Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft
File:                     vX2BeM7FzTdlSKkEkRf0acCnQxw.mft (raw, json)
Hash identifier:          Gnu51ZWI9Gg+kyZH5kjDOOIS4fQHMuGePcCA0gfYKZM=
Subject key identifier:   7A:CF:28:D2:12:4D:7A:DF:33:A9:7E:55:A9:32:22:4B:B1:44:AB:EE
Authority key identifier: BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C
Certificate issuer:       /CN=bd7d8178cec5cd376548a9049117f469c0a7431c
Certificate serial:       019D1F81BFF489DFEF9BC6D66E9875A53AE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft
Manifest number:          1894
Signing time:             Tue 24 Mar 2026 11:01:30 +0000
Manifest this update:     Tue 24 Mar 2026 11:01:30 +0000
Manifest next update:     Wed 25 Mar 2026 11:01:30 +0000
Files and hashes:         1: 7z1tSf8I9u1vya-qzqnrFwA2jNM.roa (hash: /WQm3fnxjA4ArGkSbC1Tat7ScQ2OaqKECXjtZq5aFo8=)
                          2: XiD6lDrgMPuS8eayCDVkIbui-4s.roa (hash: SBkJkhDft5A8cF6t/KuhZfif5su+kzjqoUhMEaiSsSk=)
                          3: ajZvyc1TZO3sN3JzZ4xIlekYW3A.roa (hash: KoTZ28q/3XFXaDAUF+RkPrxNb4KFBcBG2YemXG25Ts8=)
                          4: pBECGuvlqI1JRG7h1KFoBdoLOQQ.roa (hash: g1yrRU6vVwlNdEkW9jmsyPMMiYUAGVw0ecH5Z2RUhlM=)
                          5: vX2BeM7FzTdlSKkEkRf0acCnQxw.crl (hash: 6aHVsoX20IdP6C46vnrklfznayqhSS25ejEvKQlvtFU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 25 Mar 2026 11:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:1f:81:bf:f4:89:df:ef:9b:c6:d6:6e:98:75:a5:3a:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd7d8178cec5cd376548a9049117f469c0a7431c
        Validity
            Not Before: Mar 24 11:01:30 2026 GMT
            Not After : Mar 25 11:01:30 2026 GMT
        Subject: CN=7acf28d2124d7adf33a97e55a932224bb144abee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:59:d0:fa:04:50:49:95:57:68:fd:e9:18:79:
                    91:ec:d2:47:e2:b0:a9:4c:fa:cd:dd:2c:3a:05:54:
                    4a:c4:ad:e0:5e:8f:e2:22:4d:95:0f:a0:7b:b7:2d:
                    04:13:a4:d7:37:80:cc:66:c5:cd:83:b3:d5:f7:89:
                    b9:03:c7:82:12:02:0c:3f:70:ae:b5:be:53:b7:19:
                    ac:16:51:fc:89:3c:64:13:36:99:6a:4c:40:c3:35:
                    c0:97:b0:d5:41:19:cd:2f:26:9d:aa:e8:c2:ce:bd:
                    bb:6c:a8:36:c9:3d:ee:c1:9b:61:ca:ef:64:bc:a9:
                    ca:cc:39:9c:42:94:f0:ba:08:0d:9b:cd:09:a8:7e:
                    05:b4:13:8e:de:80:8b:36:3e:d3:35:ce:c9:38:c8:
                    19:f0:78:95:05:9a:50:ef:4d:9e:a3:63:6e:fe:68:
                    e1:98:8e:e0:50:c5:71:e7:e7:de:17:75:90:c7:19:
                    7c:88:b3:79:8b:cb:cf:1a:c0:1f:a2:17:ad:73:8e:
                    7d:40:84:34:43:84:56:9a:1b:89:de:f1:42:aa:e0:
                    a8:81:73:17:d3:10:35:4c:52:ef:a6:46:f2:33:2e:
                    2c:03:64:93:fe:bb:bf:71:83:5f:72:a1:b4:99:22:
                    07:f7:e1:ec:d6:ca:c2:13:04:81:a0:3c:99:10:0a:
                    f1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:CF:28:D2:12:4D:7A:DF:33:A9:7E:55:A9:32:22:4B:B1:44:AB:EE
            X509v3 Authority Key Identifier:
                keyid:BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:fb:fa:a7:c6:b2:72:2b:b5:27:49:d8:84:30:63:e2:88:bc:
         c2:bb:0d:7e:84:ae:5e:43:61:00:f4:d2:03:01:b6:e1:df:5a:
         e2:1f:b7:22:00:d4:b2:11:bf:35:69:d5:62:0f:a8:3a:95:84:
         1a:c5:28:ca:97:c1:b5:20:01:bc:42:89:58:76:46:d1:56:95:
         59:4a:9e:fd:00:b0:8f:cf:b1:a1:13:00:e9:02:e1:bc:2f:49:
         3f:4e:45:fc:82:f5:e3:0c:01:08:12:79:17:c9:dc:e5:f1:94:
         83:25:b2:39:eb:79:63:fa:82:dc:1c:4e:c2:de:ab:80:6d:e5:
         b3:0a:8a:6f:38:8b:84:40:ea:33:42:7b:27:ab:85:13:c8:0d:
         cf:55:fc:bc:ce:80:da:97:c3:4d:9d:19:88:65:8a:c3:d5:c8:
         ef:b5:f5:db:3a:a0:ff:6c:3f:a7:f9:90:b2:bc:ec:92:63:a0:
         ae:7c:64:33:ef:a4:25:c2:67:b4:3d:1b:6e:b8:28:92:fc:da:
         3c:5a:6d:6a:d2:c7:d4:54:f9:d7:31:37:da:de:18:fd:7a:2e:
         ab:5d:ed:e8:93:e1:c5:c9:f9:8d:d0:05:4c:7b:e9:14:4c:18:
         9f:f4:90:8a:d5:7c:89:93:6a:ce:81:dc:ab:97:c2:0f:15:8b:
         52:bd:a8:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 17:20:14 2026 by rpki-client