Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft
File:                     IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft (raw, json)
Hash identifier:          WanQK1sQhqjg4uuPzdCNFi4u/FJEp8uw38sMoQwwoMI=
Subject key identifier:   E7:E3:21:7C:5B:3C:FF:95:25:8C:25:87:B7:75:48:49:DA:61:49:7A
Authority key identifier: 20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B
Certificate issuer:       /CN=2037512e5355e815acf064603f8ae3f5528a5e3b
Certificate serial:       019D35D2851F9D862D5A166F772296BEFF03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft
Manifest number:          176A
Signing time:             Sat 28 Mar 2026 19:01:22 +0000
Manifest this update:     Sat 28 Mar 2026 19:01:22 +0000
Manifest next update:     Sun 29 Mar 2026 19:01:22 +0000
Files and hashes:         1: IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl (hash: ltUQ+i3naXEqjQEenZ+IOSyF4UlGhJbj0BinrAuq6z8=)
                          2: _1uT-dJdB4zjdJrrsneMD7wKcvI.roa (hash: ZF972oLTFfsetFH5TGdur7PAWOAqIPiOxk86Q4SVB40=)
                          3: lWJFLWzbEFcrz6v7MBMAal1UC0Q.roa (hash: 8TaQuYzpOnIciU3bPXjs+EPWsUmEnwjkG4COBm5InQ4=)
                          4: lj_OVhtyzOOGAl8O2ZX2b9-uYP4.roa (hash: /IN+PkswpcNIMIACvoERnunbvdFhIwO4BCUWqEEWkVE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 13:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:35:d2:85:1f:9d:86:2d:5a:16:6f:77:22:96:be:ff:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2037512e5355e815acf064603f8ae3f5528a5e3b
        Validity
            Not Before: Mar 28 19:01:22 2026 GMT
            Not After : Mar 29 19:01:22 2026 GMT
        Subject: CN=e7e3217c5b3cff95258c2587b7754849da61497a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:92:10:98:13:d3:81:5f:55:b6:dc:c2:3e:41:
                    20:35:fb:9b:41:76:a3:be:a8:98:1e:3e:12:a8:38:
                    4d:64:52:24:7d:c2:50:12:78:1f:7e:0f:30:97:d4:
                    b5:77:3e:00:9f:38:43:5d:35:13:8d:15:6c:db:40:
                    9d:87:3f:0b:a7:43:e9:c3:b0:37:9d:c1:74:f1:57:
                    46:2b:2d:75:6f:ca:fa:14:fb:bc:f8:5b:2a:e3:1b:
                    51:83:fe:77:74:36:37:ed:f2:14:51:de:24:55:28:
                    9e:40:cc:52:50:1c:67:2f:ed:b2:7b:f3:5c:00:c8:
                    bf:09:13:1d:53:90:dd:67:c4:61:24:d6:52:67:85:
                    7f:2a:a2:df:af:dc:d8:42:69:a7:96:09:f4:a6:b9:
                    42:0f:05:9d:19:c0:53:79:bb:88:f5:91:75:53:db:
                    4f:89:2c:96:23:86:77:e0:9a:56:07:dc:d3:b5:4a:
                    d9:c0:06:ce:ce:85:93:dd:d3:de:a8:0a:6d:7a:ac:
                    c8:df:48:8f:0c:2e:e3:30:05:cb:97:51:f3:65:b5:
                    31:fd:9c:f0:14:18:1a:da:dc:39:99:34:6a:1a:67:
                    56:00:84:e9:86:27:80:03:c9:6a:aa:ec:90:fa:13:
                    50:19:1b:be:80:48:2d:e8:39:e6:e0:48:14:18:06:
                    74:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E3:21:7C:5B:3C:FF:95:25:8C:25:87:B7:75:48:49:DA:61:49:7A
            X509v3 Authority Key Identifier:
                keyid:20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:dc:ba:65:23:3d:2f:95:a1:8e:d1:3d:5f:c4:09:f6:9e:42:
         1c:74:6f:0e:5a:c2:67:19:7f:0f:18:29:6c:59:9f:6c:be:5a:
         c4:d8:f1:a3:3d:96:f4:07:df:19:88:ba:f0:a9:79:6c:c3:61:
         7a:85:c1:b7:34:70:7c:04:70:9f:04:87:78:8b:11:46:c6:bd:
         71:cc:4d:98:8f:bc:4d:35:eb:87:88:87:78:32:1e:23:a2:50:
         e8:81:31:c0:7d:07:20:64:e0:9a:13:d2:4a:58:cc:8f:a0:b6:
         c2:98:e5:cb:47:9d:f8:82:19:02:49:47:1c:d9:b5:ac:ec:c6:
         d6:14:42:f5:13:06:05:b6:13:0f:64:1a:05:04:ce:d2:56:09:
         8f:61:82:f6:13:48:af:de:9d:f0:a8:0a:27:83:aa:9e:a6:06:
         e6:81:31:b6:66:c9:74:27:76:30:29:da:42:fe:36:47:ba:00:
         54:50:3e:83:87:fd:d1:7b:55:44:65:5b:f0:cf:2f:fb:86:aa:
         d4:72:5b:b0:ef:80:67:1a:66:00:51:d5:a3:bd:29:51:c5:c7:
         72:db:0d:b3:1f:6f:4e:1e:49:31:2e:76:54:0d:7b:1c:c9:88:
         df:d6:6b:53:d6:d4:82:80:6f:4f:5e:ea:72:5f:98:62:ac:0d:
         27:b4:49:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 22:06:44 2026 by rpki-client