Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.mft
File:                     g02WbQCvvDm1lYvBpu1Xk__AxU0.mft (raw, json)
Hash identifier:          DdFXULZM3Mwz3e5X2Nm2Ws5KcdLxLvNvNyPfrdB7uNM=
Subject key identifier:   C2:A7:33:FA:69:50:78:55:70:F7:35:07:9F:7D:03:FF:99:B2:42:DE
Authority key identifier: 83:4D:96:6D:00:AF:BC:39:B5:95:8B:C1:A6:ED:57:93:FF:C0:C5:4D
Certificate issuer:       /CN=834d966d00afbc39b5958bc1a6ed5793ffc0c54d
Certificate serial:       019D394173432BFA59FB60D89E64607D7AF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g02WbQCvvDm1lYvBpu1Xk__AxU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.mft
Manifest number:          1890
Signing time:             Sun 29 Mar 2026 11:01:23 +0000
Manifest this update:     Sun 29 Mar 2026 11:01:23 +0000
Manifest next update:     Mon 30 Mar 2026 11:01:23 +0000
Files and hashes:         1: g02WbQCvvDm1lYvBpu1Xk__AxU0.crl (hash: hRn+mhkY9uLCplxZcHOKAv3CzSLpUwxeU1t/qs5kWBQ=)
                          2: zm-VPfgYBhRWZQWrUYEyL-yQqqQ.roa (hash: vf/q4m/7I3joQjOIdPXQnV26DkkefWku22BzZk3X9go=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g02WbQCvvDm1lYvBpu1Xk__AxU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:41:73:43:2b:fa:59:fb:60:d8:9e:64:60:7d:7a:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=834d966d00afbc39b5958bc1a6ed5793ffc0c54d
        Validity
            Not Before: Mar 29 11:01:23 2026 GMT
            Not After : Mar 30 11:01:23 2026 GMT
        Subject: CN=c2a733fa6950785570f735079f7d03ff99b242de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:09:da:16:57:3e:b0:30:02:60:4e:31:23:ed:
                    d7:bf:bf:48:73:a6:15:e3:8a:13:a4:45:c1:8d:6b:
                    a1:5d:ee:1b:95:f0:99:3b:14:2f:a5:ba:65:90:18:
                    c8:82:7e:dc:5e:22:f0:92:ac:12:c4:7f:3c:ba:0c:
                    0e:e0:f4:8b:b3:08:e6:57:12:d5:1c:2f:d4:d5:47:
                    3d:32:a4:30:2f:0b:a2:c0:0a:44:49:64:eb:d6:7b:
                    7f:d5:8e:60:11:7a:2d:df:3e:96:01:e4:4b:cf:7b:
                    2f:47:ba:bc:ac:5d:a4:fc:e6:ef:01:76:c9:61:ec:
                    23:46:a2:4f:d6:b0:cf:29:d0:29:0d:00:88:ca:3b:
                    a0:dd:c7:85:4c:89:42:b0:52:a1:9e:41:0f:96:3d:
                    43:70:56:41:9f:9b:d4:89:bc:4e:38:ef:c5:b0:b9:
                    89:be:8e:17:2d:f5:35:85:f7:39:97:bb:5e:63:44:
                    77:39:6d:fd:9d:e3:66:b5:69:1a:92:5f:21:89:be:
                    5c:b1:5c:37:4f:32:6f:9a:a2:77:bd:ab:68:4f:52:
                    ee:16:a7:75:c6:27:50:97:08:8c:d6:42:7d:53:0a:
                    62:52:e6:4c:64:70:a8:4f:be:ee:b8:82:bc:8f:5f:
                    6a:e4:be:29:fa:91:e3:15:c3:62:3c:80:6d:76:35:
                    dc:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A7:33:FA:69:50:78:55:70:F7:35:07:9F:7D:03:FF:99:B2:42:DE
            X509v3 Authority Key Identifier:
                keyid:83:4D:96:6D:00:AF:BC:39:B5:95:8B:C1:A6:ED:57:93:FF:C0:C5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g02WbQCvvDm1lYvBpu1Xk__AxU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:f7:33:13:35:aa:1b:ce:bf:17:af:00:91:77:1f:36:48:b8:
         68:f3:50:c9:05:c1:c5:03:6c:f5:c1:be:eb:cb:bb:41:4d:a6:
         7e:20:29:0d:94:dd:95:64:26:eb:eb:16:2c:34:75:54:3c:65:
         0e:01:a7:eb:fd:e4:16:be:31:d6:45:14:92:0b:3f:5a:dc:58:
         cd:ee:77:94:bd:f1:91:5c:7c:cc:b5:71:75:9b:d4:b1:6c:9d:
         7b:33:bf:04:aa:a1:23:55:f5:0b:37:fb:90:eb:ec:8b:82:4d:
         3b:73:21:b2:70:16:b7:0f:f3:73:b4:11:44:84:d1:0d:ff:93:
         39:06:85:76:93:f0:cb:d9:36:2a:0a:b3:7a:66:1d:d3:ac:ff:
         bb:bd:40:e4:f6:f9:c7:9b:85:1d:cf:8f:42:86:ee:ee:a1:53:
         3f:95:d1:9f:5e:d9:e6:27:d6:f9:47:10:be:b9:fb:db:08:b6:
         33:c4:02:83:ff:a9:99:b3:02:93:f5:7a:a4:df:07:1f:85:d9:
         47:ea:fe:86:48:8f:68:5a:b2:50:6b:80:41:48:24:78:46:18:
         32:13:1f:05:ed:5e:d9:67:bb:64:29:5d:a6:6e:4c:c4:d5:3e:
         2f:a2:a7:ac:d8:5a:6a:90:1a:7d:cd:e4:4b:3a:6f:2f:51:a1:
         d0:66:5d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:25 2026 by rpki-client