Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft
File:                     1mc4qNrawtDTrt25NPggBmufX-s.mft (raw, json)
Hash identifier:          ZEgdkbWTMwVQiMnSCL+l+eQJAABHEhNZQSC5+SO64HU=
Subject key identifier:   9A:13:8D:DF:B4:8D:58:D7:24:A1:2A:A6:03:B1:56:7B:92:95:96:DE
Authority key identifier: D6:67:38:A8:DA:DA:C2:D0:D3:AE:DD:B9:34:F8:20:06:6B:9F:5F:EB
Certificate issuer:       /CN=d66738a8dadac2d0d3aeddb934f820066b9f5feb
Certificate serial:       019D265F0A7BE84863B666F902D81D5FA9A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft
Manifest number:          1888
Signing time:             Wed 25 Mar 2026 19:00:55 +0000
Manifest this update:     Wed 25 Mar 2026 19:00:55 +0000
Manifest next update:     Thu 26 Mar 2026 19:00:55 +0000
Files and hashes:         1: 1mc4qNrawtDTrt25NPggBmufX-s.crl (hash: ybqPAHM421ghJrfMJk+Y4aWYB0WV3EKZCaCW5kulIsI=)
                          2: PvHMHD0aeuQ9T3MtfIs2XmJyQOY.roa (hash: EfRNqiHIBaBfAkezAxeKdTs07evzHPZKbuFa+2c+KMc=)
                          3: TIYeUVbpvuyDC2t31dkXKX77tpM.roa (hash: jq2yqV/pOREhu3bPBF+p4OSILcPoLvkCkURypiB0/n0=)
                          4: cOxS0E2XjVzTbopS5QPfLKjjtnk.roa (hash: mNaGGlEdJbAJ+qyD+c0RDVAtGl4B6iWrOcUapyB/UK4=)
                          5: pI-v5uJ1SgQhhfO7bCx9EJHVnoY.roa (hash: QNyQpokvQqLnIzlnj95bhIcxCT1zZNKDcQ4ODnYC8DE=)
                          6: rCFpqnF0TcjxMo0Y1C5GR4qc4ng.roa (hash: PMdlGjc9Af5sq4QJ2HwfDr1apnmai7YobB9Ga0B6v3c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:0a:7b:e8:48:63:b6:66:f9:02:d8:1d:5f:a9:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66738a8dadac2d0d3aeddb934f820066b9f5feb
        Validity
            Not Before: Mar 25 19:00:55 2026 GMT
            Not After : Mar 26 19:00:55 2026 GMT
        Subject: CN=9a138ddfb48d58d724a12aa603b1567b929596de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:47:2e:e8:c9:1e:f4:f6:68:af:2a:eb:b7:47:
                    93:b6:40:da:1a:89:26:0e:86:7c:68:23:b3:65:a6:
                    7d:b6:99:ab:e0:92:fc:97:43:ea:54:ea:82:42:28:
                    3c:1f:85:6d:3a:77:38:db:4b:ed:34:37:3a:8d:37:
                    47:82:06:89:7e:d0:5c:bb:18:99:df:15:80:75:a6:
                    b2:c1:88:a0:17:58:5d:49:34:b1:6a:fc:39:93:1e:
                    c5:96:00:e3:e7:83:c1:e1:28:fa:87:e4:e7:77:b7:
                    cb:84:89:65:2e:4c:7d:8f:99:e2:6b:f1:80:fc:8e:
                    4f:9b:0a:f3:02:5d:99:0e:50:1b:aa:54:2d:6d:f2:
                    d3:cb:65:bf:61:57:25:90:33:dc:91:1b:ea:ab:ee:
                    0e:61:0c:7c:48:8f:ad:0a:e6:e4:6e:42:87:48:b5:
                    7b:bf:3d:0c:dc:9e:63:85:c3:d1:3e:d5:37:eb:1c:
                    6b:b5:5f:ec:f0:38:13:66:39:55:7f:16:c7:b8:9b:
                    0a:75:05:5c:c9:ed:76:09:7a:aa:6d:65:02:84:05:
                    e2:b2:0d:ee:d2:8a:7b:2f:f9:2c:97:d9:81:58:96:
                    c2:11:af:9e:d6:01:38:89:40:25:de:3a:64:d5:ad:
                    02:6d:51:6c:51:59:04:01:d9:d8:fa:4c:74:4c:af:
                    cd:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:13:8D:DF:B4:8D:58:D7:24:A1:2A:A6:03:B1:56:7B:92:95:96:DE
            X509v3 Authority Key Identifier:
                keyid:D6:67:38:A8:DA:DA:C2:D0:D3:AE:DD:B9:34:F8:20:06:6B:9F:5F:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:97:2b:ee:86:95:5e:66:d4:e7:65:3e:4b:3b:17:84:f8:53:
         d3:92:d2:1a:ed:78:78:df:ef:a7:35:94:55:34:a6:51:ab:85:
         6f:76:a1:34:e0:45:7b:c8:26:6e:86:ff:bc:4d:bd:c4:67:a1:
         86:87:c3:57:17:11:72:36:8e:84:4b:72:92:d3:0b:00:ab:c2:
         0e:91:24:30:07:90:1e:fd:d4:61:0f:aa:ff:58:8c:db:67:95:
         f6:dd:a1:5e:66:d7:73:94:41:5f:79:3b:c8:1d:79:38:9c:3e:
         1b:78:4f:43:d4:c8:60:b4:82:1a:a1:d3:a7:5b:02:8e:d7:05:
         0f:3e:5b:5a:43:3e:2b:c9:3b:f6:0e:9d:bd:28:63:af:af:94:
         da:45:89:db:d7:c8:19:78:4a:03:2b:4c:e8:5d:94:3b:26:b1:
         12:dd:b3:39:c1:23:52:39:45:66:83:31:c7:93:48:39:b0:ed:
         d8:f8:1e:10:06:db:38:27:4b:32:e9:59:4b:99:ce:e7:35:67:
         cf:31:0d:a2:9f:e2:10:7a:ce:4a:38:c8:46:dc:c6:17:7f:d3:
         eb:10:dd:6f:c7:6e:9d:c2:8f:2f:a4:b0:ef:0d:4e:ea:c7:0b:
         24:0e:6d:7e:4d:39:e9:d1:05:4b:7a:6a:35:f0:3c:08:5d:d9:
         5b:01:78:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:50 2026 by rpki-client