Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
File:                     x4QShQX3-Zx1cEQpgK3rivkMwnA.mft (raw, json)
Hash identifier:          fYvAuwkwYWvkRFrmRgCGVtf9qzRlE3Bgvp1x8Kgm3Qg=
Subject key identifier:   7D:F6:3D:0D:C5:DC:59:32:0F:7F:F8:5C:7D:D7:5F:14:BA:A7:97:EB
Authority key identifier: C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70
Certificate issuer:       /CN=c784128505f7f99c7570442980adeb8af90cc270
Certificate serial:       019D378989E817A672F8658A18034DA5AF7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
Manifest number:          1893
Signing time:             Sun 29 Mar 2026 03:00:53 +0000
Manifest this update:     Sun 29 Mar 2026 03:00:53 +0000
Manifest next update:     Mon 30 Mar 2026 03:00:53 +0000
Files and hashes:         1: 6LY_I5SzlhFBv9eGnwKkecDyqDs.roa (hash: rY/4K0UyTx9gEr0sURKBlWuNRZZ59rIT1DcPYpDH8zU=)
                          2: WpjjTnaqAZv75i8pt4da5AeyrG8.roa (hash: zVLZyAPVL7um6st0K7rE7n1hsZMqjYHJuIbZn63Z38s=)
                          3: x4QShQX3-Zx1cEQpgK3rivkMwnA.crl (hash: vPFVadZUpEx2p4C4gylAXgalrI1NvjJoHySQikYFQic=)
                          4: zFQaWtM5PgZgQ7lLGiUdAyDYFlk.roa (hash: T++koCK9BmrUNL9Ums78HVke+W3UNP2l17fVLv+FlR0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:89:e8:17:a6:72:f8:65:8a:18:03:4d:a5:af:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c784128505f7f99c7570442980adeb8af90cc270
        Validity
            Not Before: Mar 29 03:00:53 2026 GMT
            Not After : Mar 30 03:00:53 2026 GMT
        Subject: CN=7df63d0dc5dc59320f7ff85c7dd75f14baa797eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bb:11:1c:26:06:47:cb:05:46:4d:59:b1:c1:
                    50:e1:f6:1d:f3:ab:c9:06:63:b0:9a:27:3f:3f:e2:
                    22:e6:85:df:9e:19:43:87:a9:23:36:2b:51:b0:5f:
                    4c:7e:dc:be:a8:f9:05:a1:89:4e:52:8b:1a:94:4a:
                    4b:2f:9f:2b:0b:a9:4c:51:44:bd:bf:19:23:d4:f0:
                    e1:cb:17:f7:20:39:e8:b9:0c:3d:bf:ab:c3:34:12:
                    31:a3:1a:5d:8f:64:fb:d0:f0:42:2a:e3:59:e6:19:
                    ea:8f:69:8c:ff:e9:a0:81:ae:5a:32:f9:2f:d0:79:
                    c2:51:f1:11:ef:6a:63:ec:ba:f8:ca:ea:c6:bc:e8:
                    43:49:6c:d1:fd:73:40:d6:35:f0:81:61:32:a3:58:
                    7a:51:ba:71:27:89:85:46:48:2c:93:66:27:76:06:
                    b2:a1:da:97:93:9e:89:c4:b2:56:02:15:67:7e:d3:
                    27:e8:8d:c0:e2:d2:e7:a0:3b:71:56:65:90:57:8d:
                    79:fb:34:06:28:b4:10:da:5d:5d:f0:d1:ab:85:79:
                    ae:c5:fd:e0:df:ac:d2:58:df:cb:e2:50:16:ff:fd:
                    1a:06:2e:69:38:2a:80:cc:07:3d:33:56:74:b2:77:
                    20:7a:5b:6d:16:b2:12:23:60:1e:83:90:fa:32:3d:
                    8e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F6:3D:0D:C5:DC:59:32:0F:7F:F8:5C:7D:D7:5F:14:BA:A7:97:EB
            X509v3 Authority Key Identifier:
                keyid:C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:1f:6a:ce:89:35:10:7d:63:47:2b:fc:db:0f:aa:05:d5:31:
         76:94:fd:94:de:62:6a:84:48:5b:e7:35:58:0c:70:04:62:b8:
         17:84:83:f1:b4:ac:f9:3a:30:42:84:52:27:e7:f9:e9:f0:9e:
         c3:0f:f6:0e:85:9d:ac:cb:d7:64:54:b5:83:c9:fc:28:3a:1a:
         f2:9f:31:37:0f:3f:b4:aa:c6:c9:28:94:c5:37:78:bf:f8:0f:
         2a:1b:13:d3:be:ca:71:b8:ec:71:07:7b:4a:2c:7d:ab:a6:29:
         63:db:55:a4:40:45:11:62:43:c4:4e:be:1c:cb:43:ee:7c:7b:
         e4:e0:8a:1e:ae:f5:b2:9f:70:b7:3a:c6:89:94:67:23:3e:67:
         02:e5:06:00:85:35:36:b5:57:48:05:8d:39:66:ff:26:90:3a:
         68:c0:b1:3b:ce:6d:c2:b4:9d:43:36:50:7c:92:19:bf:12:f7:
         f3:df:09:73:a0:dd:7b:53:2b:c1:b0:74:70:6c:5b:45:07:97:
         d5:04:d4:7a:9c:3a:c3:be:4e:17:50:a7:8a:83:71:68:0a:68:
         c3:94:2b:4a:c2:f5:de:e2:4d:a3:00:46:23:f9:a7:6f:df:af:
         82:ec:5f:f5:81:de:d4:f4:7f:17:de:db:e4:5f:6d:57:c1:62:
         36:86:12:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:31 2026 by rpki-client