Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft
File:                     bIRL1iy_ta3M-03Bbsojy1yd3rY.mft (raw, json)
Hash identifier:          /G9HB2BrEI+9UwAYoOyVP3tZVlWOD3tXcuqzAliIReY=
Subject key identifier:   12:EA:A4:B1:4F:0B:FD:3D:08:0E:43:C7:14:A4:31:02:FE:14:A9:7A
Authority key identifier: 6C:84:4B:D6:2C:BF:B5:AD:CC:FB:4D:C1:6E:CA:23:CB:5C:9D:DE:B6
Certificate issuer:       /CN=6c844bd62cbfb5adccfb4dc16eca23cb5c9ddeb6
Certificate serial:       019D281642EF63A41826B5C07CCB401BB666
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft
Manifest number:          188D
Signing time:             Thu 26 Mar 2026 03:00:40 +0000
Manifest this update:     Thu 26 Mar 2026 03:00:40 +0000
Manifest next update:     Fri 27 Mar 2026 03:00:40 +0000
Files and hashes:         1: Q9m-lfpl94RgCrGyXlKa0BCxzmU.roa (hash: OrRe/AhPIl5+vGgEIK4ZmFPH1fmm0hGO63YBADXAmg8=)
                          2: bIRL1iy_ta3M-03Bbsojy1yd3rY.crl (hash: 52lhRp0d5X0gTdVlJXVsmEub2rsH4dpqZYniZmmvnHc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:42:ef:63:a4:18:26:b5:c0:7c:cb:40:1b:b6:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c844bd62cbfb5adccfb4dc16eca23cb5c9ddeb6
        Validity
            Not Before: Mar 26 03:00:40 2026 GMT
            Not After : Mar 27 03:00:40 2026 GMT
        Subject: CN=12eaa4b14f0bfd3d080e43c714a43102fe14a97a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f6:c3:2e:a5:99:3a:75:ed:9f:07:48:c8:c2:
                    2b:03:55:36:a7:0f:46:6e:90:86:3b:48:33:47:08:
                    6a:63:43:3b:92:30:f1:4f:47:d8:e6:e2:43:bd:aa:
                    ad:bc:61:7e:18:12:c4:6c:5e:d4:c4:ba:e2:21:82:
                    6b:c3:e7:e5:11:ff:6a:1d:0c:c4:1d:87:20:1b:01:
                    d9:8f:a4:e5:0a:94:8e:8a:2e:bd:a0:71:dd:57:b1:
                    55:55:bf:3f:02:6b:d1:ab:f2:42:3b:4c:51:53:50:
                    57:5a:30:66:9b:c9:af:fc:0f:98:06:55:fe:ea:ff:
                    9e:2e:2f:68:d4:fc:7b:b1:01:db:1e:69:df:a5:4a:
                    82:4d:5e:1c:db:b8:43:76:2d:bb:7b:41:ca:9f:a9:
                    cf:85:7d:b9:59:45:e4:d7:57:6f:ad:ed:cd:4b:11:
                    3e:c9:a3:81:d9:cd:d2:0a:d9:6b:37:9b:4f:ae:c1:
                    be:1f:07:99:e0:d7:73:ac:64:22:01:27:45:51:25:
                    36:1c:e7:0c:e1:a5:4e:e4:60:01:c2:35:f9:27:b9:
                    65:11:24:e3:a2:18:f3:c8:3b:73:b9:12:e8:4d:24:
                    f3:ea:9f:f7:01:bf:a2:52:dd:4f:05:89:67:39:5a:
                    15:98:61:10:ae:9e:a7:a6:69:ea:be:43:fa:7d:eb:
                    b4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:EA:A4:B1:4F:0B:FD:3D:08:0E:43:C7:14:A4:31:02:FE:14:A9:7A
            X509v3 Authority Key Identifier:
                keyid:6C:84:4B:D6:2C:BF:B5:AD:CC:FB:4D:C1:6E:CA:23:CB:5C:9D:DE:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:b4:94:63:33:08:fc:b8:37:08:32:c3:1b:c6:19:71:e0:b4:
         4a:78:96:d0:48:57:87:d0:97:86:67:22:98:ba:ba:48:7c:f2:
         24:f9:42:ad:1c:9a:b5:bc:9f:d6:35:01:62:aa:ec:72:b1:4f:
         3b:cc:c4:4d:11:0e:9e:34:91:b7:42:d6:d5:64:ec:5e:3c:f6:
         8e:8a:0a:18:a3:bd:ab:6a:22:51:92:c5:2e:63:6d:29:b5:da:
         c1:16:19:62:bc:a6:37:13:f5:9a:5e:08:47:e6:48:7e:fd:a2:
         67:f8:e3:37:18:54:21:26:93:0b:bc:7d:89:20:92:b6:18:1f:
         5d:1a:bd:1e:8c:33:15:18:d0:21:27:67:fb:df:fb:dc:53:81:
         d5:20:fa:77:6f:b5:32:e0:02:47:03:ef:74:32:a7:ab:ac:c3:
         41:1f:90:6e:ad:44:1d:66:ea:d1:05:79:06:06:5a:b7:a5:7a:
         ff:7d:5f:af:eb:03:ee:b3:94:c2:a9:8e:ba:a8:1b:8f:0c:33:
         91:01:2e:f7:c0:b6:48:f5:67:19:a8:63:56:0a:71:a0:61:70:
         b4:15:a0:93:c5:7b:b9:3f:13:06:0b:45:67:66:e9:7a:8f:f1:
         77:d7:85:4e:bd:9f:3d:a6:ae:6a:23:f1:37:fe:5b:02:b1:9f:
         72:85:35:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:28 2026 by rpki-client