7J_QVE.asa (hash: HY3zuNVCk+vA8waHsSxh/gtJfK12g23OYWACA1L2CUs=)
                          3: U87Q2NMvSj3QrC4k_pqy75MWuOQ.roa (hash: uDHwF0JT1FAD3yFvexfULGa75xAecjAscZ1J4KrEfUY=)
                          4: fPySsKdbia0uPFf3y6DkeGhCGc4.crl (hash: /jN5CbPAESDNDwkn3nd/+/Vj/oJfKTx8rIA+0ytcqxI=)
                          5: lGr9cYHRnCsNDCZfUo0W-DvnKzw.roa (hash: C+9twYg0QFPSJmRlw83x2KzBrS2F6s+54IkDQKWwdpc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:28:88:6d:1c:b4:12:06:f0:0b:ce:52:4b:49:45:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cfc92b0a75b89ad2e3c57f7cba0e478684219ce
        Validity
            Not Before: Mar 25 18:01:23 2026 GMT
            Not After : Mar 26 18:01:23 2026 GMT
        Subject: CN=2a111bda50781f6bee04ff6434408ae72d770010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f3:cc:63:0d:b0:de:fe:b4:b5:a1:2a:06:33:
                    e2:35:65:0d:30:8f:71:d6:9e:e8:f6:2f:f4:93:cd:
                    76:64:60:14:eb:cc:dd:e8:f0:25:41:f9:00:4c:30:
                    c6:d3:78:f7:40:4f:d9:28:3b:cf:50:a8:00:3f:b1:
                    4f:c7:52:28:6f:be:2b:3a:df:9a:f8:3a:2b:84:9e:
                    c0:48:b6:f8:11:11:94:d6:b9:aa:38:dd:04:61:4c:
                    02:c4:89:4c:ca:a5:61:d6:e7:42:ca:a5:e5:ad:f8:
                    ac:2d:df:ed:10:0b:56:de:75:a5:f8:42:10:cc:6e:
                    ae:c7:9f:84:d6:45:76:a3:08:b8:5e:1b:6a:ab:3a:
                    97:2b:91:86:64:fb:71:36:0d:41:3c:91:32:88:bf:
                    e1:ae:fe:00:9a:df:4f:9d:99:b6:84:a5:29:f5:1a:
                    83:e7:35:be:cb:39:92:92:83:10:6f:ab:4c:73:17:
                    ef:88:b3:45:73:90:51:45:3f:c3:24:40:1a:95:03:
                    74:0d:fd:a0:7a:73:a1:7b:08:2c:84:8a:2e:1f:05:
                    83:81:72:70:c5:d2:20:9d:bb:ab:dc:df:7d:8a:53:
                    27:19:ba:d6:5e:ce:db:36:dc:13:e0:24:ef:b2:f1:
                    b8:c2:dd:02:22:b9:91:11:40:a2:43:57:97:c4:58:
                    bf:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:11:1B:DA:50:78:1F:6B:EE:04:FF:64:34:40:8A:E7:2D:77:00:10
            X509v3 Authority Key Identifier:
                keyid:7C:FC:92:B0:A7:5B:89:AD:2E:3C:57:F7:CB:A0:E4:78:68:42:19:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:3c:bf:3f:df:36:99:bf:44:c4:d2:1f:09:29:b9:1c:7e:05:
         68:3d:22:12:e0:0f:17:eb:a5:15:26:11:47:87:80:b6:c2:32:
         a4:a0:f2:f3:6a:c7:0d:a2:fd:39:3f:14:a4:1a:99:a7:e0:bc:
         ea:2a:6a:3b:ba:f8:b5:5a:4f:fe:7f:22:a8:be:91:e8:f8:96:
         5b:3d:65:5c:27:30:ae:60:6e:9b:5c:4e:ef:a4:73:d9:0d:5c:
         ba:46:ea:d0:42:90:7b:87:6a:ed:40:44:7b:5e:dc:42:56:96:
         3e:55:61:9f:83:e7:9d:eb:46:27:b5:7b:48:02:3c:81:0c:8f:
         68:33:6d:57:ff:31:b2:44:6e:4d:c1:8f:a0:8b:e3:52:f3:6a:
         eb:06:87:62:d2:8a:69:46:67:58:90:8e:72:cb:69:b2:f8:d3:
         6d:61:23:6a:d5:a5:b9:85:35:a8:5e:7a:4b:47:dc:ea:b1:88:
         8a:66:93:dd:59:3f:6b:27:02:a2:57:ca:90:f3:a2:98:5a:1e:
         bc:cb:88:df:b3:44:52:60:c1:66:8a:ce:d8:90:a2:e2:cd:09:
         24:c2:cf:5e:49:5e:ad:76:c8:54:7b:c9:41:33:76:47:79:f5:
         47:b1:77:3a:6b:87:28:09:2c:fa:64:3d:8e:33:95:ce:b0:08:
         85:82:95:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:20:30 2026 by rpki-client