Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
File:                     k--iv5CiNyiFJyfxJu3mUobDymc.mft (raw, json)
Hash identifier:          BLPwXWIj3d0kQbCY3cIlUPFX8/9eR6uWJ20xYtmHV2c=
Subject key identifier:   24:3E:60:9F:8B:54:37:64:B4:1C:7C:7D:3D:2A:4A:2B:16:03:3F:1E
Authority key identifier: 93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67
Certificate issuer:       /CN=93efa2bf90a23728852727f126ede65286c3ca67
Certificate serial:       019D26961EC368DF90725824971D7DCFE56F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
Manifest number:          0656
Signing time:             Wed 25 Mar 2026 20:01:05 +0000
Manifest this update:     Wed 25 Mar 2026 20:01:05 +0000
Manifest next update:     Thu 26 Mar 2026 20:01:05 +0000
Files and hashes:         1: IDdWjfqKDEDoT5owNDTMrvBAidI.roa (hash: Cun9jfihjGmUz4jQNcB3IyvoxQWP4/ccqsrygK3OW84=)
                          2: NVKj6woT-fJPaVfcr9O7EUW5AlE.roa (hash: 9pmWIL3rH5wkbK7AJiKnnwiKMYGWFVxGS8vZ/hHe2wI=)
                          3: RPKrBbNxp_9CQhYxptiK6qfqSbk.roa (hash: NUJEbh3bKvsth8HU3RWkiOC5sGfAZYVM2xyBk7b/x6I=)
                          4: k--iv5CiNyiFJyfxJu3mUobDymc.crl (hash: cpZmv1oxPjavmlRfXFVslDhtoedZcwms6fgW0iqwIu0=)
                          5: rE96S2aKHeQZf0vrmquN8VX13fE.roa (hash: YrRMU2rXe7xngSe3xWiIAdBIEOfG76Z85QBRZWlUgPc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:96:1e:c3:68:df:90:72:58:24:97:1d:7d:cf:e5:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93efa2bf90a23728852727f126ede65286c3ca67
        Validity
            Not Before: Mar 25 20:01:05 2026 GMT
            Not After : Mar 26 20:01:05 2026 GMT
        Subject: CN=243e609f8b543764b41c7c7d3d2a4a2b16033f1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:01:5b:b8:be:48:29:c3:ab:fa:3c:9c:92:37:
                    25:6e:4e:ca:23:63:80:31:64:50:75:58:9c:b6:76:
                    2d:fb:cb:8d:80:06:f5:97:5c:4e:d6:20:8f:7e:06:
                    f6:b0:aa:8c:29:63:d6:21:35:0b:d0:b5:f9:b7:a1:
                    54:00:c2:73:bc:a3:55:d2:cc:11:85:22:4a:26:c8:
                    c4:a3:90:cd:f4:6f:cf:d0:d8:ac:ce:07:82:0f:c1:
                    9b:19:8b:b4:a8:48:07:18:24:7c:02:f8:9a:a8:c2:
                    b3:c7:c8:a5:4a:1f:72:71:d2:df:3e:9b:c4:54:8b:
                    15:a4:0b:20:b3:a0:db:f0:82:60:9e:ce:12:d7:15:
                    61:8e:a3:9f:32:76:ea:af:c5:e8:2d:d3:12:73:72:
                    ae:91:74:00:55:67:1c:78:f1:97:e4:82:fd:dc:a1:
                    00:f7:89:75:5d:5d:27:c7:f1:c0:1c:ad:2d:fc:77:
                    8a:af:72:21:20:52:8c:f9:98:fa:20:31:f1:0b:83:
                    e8:13:44:76:71:ed:da:91:79:58:c5:30:11:ba:b3:
                    90:c3:25:19:88:59:67:8d:b1:d8:a0:68:97:0a:a7:
                    02:c1:ab:b7:d7:1e:5e:df:f6:01:05:d1:bb:f3:c6:
                    3c:d4:81:88:c5:a3:cf:a6:d3:d2:50:da:00:63:9c:
                    78:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:3E:60:9F:8B:54:37:64:B4:1C:7C:7D:3D:2A:4A:2B:16:03:3F:1E
            X509v3 Authority Key Identifier:
                keyid:93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:4c:99:05:64:8c:18:bf:5a:0e:7a:0b:18:4d:ba:45:0d:93:
         be:79:f2:46:0d:e3:4c:88:c7:42:3b:30:e2:db:06:01:96:5b:
         c1:e8:a2:dd:a7:65:7e:aa:c0:51:a5:b7:3c:78:b9:78:cb:9f:
         27:fe:be:f5:f0:c8:b0:82:e9:56:35:60:48:6e:7a:46:78:f9:
         5e:9e:6e:63:3c:2e:d3:d0:8f:9f:42:e2:b4:9b:9e:ec:7c:fa:
         ab:d1:64:7f:d8:6e:7d:fb:fe:e8:77:c3:9c:a1:23:58:b7:5f:
         e3:68:c1:8a:2d:9f:fa:9c:10:79:8d:c9:ef:6c:8b:20:e1:f6:
         af:c8:f3:eb:b6:68:1a:90:51:7d:5d:d6:9d:f6:b9:a4:e4:c4:
         8f:d5:65:0e:fe:b1:17:28:0b:a6:d0:42:ad:45:b5:26:d6:34:
         31:e7:00:5a:9b:84:2e:a7:c9:e1:87:36:e1:7b:f3:c0:0e:fb:
         e4:14:20:28:5c:da:88:0e:e5:3d:5e:a3:c6:f0:9a:38:18:0c:
         f9:d3:f3:59:06:b6:e9:29:d9:c2:8e:91:23:f3:a1:f7:6c:8a:
         96:26:a6:c5:01:f9:37:17:0b:f6:16:01:e3:f4:c6:44:6b:a3:
         e9:f3:ad:3f:6c:6c:40:d0:ad:4a:a8:2f:f8:53:2e:4d:11:08:
         b1:6e:ee:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:07 2026 by rpki-client