Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft
File:                     fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft (raw, json)
Hash identifier:          DkatyYQzOE16Ww5O+mpjU8Ky1/CeUP5a0Hx/FfUsNwI=
Subject key identifier:   15:63:12:A9:DA:00:07:FA:32:60:4A:10:EB:2D:85:62:39:A6:FD:BF
Authority key identifier: 7D:0A:C3:34:43:8A:53:D1:8A:E4:0E:FC:93:68:76:8B:93:1C:FA:C2
Certificate issuer:       /CN=7d0ac334438a53d18ae40efc9368768b931cfac2
Certificate serial:       019D37531DF8B4A8D0995A7FD5FC1C32B524
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft
Manifest number:          1892
Signing time:             Sun 29 Mar 2026 02:01:26 +0000
Manifest this update:     Sun 29 Mar 2026 02:01:26 +0000
Manifest next update:     Mon 30 Mar 2026 02:01:26 +0000
Files and hashes:         1: WJpebRSVLbQrdcjeB04EXCpIhRg.roa (hash: XP6zMi85BeS7CS6gjX07ym99dXpvUnSFZsiLXXS4Qvw=)
                          2: fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl (hash: mEmc6OAqo6v7D3ovzbhiLLj6IoijihHuU3Bmh+5dwQU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 02:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:53:1d:f8:b4:a8:d0:99:5a:7f:d5:fc:1c:32:b5:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d0ac334438a53d18ae40efc9368768b931cfac2
        Validity
            Not Before: Mar 29 02:01:26 2026 GMT
            Not After : Mar 30 02:01:26 2026 GMT
        Subject: CN=156312a9da0007fa32604a10eb2d856239a6fdbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2e:39:4f:56:c3:aa:91:81:9c:d1:b5:ba:ef:
                    44:62:f1:be:45:2f:fe:7b:85:a8:1f:9b:0e:43:3e:
                    f6:8e:49:64:ec:18:d1:3c:93:71:ac:1f:11:72:a8:
                    87:93:80:84:39:52:6a:27:f7:5b:46:bc:00:b1:92:
                    1a:d6:c3:05:53:fa:eb:a8:b4:1b:df:1f:67:c7:01:
                    30:9d:7a:cc:26:ff:16:90:d7:03:ed:76:e2:b5:76:
                    0e:28:1a:8a:c8:a2:84:0a:48:60:e1:17:8a:f8:c2:
                    35:57:01:f7:68:c5:72:96:15:d2:42:07:fe:54:07:
                    98:a2:8e:59:dc:f6:5c:ee:b7:65:bd:ab:0c:2d:36:
                    d5:a3:ec:40:10:f6:88:de:f7:cc:4f:79:a9:a3:6e:
                    c6:cc:b7:34:13:61:20:d9:1c:04:7b:48:32:5a:e9:
                    46:d0:30:03:bb:39:70:4a:a1:8c:4f:b9:f7:f3:f2:
                    e5:15:b1:95:22:88:ef:fa:98:68:06:aa:46:67:13:
                    97:c6:b0:fc:41:f3:c5:8a:80:c7:70:9c:99:e9:1e:
                    c4:c3:b0:7a:cd:5e:88:cc:89:05:48:33:4d:90:7f:
                    3e:8a:6e:56:c1:a5:a5:f8:95:2f:04:ee:46:d6:bb:
                    1f:66:55:1e:8f:8c:07:72:fa:cb:f2:fd:31:b2:6f:
                    6c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:63:12:A9:DA:00:07:FA:32:60:4A:10:EB:2D:85:62:39:A6:FD:BF
            X509v3 Authority Key Identifier:
                keyid:7D:0A:C3:34:43:8A:53:D1:8A:E4:0E:FC:93:68:76:8B:93:1C:FA:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:2d:c6:36:c0:db:6f:59:7b:0f:7e:f0:15:ec:18:30:25:27:
         45:ef:43:63:e9:77:3a:a5:ff:bc:29:91:47:ba:b2:17:5d:26:
         4d:46:8e:6d:35:e5:74:3f:f5:83:c3:af:18:d2:29:a0:e8:94:
         4a:e4:87:a5:93:15:c4:32:01:15:32:95:21:08:fc:78:e4:6a:
         3d:f7:0a:95:25:08:b1:d6:be:e1:3e:6c:36:8f:68:8a:65:9b:
         1d:45:29:96:7a:fe:22:aa:cb:11:65:4a:1a:88:be:08:04:9e:
         fd:aa:90:b8:4c:14:48:ee:07:6f:f4:db:c1:24:90:16:8d:7b:
         d9:c1:59:40:99:e5:6a:4e:cc:d4:ba:81:f4:c7:d6:95:fb:ac:
         17:c2:de:6e:49:07:e6:2f:da:ae:e8:17:a3:d4:39:df:53:f5:
         2f:5b:f6:b1:56:f3:08:2a:be:2e:81:63:ea:b4:48:54:e8:fe:
         01:d9:d1:b0:34:b0:86:2e:f3:7b:ee:98:12:5d:8d:f3:4f:06:
         e0:36:b8:d1:fb:83:ad:34:b8:08:69:e4:cd:4a:1e:05:16:86:
         6f:db:d2:79:0d:f4:3b:83:bc:24:84:5d:1e:5e:81:02:f4:1b:
         6b:07:2a:4e:93:86:29:d0:2b:d6:b3:42:a6:38:ee:50:57:1a:
         60:d1:7b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:43 2026 by rpki-client