Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
File:                     RpG_08_sWhEI8choVHZOK5A9eIg.mft (raw, json)
Hash identifier:          pf9wVs8yd3lu/TgcNUl3ldCG4x1oA805rig3cXgVikU=
Subject key identifier:   29:10:BA:5A:67:41:7C:BE:FB:61:9A:D9:F2:2A:98:F7:A0:BF:91:1F
Authority key identifier: 46:91:BF:D3:CF:EC:5A:11:08:F1:C8:68:54:76:4E:2B:90:3D:78:88
Certificate issuer:       /CN=4691bfd3cfec5a1108f1c86854764e2b903d7888
Certificate serial:       019D265F1D7B0048014579AB499852CAF597
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
Manifest number:          1888
Signing time:             Wed 25 Mar 2026 19:01:00 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:00 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:00 +0000
Files and hashes:         1: 99lIgCZ8a0ei-5wRBXuee2SsGpY.roa (hash: 1ppSKjyGESECn+t5RQboX3iN+5A+rZBrqwtQSTJrj4A=)
                          2: RpG_08_sWhEI8choVHZOK5A9eIg.crl (hash: 6Mfm3hZpoRE90BIEZVY95jOAhEd8rqQhni+6sjE2N7A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:1d:7b:00:48:01:45:79:ab:49:98:52:ca:f5:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4691bfd3cfec5a1108f1c86854764e2b903d7888
        Validity
            Not Before: Mar 25 19:01:00 2026 GMT
            Not After : Mar 26 19:01:00 2026 GMT
        Subject: CN=2910ba5a67417cbefb619ad9f22a98f7a0bf911f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:99:3e:6e:4a:27:77:57:10:3e:f3:00:4d:d1:
                    9e:94:54:bc:19:8a:85:97:81:b9:6d:2e:5e:03:0e:
                    67:fc:93:e0:8f:e6:d6:e7:7b:65:e0:64:fc:c1:a1:
                    c1:94:66:e5:c2:b8:9d:36:d2:e3:60:e4:be:79:3f:
                    38:9a:0b:d5:bc:7f:b1:d8:ec:1d:8b:fa:43:8e:97:
                    a7:7b:d2:a0:c3:fc:e3:2f:23:16:4c:83:e0:c2:5c:
                    0e:f3:09:86:a8:e2:f3:f1:b6:8c:da:74:99:9b:1f:
                    3b:04:1e:04:63:2a:7e:57:59:30:c4:cc:f2:d6:22:
                    f2:dd:71:cc:26:3f:ba:5f:f4:98:87:1e:fc:02:1c:
                    f1:0d:ee:a3:76:ba:ec:21:31:42:ea:d7:92:73:95:
                    ab:50:af:e6:53:02:9f:b3:87:89:c8:8a:c6:0c:68:
                    c5:f1:50:4f:da:c7:2d:43:f4:4c:75:92:8f:19:0a:
                    b6:4a:c7:27:d5:bc:53:df:b6:64:c2:d9:93:07:45:
                    6e:51:9f:8f:4d:4d:6b:ec:09:f2:f7:6c:f4:24:d0:
                    4d:e0:53:88:6e:37:91:6c:9e:3f:3c:52:29:59:fc:
                    bf:6e:21:37:41:b3:9c:c4:6e:d8:05:cc:76:4c:ff:
                    d3:62:d3:09:6e:fe:f3:ef:e7:7d:4c:c6:56:c2:9e:
                    62:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:10:BA:5A:67:41:7C:BE:FB:61:9A:D9:F2:2A:98:F7:A0:BF:91:1F
            X509v3 Authority Key Identifier:
                keyid:46:91:BF:D3:CF:EC:5A:11:08:F1:C8:68:54:76:4E:2B:90:3D:78:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:a8:3d:18:c4:02:ab:5a:36:08:88:4a:9d:2d:76:bf:55:83:
         99:21:c1:b8:d3:85:21:0f:f3:be:a3:58:d1:17:3e:45:83:ea:
         3d:3b:d3:0d:a4:be:62:c0:0b:97:4c:b0:b1:34:14:9a:55:81:
         f4:ca:b9:20:e8:bb:e2:41:d9:66:91:2a:44:7c:57:c9:43:32:
         cd:d0:8b:d7:29:d3:8d:6f:8d:03:06:6b:9e:70:93:5f:0c:63:
         cc:f7:5a:b6:32:f0:61:b9:f8:31:ce:ef:73:29:ce:3a:56:01:
         f4:4d:65:78:65:2c:46:59:87:f2:32:8e:77:de:f8:73:9c:9e:
         d2:f6:7a:81:6a:c5:2d:ac:ce:e0:47:84:58:b1:d4:ea:a0:a9:
         3a:74:ce:90:10:12:f6:f8:ef:ef:38:47:6c:54:06:e8:ab:6c:
         c9:70:c2:26:46:a5:01:85:c3:0e:1f:1d:92:40:55:aa:5e:51:
         2c:84:9a:6f:16:24:7c:5b:7e:f1:6d:29:1f:cb:3d:4a:e2:e5:
         3c:d3:6e:2c:6b:8c:d2:b3:c5:48:69:93:de:17:1f:e8:fb:15:
         75:af:ba:9f:38:7a:52:d2:f8:05:69:27:7f:79:dd:14:b6:f9:
         aa:e9:21:e9:51:8a:07:67:88:cf:95:06:14:0c:d4:43:2b:0f:
         bd:12:0b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:51 2026 by rpki-client