Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.mft
File:                     myNjkGD_h6d_xnpuA8DE3Srkw5E.mft (raw, json)
Hash identifier:          AhgKYiarWFGWOGJj4kx59NoRLq5jE1PlEDnwYLcvd5o=
Subject key identifier:   E8:58:E5:88:1B:D1:BC:05:8F:D2:A9:BA:60:CC:7D:E4:3C:4A:04:B8
Authority key identifier: 9B:23:63:90:60:FF:87:A7:7F:C6:7A:6E:03:C0:C4:DD:2A:E4:C3:91
Certificate issuer:       /CN=9b23639060ff87a77fc67a6e03c0c4dd2ae4c391
Certificate serial:       019D38D2E66650BEFA44AB5D881F27578A96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/myNjkGD_h6d_xnpuA8DE3Srkw5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.mft
Manifest number:          188F
Signing time:             Sun 29 Mar 2026 09:00:38 +0000
Manifest this update:     Sun 29 Mar 2026 09:00:38 +0000
Manifest next update:     Mon 30 Mar 2026 09:00:38 +0000
Files and hashes:         1: myNjkGD_h6d_xnpuA8DE3Srkw5E.crl (hash: z1hkSIkKekqIakcfjChpv81ZlG0Tsty3ui5zkXAhQQg=)
                          2: ylf5_yxkn6LPt4ZeJuQiy0KaFkA.roa (hash: 0Nce3mcGLsxHxF9BEIwf4WWciMSuNoKxw/P+eNRR6J0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/myNjkGD_h6d_xnpuA8DE3Srkw5E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d2:e6:66:50:be:fa:44:ab:5d:88:1f:27:57:8a:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b23639060ff87a77fc67a6e03c0c4dd2ae4c391
        Validity
            Not Before: Mar 29 09:00:38 2026 GMT
            Not After : Mar 30 09:00:38 2026 GMT
        Subject: CN=e858e5881bd1bc058fd2a9ba60cc7de43c4a04b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ce:08:3d:a9:d4:36:ba:d4:96:c6:5d:c8:7b:
                    8e:6d:db:d9:f8:bd:95:49:02:6b:dc:d4:86:89:fa:
                    13:c9:2c:d2:32:65:2f:c1:e6:bf:f3:45:1d:54:87:
                    2a:07:94:4d:2c:13:48:8c:b3:b7:47:f2:4e:54:8a:
                    82:26:b8:7d:50:21:a7:78:5b:7f:36:f3:77:7c:bf:
                    cc:22:c1:06:fa:02:bb:4e:ec:46:c8:7b:b6:c4:8e:
                    52:29:7c:a5:b4:3a:85:67:f6:bd:5c:4d:a0:ef:23:
                    f2:55:8d:a1:5a:83:b9:0d:d7:b2:60:36:15:de:c4:
                    17:73:39:bd:f8:6b:69:c7:b1:a2:c8:c8:a0:10:54:
                    75:a7:80:54:22:6c:f5:b1:ee:60:eb:4a:ba:f4:86:
                    5c:f7:0c:87:5c:5a:7a:2c:74:99:2a:dc:4c:b3:6e:
                    77:d1:b0:15:9b:29:3e:54:75:ca:63:96:87:7a:3e:
                    88:a8:0a:57:6e:9e:ae:2f:5c:22:8c:06:35:36:c9:
                    56:87:4e:99:76:9a:13:ce:d7:4e:18:36:49:92:c3:
                    c7:b5:35:d4:81:08:4e:4b:81:d8:6a:55:e7:cd:e1:
                    22:f1:05:55:73:03:d2:61:f7:7a:b9:5c:7e:20:ae:
                    7c:86:8e:44:b5:ee:e8:18:a8:6a:e8:57:bf:73:a1:
                    6f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:58:E5:88:1B:D1:BC:05:8F:D2:A9:BA:60:CC:7D:E4:3C:4A:04:B8
            X509v3 Authority Key Identifier:
                keyid:9B:23:63:90:60:FF:87:A7:7F:C6:7A:6E:03:C0:C4:DD:2A:E4:C3:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/myNjkGD_h6d_xnpuA8DE3Srkw5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:c6:43:02:49:5f:21:3d:9d:4d:dc:ec:17:65:d2:88:79:1c:
         18:b6:af:4d:a0:75:42:1b:98:89:5a:f1:85:18:63:30:30:08:
         23:f9:16:77:c7:9f:40:77:83:a8:5e:cf:24:da:a0:b6:cd:2b:
         8b:9e:37:b9:dc:47:04:2f:33:16:36:47:d3:b9:4b:ff:78:68:
         78:01:f3:b1:1c:f1:5a:65:a5:dd:6b:69:74:86:eb:f6:ba:f7:
         8f:31:0f:55:d3:d5:74:7b:99:41:ac:86:ec:b0:1d:68:76:bc:
         d9:e8:a2:5e:c3:a1:26:4a:56:f1:2b:5b:73:84:1e:21:e8:d5:
         6c:10:14:4c:62:d8:33:44:a9:40:11:ae:0d:15:f7:f6:73:a1:
         4e:10:9c:80:5d:38:7d:42:42:bb:ad:a0:ee:c3:52:2b:61:b4:
         92:89:5a:01:70:66:b8:09:fd:b7:74:df:9a:5d:27:6e:ed:ba:
         32:d1:56:f1:45:12:50:a3:05:1d:cc:b8:bd:f8:35:f0:2d:29:
         6b:cc:f8:09:03:cf:1b:6f:a4:89:99:fe:5f:81:73:4c:c6:6e:
         3f:15:b4:61:44:40:74:18:8a:4c:62:39:77:88:7d:94:00:64:
         df:88:77:88:fb:9b:e5:23:8c:f9:67:25:b8:ca:62:f5:df:1d:
         fb:95:d8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:36 2026 by rpki-client