Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
File:                     taJj0Y61xUD3R4glu3LvrG8o-Cs.mft (raw, json)
Hash identifier:          yfkX/3IPSAMclLRa8miAa2eOYH17W2x5xpFymcKqxvA=
Subject key identifier:   91:07:03:99:95:E5:4A:88:E8:01:3F:8F:8F:C0:C5:0B:1D:03:8A:8A
Authority key identifier: B5:A2:63:D1:8E:B5:C5:40:F7:47:88:25:BB:72:EF:AC:6F:28:F8:2B
Certificate issuer:       /CN=b5a263d18eb5c540f7478825bb72efac6f28f82b
Certificate serial:       019D270450DA091D7A95B05BC6F0F8870164
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
Manifest number:          1817
Signing time:             Wed 25 Mar 2026 22:01:27 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:27 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:27 +0000
Files and hashes:         1: mGuGgApHSUc3pkLejONy6uxFa8I.roa (hash: 72owtSfE8WtU3O8vsf/pSLMkM235o/0ogXWxdafrLec=)
                          2: taJj0Y61xUD3R4glu3LvrG8o-Cs.crl (hash: p1IJ/U4KKjq16R9U1A4cKmz/pFxqF92JS/q2sz0t/fw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:50:da:09:1d:7a:95:b0:5b:c6:f0:f8:87:01:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5a263d18eb5c540f7478825bb72efac6f28f82b
        Validity
            Not Before: Mar 25 22:01:27 2026 GMT
            Not After : Mar 26 22:01:27 2026 GMT
        Subject: CN=9107039995e54a88e8013f8f8fc0c50b1d038a8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:29:38:b1:23:25:82:c6:46:f0:77:d0:23:44:
                    d0:a4:e7:49:b4:7c:07:97:d3:0e:b6:2e:55:d5:96:
                    20:76:91:90:4b:80:2b:dc:97:d5:c9:a3:e5:ac:64:
                    55:6c:4a:6c:ad:f6:e4:a6:01:f5:52:86:58:2c:4b:
                    1d:d1:84:92:19:07:6d:78:9d:ab:f3:3d:7f:9d:fc:
                    8f:ae:6e:1d:4f:94:86:7d:57:91:a1:ca:27:b9:bf:
                    a4:c4:ed:63:33:9a:a7:fd:17:e7:aa:84:db:11:17:
                    9b:88:4d:0c:52:49:d6:8f:aa:1c:05:b8:00:a3:4a:
                    4f:93:7d:e2:8a:b0:fc:a0:5c:a3:ac:4f:0e:bf:6f:
                    75:75:46:28:4d:80:24:dd:cf:6d:42:f3:39:bf:3b:
                    16:9a:ec:b4:6b:60:73:8c:9b:67:72:2d:87:1b:80:
                    e3:fa:0f:85:7e:3e:08:47:aa:e8:c0:8a:34:72:c2:
                    3a:84:61:b6:21:07:d4:a1:a3:84:28:2a:35:7e:8b:
                    bd:f8:f3:cf:fe:04:ae:ff:5f:b4:68:9d:21:8b:3b:
                    6b:96:9f:fc:bf:77:b9:0f:c1:a1:e5:2a:81:59:1b:
                    d3:90:d2:f6:fb:5f:88:a6:c5:ff:77:8d:64:46:7b:
                    6d:0d:d9:4b:d2:e8:46:08:6e:16:d3:6f:b8:a1:ae:
                    89:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:07:03:99:95:E5:4A:88:E8:01:3F:8F:8F:C0:C5:0B:1D:03:8A:8A
            X509v3 Authority Key Identifier:
                keyid:B5:A2:63:D1:8E:B5:C5:40:F7:47:88:25:BB:72:EF:AC:6F:28:F8:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:e2:bd:26:da:69:8a:0e:29:93:a8:6e:71:5a:43:01:11:83:
         c5:8d:2d:ed:54:b2:79:c1:bc:ae:37:c2:83:3f:e5:06:2c:4a:
         db:22:a1:d5:56:75:c0:bb:b6:30:0c:f5:a9:52:f2:32:e5:dc:
         c4:cc:ca:5a:67:ec:73:55:33:14:d9:b2:e4:a9:4e:ca:83:55:
         02:20:fd:4a:f3:66:88:16:37:5b:98:6d:7d:1c:ac:8a:e9:44:
         36:2b:37:5f:77:7f:18:db:d0:34:02:3f:07:b9:e7:4d:6d:d4:
         3b:07:28:1c:30:03:92:69:90:88:b7:9e:e2:72:78:39:78:ed:
         19:02:a4:2a:39:2a:1f:96:02:22:e7:56:66:93:be:71:be:e4:
         99:97:3c:b4:0d:62:d4:fb:13:d3:ee:89:26:4d:55:0b:75:58:
         89:89:58:b0:75:ef:f8:1f:1e:06:48:3b:b4:dc:5f:b0:9f:37:
         43:a8:7e:94:a9:33:4b:35:76:37:49:4f:fe:1f:4b:50:39:81:
         4b:04:10:42:e0:ac:3c:5c:04:b5:57:fd:f2:23:1b:3d:0a:ca:
         e9:f8:1a:2f:d3:3d:62:3d:08:02:84:e9:92:15:aa:3a:c2:53:
         c0:be:01:95:30:39:a8:9f:1b:bf:b0:96:f4:30:a7:6c:67:af:
         00:48:c0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:39 2026 by rpki-client