Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
File:                     IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft (raw, json)
Hash identifier:          w90dRXf33M38IHsaDWJnJGneU7ILgMs/h6ONHC85HhI=
Subject key identifier:   67:C4:7B:E3:77:C1:32:3E:23:17:A5:66:60:7D:86:96:0E:95:44:CE
Authority key identifier: 21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7
Certificate issuer:       /CN=217b491dccb5632216d80b48f8d6286b1effd8d7
Certificate serial:       019CED82B929433D42271CFE990AC080317A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
Manifest number:          13BD
Signing time:             Sat 14 Mar 2026 18:01:33 +0000
Manifest this update:     Sat 14 Mar 2026 18:01:33 +0000
Manifest next update:     Sun 15 Mar 2026 18:01:33 +0000
Files and hashes:         1: IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl (hash: 169yMitd1WR7XkhAJ3iPnhbOi7LWS1eeyspoWJh12h4=)
                          2: Ry13RGPYJVvtpvhKEOm6pAfriNc.roa (hash: oTL00T36xjABiLlLnyyxwdABnaFfTiLLRpEKK+wxv9o=)
                          3: TYPr3RJ5yO-DDveN9UKe3IFvuiY.asa (hash: QAM+8Y7IXNl8McE2u38ceOVi6OQTLcaAjr7T4vt1spg=)
                          4: XmK83eJDzPMsOo6NG4b7hC8Q6ik.roa (hash: LiOPt6WyR9nnxeKYrKkKUN50OOD6CsvfUFylT6hefd4=)
                          5: lMyPvW5droFVn6Tk385-cqRx17c.roa (hash: gpoTflIdMdUsvV/coCFUIU3cd1nO0X3/iYdUbk7d574=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Mar 2026 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ed:82:b9:29:43:3d:42:27:1c:fe:99:0a:c0:80:31:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=217b491dccb5632216d80b48f8d6286b1effd8d7
        Validity
            Not Before: Mar 14 18:01:33 2026 GMT
            Not After : Mar 15 18:01:33 2026 GMT
        Subject: CN=67c47be377c1323e2317a566607d86960e9544ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3f:48:95:e5:5f:05:eb:88:0d:17:00:6e:30:
                    d2:6a:a7:ec:a7:eb:65:04:1b:7b:a2:f6:23:40:b4:
                    b8:f7:51:10:59:16:62:f6:d6:6e:ee:66:dd:d7:95:
                    dc:0f:93:5f:b5:f1:33:6d:35:90:52:34:1b:39:59:
                    5f:26:93:21:8b:11:b7:05:35:e1:9f:0a:ff:8c:d5:
                    6c:d9:e7:f9:22:3d:d0:63:31:a3:9f:46:db:a3:8f:
                    7b:e6:fc:d3:91:82:8d:a9:51:ea:2f:27:f6:89:bc:
                    2a:95:6c:01:72:8d:02:86:b5:78:b6:e1:22:ed:5b:
                    d0:59:e1:e5:72:48:25:27:f8:7c:b5:75:c8:81:75:
                    a4:16:73:66:c5:ec:d7:71:f5:b3:8c:fb:98:35:fd:
                    0c:ce:dc:e2:ea:31:66:c9:e1:3d:97:25:1b:8e:8c:
                    6d:be:fb:f1:f2:8f:12:78:b3:78:12:1a:f0:97:42:
                    6e:4a:9a:db:e4:cb:20:d7:33:cf:ea:ed:40:c6:78:
                    c8:1b:95:e9:a4:d0:00:f3:e4:2e:5d:89:78:47:bf:
                    3a:f5:6f:38:02:5f:9d:5d:89:fd:71:6f:8a:82:40:
                    ff:af:1c:29:6d:3b:58:c3:fd:1f:5b:2c:11:02:c0:
                    df:80:10:53:6a:8a:7d:63:ef:80:4b:6a:09:9d:70:
                    b6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C4:7B:E3:77:C1:32:3E:23:17:A5:66:60:7D:86:96:0E:95:44:CE
            X509v3 Authority Key Identifier:
                keyid:21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:4a:9c:fd:7d:93:18:ea:b0:0e:5c:ab:33:fb:d7:50:d4:58:
         25:8e:d3:30:ac:24:bb:d0:ad:7d:bd:77:08:4a:61:78:1c:ea:
         74:fc:ad:19:9b:24:c9:b8:62:29:e2:4e:f3:4f:b3:17:ec:0d:
         d1:b7:34:a6:b5:e2:92:58:48:8c:f6:2a:36:6a:64:63:cd:dc:
         dd:b9:ea:4e:94:b3:37:d6:9d:50:17:e6:6e:c3:20:98:64:1e:
         ae:d4:c4:c1:73:c8:08:67:49:d0:9a:7d:0a:53:77:87:8a:3e:
         0e:63:a5:be:6f:2a:52:c0:5b:27:21:d4:0a:cf:3d:36:2e:c5:
         89:14:62:0c:61:09:a0:11:46:5c:97:38:91:e5:4b:14:ed:ce:
         fd:46:10:4a:8d:94:58:3d:bc:59:01:d6:49:7c:90:af:5e:48:
         0f:03:65:94:7d:dd:8e:56:0c:e2:64:ac:b7:78:bb:de:99:af:
         db:de:c7:78:14:0b:0c:d4:82:92:1d:f3:c1:4b:36:36:b1:eb:
         d6:d7:ce:40:be:2b:e8:7d:ae:de:ea:e5:30:08:8e:86:84:30:
         ca:b5:f4:37:fc:d6:55:d5:1f:81:3c:01:1f:68:ca:93:c8:fc:
         e8:da:38:b6:b2:18:9f:14:6b:15:54:98:76:01:ad:e0:02:fe:
         a8:47:3f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 20:38:40 2026 by rpki-client