Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
File:                     bZOet0q7zSInwhkqoqN-bcuJjlM.mft (raw, json)
Hash identifier:          /rEev7yGS3NIZKDj77hKRh5BOPkXVUkKhOQTW7YvxJE=
Subject key identifier:   F8:9F:26:BB:F8:6D:FD:5F:16:DB:0E:FE:69:3C:E8:13:19:0E:CC:F5
Authority key identifier: 6D:93:9E:B7:4A:BB:CD:22:27:C2:19:2A:A2:A3:7E:6D:CB:89:8E:53
Certificate issuer:       /CN=6d939eb74abbcd2227c2192aa2a37e6dcb898e53
Certificate serial:       019D284E581BA6F959D04E2090A72B897B47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
Manifest number:          1887
Signing time:             Thu 26 Mar 2026 04:01:56 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:56 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:56 +0000
Files and hashes:         1: bZOet0q7zSInwhkqoqN-bcuJjlM.crl (hash: kGri7M2S+MeJ5OptsPBzZSvwGmBX12g4SK98qenBFx4=)
                          2: rLpRZvFN9tLJOZKsRQ2iN0bOTkA.roa (hash: 7Y/pwxfKMpnXy8fpQNc1oxHBEDERRxAILiQLxs4GnLU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4e:58:1b:a6:f9:59:d0:4e:20:90:a7:2b:89:7b:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d939eb74abbcd2227c2192aa2a37e6dcb898e53
        Validity
            Not Before: Mar 26 04:01:56 2026 GMT
            Not After : Mar 27 04:01:56 2026 GMT
        Subject: CN=f89f26bbf86dfd5f16db0efe693ce813190eccf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:97:a2:8d:fd:ec:be:73:f5:ff:99:f9:19:2f:
                    0d:c3:0a:7d:1e:aa:86:59:59:e7:a1:3c:42:f4:12:
                    c2:f6:33:af:1c:80:dc:a5:3d:e0:29:90:da:b3:f6:
                    9c:fd:38:87:d3:17:e9:e5:f9:db:c3:97:63:d7:78:
                    cd:e0:d3:72:90:73:1b:a0:25:2d:13:77:2f:e0:cf:
                    1d:af:42:49:4f:be:d1:6b:f9:35:a4:ac:db:f7:45:
                    2e:15:6c:79:11:ec:7d:4c:07:c2:3d:f7:e9:d4:38:
                    5b:27:2c:31:bd:5e:6a:4c:8c:c7:f9:d1:11:90:7f:
                    de:00:9f:35:1d:03:92:ec:1d:be:a9:15:b7:c0:50:
                    cc:d6:15:dd:b0:13:d8:47:42:a8:2b:4f:f7:c1:30:
                    94:6c:c8:f9:2c:fd:5d:bd:26:54:4b:a6:6c:9d:9e:
                    77:b5:bc:bb:49:3d:ad:e9:55:3e:07:20:c7:e5:52:
                    8f:97:aa:16:19:71:91:d4:c1:da:01:dc:1a:67:85:
                    1c:fa:b0:e9:cb:60:76:ed:ca:b0:f7:6b:d2:ac:4e:
                    64:59:b7:60:14:3a:38:ff:4f:02:7f:4e:14:17:24:
                    ed:1f:5a:db:45:2a:b1:6b:71:92:97:e3:19:41:76:
                    14:67:40:cd:95:5d:94:97:1f:ef:77:88:b9:a5:af:
                    8c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:9F:26:BB:F8:6D:FD:5F:16:DB:0E:FE:69:3C:E8:13:19:0E:CC:F5
            X509v3 Authority Key Identifier:
                keyid:6D:93:9E:B7:4A:BB:CD:22:27:C2:19:2A:A2:A3:7E:6D:CB:89:8E:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:b8:e7:3c:8c:1c:6c:6f:7b:1f:dc:13:cc:8c:a3:74:93:ec:
         97:0f:a3:43:2e:60:35:2d:4f:d2:ef:ac:8b:13:5d:ae:a0:fe:
         52:42:d2:51:82:49:4e:c5:21:8b:03:53:4e:21:4f:0c:bc:a7:
         0c:ed:c7:8c:b6:59:00:89:7e:bc:ff:c3:1f:91:50:14:43:9a:
         eb:0c:7c:7e:60:5c:77:e0:c1:ef:28:06:96:f0:b9:c5:79:48:
         de:79:92:8b:98:ba:aa:25:29:7d:c8:bd:a2:ba:c5:e0:b1:1e:
         7b:3e:a3:26:12:9b:c5:60:b3:cc:19:5f:a1:df:a8:f9:c6:7a:
         30:71:a3:6b:7b:1f:63:ff:0d:88:9d:7a:95:3e:97:08:2e:63:
         91:66:02:a3:ef:60:bf:12:b3:75:2f:7f:73:10:ed:66:b3:9b:
         92:a9:b3:8b:03:00:71:d4:78:dc:14:73:8c:01:0b:0e:8f:ad:
         f6:e8:fd:88:69:44:ed:02:a3:11:32:20:30:8b:e5:61:7e:25:
         fa:ec:d1:75:ed:c2:f8:1a:1d:d2:01:74:bf:30:98:e5:f6:f9:
         e1:a4:60:82:e9:88:d2:68:a8:f5:30:6b:8d:0f:8f:59:7e:a9:
         ba:58:60:69:5d:7b:99:67:44:ca:50:6b:c8:27:42:19:48:eb:
         98:e2:07:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:10:13 2026 by rpki-client