Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
File:                     fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft (raw, json)
Hash identifier:          M+NX0n1JR/ZmukbGD/fqsBzZ5WcLQeSdkOAERe6bYzM=
Subject key identifier:   AE:B1:CD:6B:94:8D:92:7E:10:87:8C:DC:69:05:B2:FC:94:EA:87:8E
Authority key identifier: 7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8
Certificate issuer:       /CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8
Certificate serial:       019D2BBCBC27A9F75D0EB4408253C1DBDFA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
Manifest number:          1819
Signing time:             Thu 26 Mar 2026 20:01:22 +0000
Manifest this update:     Thu 26 Mar 2026 20:01:22 +0000
Manifest next update:     Fri 27 Mar 2026 20:01:22 +0000
Files and hashes:         1: DYNx75j8JSgdvr4IB6THRRzY3xI.roa (hash: /G//i1C4nsVHJZpr6stdki+vQ0e+Fk9uaOZBReccIPM=)
                          2: fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl (hash: 325pMVP953i1xlpXAY+IdWfJZJLDZK6pglYvY+YoFZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:bc:bc:27:a9:f7:5d:0e:b4:40:82:53:c1:db:df:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8
        Validity
            Not Before: Mar 26 20:01:22 2026 GMT
            Not After : Mar 27 20:01:22 2026 GMT
        Subject: CN=aeb1cd6b948d927e10878cdc6905b2fc94ea878e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:2e:08:3a:d9:26:d0:c0:a7:a2:6f:4b:42:f4:
                    59:26:81:80:72:ec:fa:bd:40:0e:65:63:ab:14:8a:
                    09:8f:01:8c:c9:1f:45:53:e6:56:db:2d:dc:ce:8a:
                    ce:48:37:fb:8e:bc:40:7f:67:f8:73:9c:b4:b2:a4:
                    49:49:9b:14:93:02:4f:51:90:65:72:d1:45:2c:d1:
                    eb:3c:79:54:34:35:9e:8c:cf:04:e8:98:40:21:47:
                    af:21:9d:f1:cc:96:84:95:d9:15:62:f9:46:89:01:
                    86:c8:db:43:60:75:45:04:51:a2:4b:1b:d8:fa:0d:
                    78:36:4d:3c:0a:2e:0e:e2:9a:45:a0:10:eb:36:4e:
                    13:8d:04:17:97:9f:0f:50:17:67:90:3e:97:c0:86:
                    60:fb:b3:c0:dd:04:1a:44:a3:4e:e6:b8:a7:c9:17:
                    7f:f0:28:ca:1a:a8:c6:33:d4:5c:53:94:6f:57:c4:
                    43:f1:eb:77:1e:e5:94:31:7e:ff:9e:d0:30:3a:d9:
                    0b:a7:dc:f9:78:55:f6:3d:32:17:34:fe:f5:28:d2:
                    aa:f0:e0:cf:99:38:0d:52:12:b7:4b:89:26:01:ad:
                    1b:a6:30:5e:3d:60:03:93:bd:1c:6a:46:df:11:46:
                    3d:c5:6e:ac:c0:d2:b8:e6:d3:c0:c3:f8:b8:87:de:
                    c1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B1:CD:6B:94:8D:92:7E:10:87:8C:DC:69:05:B2:FC:94:EA:87:8E
            X509v3 Authority Key Identifier:
                keyid:7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:71:86:e3:1e:f9:b8:99:13:2a:4c:08:56:e9:f7:40:41:7b:
         b1:46:77:78:b8:f2:69:1c:12:a8:9b:2a:ec:76:a9:39:7d:d4:
         a0:5e:74:20:77:f0:b4:14:fe:b3:2d:c8:40:f9:e7:8a:f2:c0:
         ee:31:60:c0:ca:7e:18:8a:30:84:39:bd:63:f6:56:e7:6f:62:
         42:99:03:e4:6a:e2:23:3f:3b:13:0e:6e:18:68:f8:26:a8:f0:
         1d:07:d3:36:d9:57:83:dc:6f:de:09:20:75:ac:b4:9f:b0:cf:
         15:1b:5f:3f:5a:96:a6:94:ff:69:b8:07:3a:6f:2d:7c:e5:c6:
         07:b5:db:2a:b6:59:9f:72:fa:08:a1:d5:4c:cd:e4:8c:76:cf:
         af:81:1c:f4:4c:47:d4:8b:1a:df:97:22:ba:04:33:dc:c9:12:
         f0:07:61:05:33:f4:e8:88:56:6c:99:32:19:3b:ef:ba:45:ab:
         8c:75:b6:5b:60:dc:e5:db:57:47:f3:c3:dc:cc:2d:07:8a:78:
         39:55:55:29:07:01:08:d6:11:5b:67:9b:10:3e:d8:97:7d:a6:
         7c:24:2d:34:64:bc:84:6a:7c:6e:e5:37:09:b1:0c:13:b1:07:
         8b:9f:eb:a0:a7:13:62:0d:fd:ce:b7:50:bc:08:2f:54:97:0f:
         c7:46:ec:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:42:30 2026 by rpki-client