Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
File:                     RsmLLko-Bg3vRavGLA40X6qAtew.mft (raw, json)
Hash identifier:          Mqj2G5dcTnoEc4m6Tr+Fom9j/zR21I3esUHec0mA2Gw=
Subject key identifier:   8C:22:AA:1A:79:F8:C2:E6:52:0A:F6:94:1D:BE:C4:BD:0D:7F:AD:65
Authority key identifier: 46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC
Certificate issuer:       /CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
Certificate serial:       019D0D7B29736216334C2950975554B70714
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
Manifest number:          1877
Signing time:             Fri 20 Mar 2026 23:01:08 +0000
Manifest this update:     Fri 20 Mar 2026 23:01:08 +0000
Manifest next update:     Sat 21 Mar 2026 23:01:08 +0000
Files and hashes:         1: Ip7p_hL1VXdeRgj8FVGhTum4zB0.roa (hash: agYqlxFFSnuNhJD9cHkZJfqIOemy4XNVrJfaav2GJL4=)
                          2: MGqAhkKHBACRFaiNXYcP9SHiMFE.roa (hash: GZRYXJdlMwxnrdhoW6/XDsnMjgU/H78VBDuIRDqDxI0=)
                          3: RsmLLko-Bg3vRavGLA40X6qAtew.crl (hash: udRZyi9tq24GY7Klc4wr+i0pl2I/KVzjA6cG+shTjaI=)
                          4: WjHsZr2LYotu7UixbhUPmyhufyM.roa (hash: UbFC6dvqvKaXgJmhKzkqauNjGk31aKocZ5d+hid0GEk=)
                          5: hL4nAbMjDcB0I8HfTfp0aJOETu4.roa (hash: HMgiqPXACPgRgXB4fWWx/eVqV6zK3UzAgCuz5lAzZEM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 21 Mar 2026 23:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:0d:7b:29:73:62:16:33:4c:29:50:97:55:54:b7:07:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
        Validity
            Not Before: Mar 20 23:01:08 2026 GMT
            Not After : Mar 21 23:01:08 2026 GMT
        Subject: CN=8c22aa1a79f8c2e6520af6941dbec4bd0d7fad65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a6:c6:20:79:94:6e:82:b6:c1:84:86:2a:13:
                    8a:40:a1:be:97:61:47:27:45:d3:0d:be:9c:a6:d3:
                    f2:fa:45:81:c8:dd:01:7b:2c:ab:80:18:45:38:46:
                    18:36:b2:83:72:e0:b1:45:db:f6:89:c2:1a:8b:e7:
                    9d:6c:7f:51:c1:a3:f4:31:46:5f:7f:b1:39:fd:7c:
                    ff:8e:96:3c:24:77:c2:05:21:45:08:46:e0:5e:72:
                    b0:1e:ab:8c:8e:14:be:71:ee:ed:77:9b:2b:07:4d:
                    3c:8e:77:0b:41:85:dd:6b:24:b2:86:98:ba:99:42:
                    5f:07:a6:06:08:5b:a5:6e:82:09:64:58:33:da:cd:
                    d5:ef:ad:31:d0:65:08:31:81:70:07:43:70:1d:9d:
                    8e:00:97:61:18:de:ac:39:46:a0:1f:c8:2f:17:c1:
                    79:0a:b5:c4:bd:fe:10:eb:37:71:62:01:49:b9:05:
                    df:83:36:68:e1:27:ec:23:36:8d:64:db:71:2d:93:
                    a1:49:85:0a:0f:a9:f0:1a:74:4f:b7:8d:ef:cf:c7:
                    b1:cc:1b:8b:c1:16:e1:bc:6c:dd:90:2f:57:58:af:
                    eb:eb:9e:16:9c:90:e3:c7:14:a3:3d:b9:67:b9:47:
                    06:69:4d:30:9b:15:ed:01:e8:79:af:f7:d0:76:33:
                    b6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:22:AA:1A:79:F8:C2:E6:52:0A:F6:94:1D:BE:C4:BD:0D:7F:AD:65
            X509v3 Authority Key Identifier:
                keyid:46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:96:a7:81:51:44:42:bf:09:a2:08:62:38:1f:56:bf:46:fc:
         31:aa:de:ca:97:d8:df:8b:4a:59:9d:b7:ee:b5:a1:bf:75:88:
         55:53:01:75:6f:d9:0e:0d:64:53:94:b2:b0:3a:ce:0b:c0:5d:
         de:5b:74:27:98:53:50:41:2b:ae:a8:55:c8:b3:b5:32:a9:75:
         53:33:b3:57:ef:a6:35:76:a4:99:7f:f3:e6:0d:30:f9:4b:94:
         49:94:9c:61:a4:14:4a:6e:6f:b4:71:70:94:b0:ae:18:ed:f5:
         95:75:e0:2a:0f:42:45:75:21:e9:79:99:31:77:40:57:8a:cb:
         30:fe:91:73:31:03:ba:e8:02:cf:f6:04:07:73:27:cb:ff:06:
         27:26:26:78:dd:b6:2d:0b:65:15:0c:a7:c2:6a:94:88:2f:c7:
         7b:43:34:f9:67:01:04:dc:99:42:1d:a7:bc:45:5d:d8:98:97:
         57:3c:45:bf:b0:58:b7:98:a4:46:9b:3d:04:13:07:a5:5a:95:
         84:33:a7:a0:ad:39:63:35:34:8d:d6:a3:0c:59:f1:e3:15:d1:
         fa:9d:ff:f3:4c:1e:6a:e2:57:e2:7e:5b:a3:dc:fd:2a:27:7e:
         58:09:b3:57:73:1d:dd:14:57:ef:8e:3e:fb:55:eb:31:f2:df:
         f2:d8:16:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 08:01:48 2026 by rpki-client