Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft
File:                     Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft (raw, json)
Hash identifier:          YQ18m5gt9oM/aP4x4v3FEB9zQzWB0k/AcVTgTedGtYk=
Subject key identifier:   0C:BA:05:97:0A:C7:82:44:97:A3:1F:08:1B:36:23:C7:95:C4:F1:C7
Authority key identifier: 3E:BF:AF:8A:1A:A3:BC:1F:F3:E3:E4:30:C6:7F:B7:A6:41:0A:3D:F7
Certificate issuer:       /CN=3ebfaf8a1aa3bc1ff3e3e430c67fb7a6410a3df7
Certificate serial:       019D389BA67181EF5129D9D3E2E4CBAC9A50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft
Manifest number:          078E
Signing time:             Sun 29 Mar 2026 08:00:17 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:17 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:17 +0000
Files and hashes:         1: 9MMTJC9bSYJjm0yH2SR40mWxLt4.roa (hash: 911epWb1C+HTij7xHBBtK6BFbTtOQmcCGUfZtk4CgN0=)
                          2: Pr-vihqjvB_z4-Qwxn-3pkEKPfc.crl (hash: Iu1775GuxtBum8v8cHHr/2nmztnCshnMYglaTpzF0dg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9b:a6:71:81:ef:51:29:d9:d3:e2:e4:cb:ac:9a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ebfaf8a1aa3bc1ff3e3e430c67fb7a6410a3df7
        Validity
            Not Before: Mar 29 08:00:17 2026 GMT
            Not After : Mar 30 08:00:17 2026 GMT
        Subject: CN=0cba05970ac7824497a31f081b3623c795c4f1c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bc:f7:a1:1f:ed:73:1a:1a:be:b1:d1:7f:19:
                    0a:c4:d0:2a:56:90:3a:6a:d0:dc:82:67:8c:b0:36:
                    e8:87:9d:53:de:d4:a4:23:cd:3b:e4:d7:df:a1:7a:
                    1c:51:f8:cd:45:55:16:2a:22:89:92:f7:54:64:35:
                    41:92:66:b4:0e:89:07:c5:46:50:9f:97:ee:ba:e3:
                    83:7e:2e:67:45:65:47:16:ad:b7:27:02:1e:ec:c4:
                    29:0a:41:86:68:cb:1d:6a:5c:d6:9d:2b:dc:f1:fd:
                    95:1c:69:77:6b:8a:a9:0d:4e:5f:38:79:5f:98:c9:
                    95:7d:07:72:a5:80:d6:1a:7f:b0:e7:1b:6f:9b:23:
                    ea:15:e7:69:a3:72:4a:31:9b:8e:51:44:ba:b8:be:
                    d0:58:27:f4:b6:41:85:68:44:4a:0d:9b:c8:db:69:
                    4e:0f:e2:88:e2:d4:67:ed:6a:d9:97:b9:63:33:82:
                    95:ae:d8:1c:4f:88:f8:bc:41:47:9f:33:2c:59:ca:
                    6e:7b:3d:21:d7:7e:34:90:a1:d6:c4:e0:a7:ba:33:
                    35:da:2d:85:ea:19:1d:5c:64:f9:56:46:c2:8d:4d:
                    bd:51:39:07:19:5a:1b:03:85:e6:5d:c0:09:79:34:
                    5e:e6:e1:51:ae:61:2c:ff:40:d1:92:fd:31:de:87:
                    46:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:BA:05:97:0A:C7:82:44:97:A3:1F:08:1B:36:23:C7:95:C4:F1:C7
            X509v3 Authority Key Identifier:
                keyid:3E:BF:AF:8A:1A:A3:BC:1F:F3:E3:E4:30:C6:7F:B7:A6:41:0A:3D:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:b9:36:21:f1:76:6c:00:50:f9:63:c1:e0:67:ac:45:84:82:
         22:ce:72:92:c1:c1:65:63:4d:6f:59:64:c5:f2:7d:28:d6:ff:
         0b:da:5c:cc:aa:8f:88:9b:9e:9b:b1:d1:87:07:2b:2a:20:97:
         b7:12:8e:39:a8:99:3b:d2:d1:48:c9:ae:df:1b:bf:90:a7:53:
         5f:2d:3e:60:b5:af:6b:47:46:52:1b:f1:67:61:ef:74:96:6d:
         87:f7:b0:6a:b3:7d:b2:42:1e:d4:d1:6e:64:35:d1:d0:ee:c6:
         67:7d:0c:90:b4:98:b2:3e:93:e8:62:fc:de:da:a2:68:3d:ba:
         95:b0:97:c6:76:c7:9c:3f:49:d0:29:95:a5:1f:03:98:4a:ca:
         3e:52:a0:40:18:48:c4:21:3a:e7:cc:b4:f4:ff:80:95:fc:85:
         9d:28:40:07:a5:a8:41:76:55:6f:48:14:64:2d:d6:ee:04:96:
         bb:30:4e:e8:71:3b:41:db:69:a9:ca:c2:dd:6b:73:16:b5:b8:
         b1:ea:78:8b:2a:d2:64:ea:c0:eb:61:09:a6:15:56:0d:c6:4a:
         37:74:7e:66:37:65:ad:b0:c9:ae:ac:7f:39:07:48:c1:dd:25:
         ca:85:63:3f:49:24:ad:aa:c8:ac:b1:19:a6:b4:18:62:fd:86:
         3a:08:79:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:40 2026 by rpki-client