Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
File:                     10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft (raw, json)
Hash identifier:          oKMY8PWNGgC+bR1M1mYNovlO06ZwrlGhQ5+OfeAT9DM=
Subject key identifier:   CF:16:87:72:62:65:CC:B4:30:83:86:06:BA:20:0B:4C:F5:AE:21:72
Authority key identifier: D7:49:8C:D3:27:EA:33:BF:F8:62:9D:7F:49:D6:BE:3A:DC:5F:F3:2C
Certificate issuer:       /CN=d7498cd327ea33bff8629d7f49d6be3adc5ff32c
Certificate serial:       019CFA62063627F27FE5039814A5ED03FBE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
Manifest number:          1870
Signing time:             Tue 17 Mar 2026 06:00:53 +0000
Manifest this update:     Tue 17 Mar 2026 06:00:53 +0000
Manifest next update:     Wed 18 Mar 2026 06:00:53 +0000
Files and hashes:         1: 10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl (hash: 3V7OygpNjYLpQhYJmDkZXjLTf+4jPFLhawJWRpN0PcQ=)
                          2: c4zkb26v95y_D2sc6nv7fdxn9Lc.roa (hash: bMZY04nBemF6cIkhBuUz9nxHZyNkGpj8Eh/OlRIxJ2M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Mar 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:fa:62:06:36:27:f2:7f:e5:03:98:14:a5:ed:03:fb:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7498cd327ea33bff8629d7f49d6be3adc5ff32c
        Validity
            Not Before: Mar 17 06:00:53 2026 GMT
            Not After : Mar 18 06:00:53 2026 GMT
        Subject: CN=cf1687726265ccb430838606ba200b4cf5ae2172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:10:0f:29:3f:0c:90:a1:46:a8:a4:2f:02:ad:
                    be:59:03:fd:f3:aa:61:53:89:cc:93:46:1f:80:8a:
                    2a:5a:8e:dc:19:13:42:1f:10:52:01:5d:5b:86:4e:
                    f0:f9:f5:8e:64:13:4a:85:b9:e0:35:1e:c3:cd:2c:
                    bb:74:3b:07:f1:86:23:87:cf:a0:c7:35:73:0a:55:
                    3f:16:47:c7:13:d2:4e:a8:ff:63:db:c9:b8:f0:b0:
                    57:c5:90:d7:b1:f1:0a:0c:cf:1f:44:d3:62:dc:37:
                    69:8a:21:35:81:97:24:d6:a7:79:c2:72:9d:af:ce:
                    16:6f:ff:db:6d:92:31:49:0e:22:67:9d:2d:b2:63:
                    ce:5e:7d:da:9b:e7:cb:01:02:41:55:fa:d1:d1:a7:
                    f6:39:a1:09:5a:03:7c:95:f1:30:b8:40:84:cc:85:
                    ba:aa:d4:4d:cc:08:a2:27:30:11:1b:08:da:d9:db:
                    d7:87:2b:65:96:2f:55:d0:b3:89:bc:03:86:27:e7:
                    03:64:2f:17:9e:44:1f:12:b4:d0:3a:19:bd:6a:49:
                    c5:c8:64:01:38:b2:f3:85:76:e2:a0:49:34:7e:a1:
                    56:fd:cc:8f:6e:f4:1a:67:06:49:82:b1:a5:5e:ff:
                    6e:52:e5:03:03:1f:f7:9b:fc:35:6a:1c:31:de:52:
                    63:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:16:87:72:62:65:CC:B4:30:83:86:06:BA:20:0B:4C:F5:AE:21:72
            X509v3 Authority Key Identifier:
                keyid:D7:49:8C:D3:27:EA:33:BF:F8:62:9D:7F:49:D6:BE:3A:DC:5F:F3:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:99:8a:aa:87:8f:b5:54:d3:04:88:ae:f3:07:dd:af:d2:d8:
         31:27:a6:72:4f:f3:f1:0c:e1:d7:f2:73:bb:fc:e3:2a:1e:81:
         53:ed:b7:40:16:01:9a:1e:47:5d:7d:80:52:93:e6:3b:cf:5a:
         9c:91:63:3e:54:e8:78:43:74:0e:82:d1:ee:d2:36:34:76:6b:
         e5:a7:3c:50:b8:cb:3f:7a:01:4f:72:1b:08:81:bf:08:5b:dc:
         7c:7d:41:ee:6d:47:8a:f8:c9:4c:49:3d:34:23:71:71:49:60:
         a5:58:7d:d8:8d:a2:7d:07:fc:13:41:09:b3:ce:fa:ed:b5:e8:
         8d:7e:3f:44:e4:f4:b0:15:b6:e9:2f:4e:9c:29:f2:a8:ea:b9:
         3f:1c:0e:2d:d4:ca:a3:d6:7c:0e:c4:c4:71:47:b8:2b:5c:ec:
         35:76:4c:ed:ec:d7:b4:e1:20:49:d9:dc:da:98:e3:5f:7c:69:
         46:e6:e4:03:81:46:b3:7c:51:dd:ad:99:6b:a8:69:b1:32:05:
         50:af:cc:61:13:18:34:f6:8f:19:22:5f:14:4e:03:18:ea:3a:
         4b:10:4a:ad:a5:d3:2b:2c:2f:9e:c5:ae:79:54:91:41:bb:82:
         3f:cf:fc:ea:20:b8:1d:9c:d0:05:fb:d1:26:78:4e:d1:d4:38:
         16:cb:ee:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 16:11:43 2026 by rpki-client