Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
File:                     RsmLLko-Bg3vRavGLA40X6qAtew.mft (raw, json)
Hash identifier:          7k2gO0JgtclVQbAk2/95fWd1tjkOXMh7V2cWw4QOlgg=
Subject key identifier:   A8:93:90:83:F1:A3:C7:47:48:46:B6:D2:62:9A:47:78:D0:74:A0:DD
Authority key identifier: 46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC
Certificate issuer:       /CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
Certificate serial:       019D3FB0E2B25DC7559DDDA0A2F40E159532
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
Manifest number:          1891
Signing time:             Mon 30 Mar 2026 17:00:50 +0000
Manifest this update:     Mon 30 Mar 2026 17:00:50 +0000
Manifest next update:     Tue 31 Mar 2026 17:00:50 +0000
Files and hashes:         1: Ip7p_hL1VXdeRgj8FVGhTum4zB0.roa (hash: agYqlxFFSnuNhJD9cHkZJfqIOemy4XNVrJfaav2GJL4=)
                          2: MGqAhkKHBACRFaiNXYcP9SHiMFE.roa (hash: GZRYXJdlMwxnrdhoW6/XDsnMjgU/H78VBDuIRDqDxI0=)
                          3: RsmLLko-Bg3vRavGLA40X6qAtew.crl (hash: xWcTKI1hAV0vsUEhqHj5iJf1VyjQwCok6kkxwrHlUu8=)
                          4: WjHsZr2LYotu7UixbhUPmyhufyM.roa (hash: UbFC6dvqvKaXgJmhKzkqauNjGk31aKocZ5d+hid0GEk=)
                          5: hL4nAbMjDcB0I8HfTfp0aJOETu4.roa (hash: HMgiqPXACPgRgXB4fWWx/eVqV6zK3UzAgCuz5lAzZEM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 31 Mar 2026 14:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3f:b0:e2:b2:5d:c7:55:9d:dd:a0:a2:f4:0e:15:95:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
        Validity
            Not Before: Mar 30 17:00:50 2026 GMT
            Not After : Mar 31 17:00:50 2026 GMT
        Subject: CN=a8939083f1a3c7474846b6d2629a4778d074a0dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a2:fe:4c:49:84:ab:8f:ff:45:07:4f:50:c4:
                    06:3d:7a:16:20:9d:e4:55:5c:66:fe:15:7e:d4:11:
                    ff:5b:c2:23:cf:1f:82:64:a2:f8:10:35:f4:1c:a4:
                    3d:d1:e4:60:ba:e4:7a:66:ba:e2:b1:92:cd:9e:e9:
                    91:26:0f:f2:a6:ad:2c:e1:d6:af:22:58:e9:70:27:
                    3f:39:43:2c:40:56:34:06:2e:47:9c:46:75:87:8f:
                    2d:a7:9d:79:19:5c:23:1c:15:4d:50:8d:9a:2d:19:
                    ef:5d:f0:f4:23:dd:4a:d7:12:e4:5a:90:e9:01:f1:
                    87:02:12:0f:dd:f1:f7:fe:8c:a2:60:f1:eb:46:a9:
                    0c:2c:76:78:59:d0:34:fe:f4:f8:bf:88:f7:bb:d5:
                    8c:1d:1d:97:82:b5:12:41:66:28:da:20:88:a6:4d:
                    fa:de:8f:1c:46:b5:51:25:22:e6:52:e4:38:9d:55:
                    75:aa:77:67:e8:36:5f:5f:1c:ed:8d:3c:cd:03:1e:
                    da:31:07:59:85:34:1d:01:d5:90:dc:9b:00:c0:64:
                    cf:8e:d5:75:3c:a8:d0:d7:6a:5a:47:9c:ab:96:5b:
                    07:10:66:27:3b:cc:ed:26:a6:97:42:7a:12:3e:14:
                    c7:0c:07:92:a6:f5:c9:b4:43:a8:2d:5f:f2:d0:09:
                    af:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:93:90:83:F1:A3:C7:47:48:46:B6:D2:62:9A:47:78:D0:74:A0:DD
            X509v3 Authority Key Identifier:
                keyid:46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:f4:e3:a0:70:fa:df:ba:0a:46:5d:7a:96:00:bf:51:51:f3:
         a6:94:7c:4f:8c:82:c4:c4:78:2e:78:d1:2d:34:19:27:ff:84:
         17:b9:b8:7c:6d:5e:89:d4:55:dc:01:37:07:4f:43:e5:29:cb:
         81:bb:0f:ea:b4:62:c6:52:a2:d4:30:55:87:e2:94:e6:5f:e9:
         ea:db:44:ad:65:d4:3b:db:c4:de:e4:40:73:7a:af:14:0c:e2:
         13:31:03:cd:8b:d1:63:f0:66:13:e2:ab:b5:7d:87:8a:b7:8f:
         d0:10:df:ce:fe:a8:a1:5a:3f:5a:9c:ac:e9:a2:59:53:68:11:
         23:2b:28:20:f3:6f:e0:a4:0b:bb:be:d4:f5:a7:a6:71:59:10:
         eb:04:56:24:2c:c7:a7:6c:2d:29:f3:7f:5c:47:d6:4d:5e:02:
         4e:57:76:cd:8a:52:57:f6:9f:7a:2d:34:7f:ff:55:fd:f1:46:
         30:d0:0b:02:39:05:88:da:c8:5f:89:72:b0:1c:4e:36:f3:70:
         d6:28:98:0f:1b:89:c8:2e:33:82:ca:b3:64:fa:03:38:e1:ec:
         3a:8b:33:80:fc:df:50:23:cd:3b:3d:78:d2:0e:cf:da:26:34:
         aa:68:c4:70:1c:10:aa:9d:13:c3:6b:1a:60:24:83:e3:8b:13:
         3c:c6:f0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 21:41:53 2026 by rpki-client