Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft
File:                     977TP_AejgncT-3NAROcDneFSq4.mft (raw, json)
Hash identifier:          zwv5jxXWJRrxHCnwhVxt4gLodnPWbaxJKQ3HqCSWch4=
Subject key identifier:   6B:DA:31:82:5D:2D:85:E0:00:25:90:A8:A1:52:9E:1F:0D:90:35:F2
Authority key identifier: F7:BE:D3:3F:F0:1E:8E:09:DC:4F:ED:CD:01:13:9C:0E:77:85:4A:AE
Certificate issuer:       /CN=f7bed33ff01e8e09dc4fedcd01139c0e77854aae
Certificate serial:       019CE36BB45A5B7ACB56B6B3AABE31E93981
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft
Manifest number:          186B
Signing time:             Thu 12 Mar 2026 19:00:12 +0000
Manifest this update:     Thu 12 Mar 2026 19:00:12 +0000
Manifest next update:     Fri 13 Mar 2026 19:00:12 +0000
Files and hashes:         1: 977TP_AejgncT-3NAROcDneFSq4.crl (hash: NPPdmkyLpsapsCaT8Y9hpc5zH5TEUPgyBLFpQbkBYKk=)
                          2: K9ARhNUPke1FUpRD3jCOS20cCT8.roa (hash: xemlBpuRtqlzVTp6vvfqrvYIR9l5jVMyrtmPWS3Y4YY=)
                          3: uGNfdvA7X3WyOFyt75e9tVBH91A.roa (hash: 5//JVVveSwHR2hj+bfwWqReYip5bDufgsCMYkbkcBgE=)
                          4: w_HVWxfgMKccvm-uPAq_mXE30RI.roa (hash: nRyRk7kTehxIu33cjbfvuUdw6sNcxsEjbFzAJfWoy80=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 15:04:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e3:6b:b4:5a:5b:7a:cb:56:b6:b3:aa:be:31:e9:39:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7bed33ff01e8e09dc4fedcd01139c0e77854aae
        Validity
            Not Before: Mar 12 19:00:12 2026 GMT
            Not After : Mar 13 19:00:12 2026 GMT
        Subject: CN=6bda31825d2d85e0002590a8a1529e1f0d9035f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:02:ac:1d:34:84:de:99:79:d8:88:21:79:86:
                    2d:34:04:b3:0d:20:90:28:39:f3:19:e0:18:1b:e4:
                    5a:6c:91:d0:92:b4:96:4c:9d:25:02:a2:2f:24:dd:
                    99:82:bf:a4:22:8e:90:66:c2:df:04:43:d0:b1:5f:
                    b1:22:08:8d:38:de:7e:d4:14:fb:a4:7c:56:bd:cf:
                    f7:01:2e:b0:57:ba:f1:6a:e2:ab:19:44:29:f0:31:
                    31:90:93:29:de:df:47:11:5e:6b:a6:f8:20:cc:55:
                    76:ef:dd:fe:72:62:2a:ec:b3:19:e6:3c:6d:b9:ed:
                    fd:b7:ea:32:71:2d:20:28:de:61:82:e2:45:d0:de:
                    eb:d4:e5:f3:7d:0e:79:e7:e0:c9:4b:98:27:48:4e:
                    7a:9a:d8:b3:ea:fb:f3:a7:07:40:74:18:33:a5:72:
                    30:ff:6d:7b:55:cc:e5:21:5f:e5:15:39:89:47:49:
                    fa:27:58:85:88:a8:a9:ff:2d:d4:ae:1c:77:75:2e:
                    1a:02:c5:56:3b:ec:0e:6a:2f:bd:db:99:2b:7e:cc:
                    a6:6f:6a:22:80:22:e1:32:61:1c:2b:2f:da:4a:86:
                    a8:a1:a5:e0:8f:e4:65:1e:44:0a:eb:63:f4:40:61:
                    50:be:af:86:e8:4a:17:7f:41:b2:af:c4:1e:db:58:
                    b1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:DA:31:82:5D:2D:85:E0:00:25:90:A8:A1:52:9E:1F:0D:90:35:F2
            X509v3 Authority Key Identifier:
                keyid:F7:BE:D3:3F:F0:1E:8E:09:DC:4F:ED:CD:01:13:9C:0E:77:85:4A:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:c9:8e:e4:f8:03:45:25:5a:3e:74:a9:75:b7:7e:f6:c2:e8:
         dc:14:a7:e1:80:c2:cc:04:06:a6:35:4a:ec:e3:41:1f:0e:9c:
         8b:22:8f:0f:e1:d3:2b:2f:ce:c3:6f:b3:4f:56:a3:19:77:22:
         07:c6:3f:14:4d:64:a9:f5:a0:19:3f:58:5b:5a:32:20:50:6b:
         81:d7:9d:01:e8:ea:69:7b:79:c6:8d:ad:48:a0:ae:1e:17:77:
         f9:3d:53:05:e3:b8:32:c0:9b:df:eb:b5:ac:a8:2d:f9:fc:5c:
         54:44:f3:b2:d6:f3:da:d7:f2:55:45:40:d9:32:c0:26:d9:3c:
         33:01:33:1d:c1:f2:05:99:62:6a:9b:3e:75:2d:f4:1f:0b:53:
         09:9b:92:77:b4:39:02:2f:b0:83:95:56:08:53:ae:97:c5:95:
         09:e3:84:99:fc:b3:3f:c6:ec:14:fd:26:a6:bb:6a:f7:e7:bb:
         fb:31:a0:90:0a:a6:73:03:d0:6e:f1:c5:59:6c:92:20:d8:6d:
         fa:27:d5:1b:63:db:9b:51:c5:e5:d3:c4:42:2d:1f:5a:77:f8:
         b1:40:f1:a1:c4:07:ae:9f:15:a0:a9:ec:a0:26:0b:c4:dc:1a:
         cf:ee:c5:22:e9:11:04:28:d4:de:14:eb:55:60:6f:01:b4:97:
         3d:57:9e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 02:06:26 2026 by rpki-client