Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
File:                     1u7ifzwsXJ7FeArNorbrBAptJaE.mft (raw, json)
Hash identifier:          MSt1eyKCYxwKb+3aeT6gagWrUinU2fHpzVW3ldSJWiA=
Subject key identifier:   11:63:E0:9B:DD:D0:94:AC:5F:77:A7:EA:A9:3E:FC:37:C9:A1:73:56
Authority key identifier: D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1
Certificate issuer:       /CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1
Certificate serial:       019D37F75668B23C9815A00A1F42EB391E6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
Manifest number:          1675
Signing time:             Sun 29 Mar 2026 05:00:49 +0000
Manifest this update:     Sun 29 Mar 2026 05:00:49 +0000
Manifest next update:     Mon 30 Mar 2026 05:00:49 +0000
Files and hashes:         1: 1u7ifzwsXJ7FeArNorbrBAptJaE.crl (hash: OSB4MgDT2fH+d3X3qxg/G7QxmtBCVJq3NhMy7UwFQpM=)
                          2: q3vaJOTC8w8YJydcJlzdNu2t6t0.roa (hash: 6HoX9dCuUvOi7bV1+OJY+cnUcJyW0sCh4AS88KCyve8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 05:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:f7:56:68:b2:3c:98:15:a0:0a:1f:42:eb:39:1e:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1
        Validity
            Not Before: Mar 29 05:00:49 2026 GMT
            Not After : Mar 30 05:00:49 2026 GMT
        Subject: CN=1163e09bddd094ac5f77a7eaa93efc37c9a17356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:56:36:a7:04:5e:62:fd:13:34:a1:e1:fd:d2:
                    08:18:48:30:fd:e1:06:e4:67:bb:27:e8:71:06:ff:
                    58:ad:a2:f9:63:48:91:ac:1a:22:4c:fb:92:55:6d:
                    96:e0:46:05:15:d0:d1:24:f6:07:1e:60:b7:3c:6c:
                    05:0c:54:fb:dd:eb:73:94:fc:af:21:48:c8:d0:47:
                    9a:e3:34:88:41:03:c5:01:71:bd:7f:62:1c:27:f1:
                    b6:19:93:e3:30:af:d9:0c:0e:18:ae:f4:e3:fb:a7:
                    5c:9b:b4:72:97:62:31:7e:0a:f0:34:55:4e:0d:c4:
                    85:23:92:02:b2:3e:ec:64:b0:3b:f6:15:ae:b9:24:
                    49:18:62:97:69:c5:32:55:4c:2f:cd:ff:76:5b:79:
                    07:ab:ea:00:59:7a:81:53:aa:eb:ea:5d:2c:30:a2:
                    58:ed:3e:d1:c6:85:35:3d:e3:6d:a1:47:a2:b3:0c:
                    8b:98:a4:4f:2b:4c:b2:07:fc:a7:08:f3:2a:35:4e:
                    51:52:89:d6:80:12:f1:55:f3:ad:cf:3f:5b:11:99:
                    0f:60:36:21:e9:95:da:1b:ce:07:b5:6e:68:d2:ec:
                    c1:5f:3b:d5:72:4c:30:f5:cb:b0:61:de:e4:f5:b3:
                    08:4d:16:04:58:9a:14:bf:a4:96:09:65:fe:da:40:
                    fa:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:63:E0:9B:DD:D0:94:AC:5F:77:A7:EA:A9:3E:FC:37:C9:A1:73:56
            X509v3 Authority Key Identifier:
                keyid:D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:d6:5b:e0:1a:31:58:bd:66:31:b0:0f:1c:c1:76:b3:8d:61:
         ae:ae:cc:6c:e6:de:e9:5e:5b:b6:2d:3f:b9:ac:aa:38:19:7e:
         30:7c:22:1b:57:dc:06:c9:8a:76:75:c1:e4:3a:5d:41:2c:79:
         e5:61:20:98:03:1d:1c:49:a7:cf:97:c8:1a:0f:fb:f7:ba:d7:
         df:05:ea:95:9d:c0:1d:aa:15:3f:76:e3:37:25:3d:ca:16:da:
         08:9d:78:5a:40:0c:c7:a9:b1:6c:0d:b5:df:df:19:9e:42:2a:
         44:f2:c9:fd:8c:49:84:15:c8:e3:a6:e4:21:ec:2c:ce:09:44:
         79:59:f8:ba:63:f5:80:a3:d0:29:61:3c:b0:c5:72:10:90:f6:
         ed:b8:b3:35:f1:6f:fd:00:59:16:6b:31:38:3f:0e:83:7a:ec:
         d9:d5:33:b9:60:4c:0b:c6:50:b2:dc:bb:2d:e9:73:17:fe:c1:
         48:4d:7b:5f:cd:3d:af:6f:da:02:97:77:08:43:09:ca:5d:6d:
         28:30:43:f1:8b:6e:ad:4c:05:95:a0:b5:cb:7d:f5:6b:13:49:
         f1:56:4b:ee:3c:e7:05:ba:7d:b5:a1:c0:6e:89:70:2d:34:3f:
         37:44:a6:1a:19:94:84:86:6c:5e:78:4c:1d:af:b0:26:66:a6:
         05:7b:82:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:44 2026 by rpki-client