Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
File:                     RsmLLko-Bg3vRavGLA40X6qAtew.mft (raw, json)
Hash identifier:          p3B8C7ZBAk9IRhhy2TOTLy6+skSZwkuqhPwk2RU2bRY=
Subject key identifier:   A7:96:4D:83:9C:48:95:6B:33:DF:90:D4:7A:07:C9:A5:B3:72:22:19
Authority key identifier: 46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC
Certificate issuer:       /CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
Certificate serial:       019D2E4F6F61699A5A1387D994441BD409E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
Manifest number:          1888
Signing time:             Fri 27 Mar 2026 08:00:50 +0000
Manifest this update:     Fri 27 Mar 2026 08:00:50 +0000
Manifest next update:     Sat 28 Mar 2026 08:00:50 +0000
Files and hashes:         1: Ip7p_hL1VXdeRgj8FVGhTum4zB0.roa (hash: agYqlxFFSnuNhJD9cHkZJfqIOemy4XNVrJfaav2GJL4=)
                          2: MGqAhkKHBACRFaiNXYcP9SHiMFE.roa (hash: GZRYXJdlMwxnrdhoW6/XDsnMjgU/H78VBDuIRDqDxI0=)
                          3: RsmLLko-Bg3vRavGLA40X6qAtew.crl (hash: qNjhviX1L0Bjff+4W1vmagbtmu3Mt5+cJz4ZuhLj0zU=)
                          4: WjHsZr2LYotu7UixbhUPmyhufyM.roa (hash: UbFC6dvqvKaXgJmhKzkqauNjGk31aKocZ5d+hid0GEk=)
                          5: hL4nAbMjDcB0I8HfTfp0aJOETu4.roa (hash: HMgiqPXACPgRgXB4fWWx/eVqV6zK3UzAgCuz5lAzZEM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Mar 2026 08:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2e:4f:6f:61:69:9a:5a:13:87:d9:94:44:1b:d4:09:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
        Validity
            Not Before: Mar 27 08:00:50 2026 GMT
            Not After : Mar 28 08:00:50 2026 GMT
        Subject: CN=a7964d839c48956b33df90d47a07c9a5b3722219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d7:d4:03:42:48:e1:69:33:45:68:a7:73:c9:
                    d4:24:fc:d4:94:5d:96:c0:b0:e9:2b:ad:5a:fb:be:
                    b5:02:61:93:98:39:8f:3a:bd:26:46:ec:19:10:66:
                    22:30:6e:33:8a:e0:61:8a:19:b9:07:35:bf:7b:c2:
                    b2:8e:68:7d:9b:d0:1e:ef:08:6c:ba:bf:5b:eb:b4:
                    d1:0d:62:b5:31:03:8a:b6:c6:43:14:8f:6f:e5:cb:
                    e0:89:35:75:6e:d7:37:59:0f:51:a5:dc:28:b6:ad:
                    3d:5e:39:93:48:a2:03:93:a0:cc:89:10:9d:f6:4c:
                    bf:aa:b9:01:fb:e2:22:d3:28:6d:a4:6d:1f:79:50:
                    68:ca:01:48:21:68:60:28:54:5b:e2:23:da:cf:53:
                    f1:34:5b:ee:d4:94:c5:89:db:99:08:c7:b8:b9:28:
                    be:4d:6e:53:2d:8f:f2:b2:30:b0:6a:50:78:01:55:
                    b4:4d:33:88:09:84:a5:f0:b6:76:70:76:25:6e:a1:
                    42:b8:84:da:eb:7f:31:35:d9:e3:c1:db:cf:eb:9c:
                    cc:b1:ea:92:c2:e6:28:73:84:2a:be:7c:01:bc:d8:
                    8d:85:63:b4:31:0a:1f:5f:ea:53:a8:ee:b7:24:a1:
                    1d:7b:df:63:50:4d:98:0a:85:9b:51:b3:f6:fa:90:
                    a1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:96:4D:83:9C:48:95:6B:33:DF:90:D4:7A:07:C9:A5:B3:72:22:19
            X509v3 Authority Key Identifier:
                keyid:46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:8b:96:55:a2:49:c7:32:a5:72:12:e9:c0:90:9a:f4:fd:f3:
         4b:a0:ec:11:fe:0f:c5:11:46:7a:0b:db:d8:f1:96:2a:b9:c7:
         2e:28:47:db:c8:2b:52:69:96:fc:2e:13:4d:a2:e8:75:88:b9:
         0e:df:32:94:5f:7c:d6:3a:90:02:46:01:74:90:b1:6b:31:9c:
         71:38:97:b4:d1:9a:5d:2c:03:ad:91:30:84:cc:d1:f8:0e:c5:
         18:2f:f3:3f:4a:3e:35:a4:ec:89:ab:49:f4:1a:5f:a9:61:72:
         75:33:9e:2e:f3:60:a2:2a:ee:f2:53:dc:fd:ef:f5:fe:f2:a4:
         d1:d7:b3:0d:31:52:5b:3f:50:66:a4:50:73:a6:0f:6a:ae:a8:
         01:48:32:8b:a5:4d:aa:ed:3c:90:19:0a:69:59:fd:57:51:cc:
         16:c0:55:0c:d1:66:f6:a1:2c:fd:c9:6e:2d:45:95:94:6c:93:
         c7:cb:3a:0c:7f:73:5d:84:e0:29:2c:c9:ab:ef:69:8d:f1:9d:
         bf:94:b8:e6:34:26:a9:fc:d0:11:65:a7:d9:a2:3c:5f:87:ce:
         41:b6:ac:f2:e9:a1:6a:96:16:10:06:73:df:c5:98:99:c2:36:
         f4:4d:f3:c4:8b:c8:50:80:e1:45:ca:f1:75:29:ee:e5:21:01:
         22:e4:6a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 16:47:54 2026 by rpki-client