Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.mft
File:                     79xI2asQ8OQqPcZ_vQ9MuORMq2k.mft (raw, json)
Hash identifier:          lG6QCr13l2chzyDKR+sjhYhsyNA6QSfwlklld44W8bM=
Subject key identifier:   8C:10:2A:B6:00:8F:DF:E6:A2:E6:9E:91:A1:0E:3C:96:74:C9:19:7C
Authority key identifier: EF:DC:48:D9:AB:10:F0:E4:2A:3D:C6:7F:BD:0F:4C:B8:E4:4C:AB:69
Certificate issuer:       /CN=efdc48d9ab10f0e42a3dc67fbd0f4cb8e44cab69
Certificate serial:       019D37C06F01B92B71114F7E3AD791D2A61A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/79xI2asQ8OQqPcZ_vQ9MuORMq2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.mft
Manifest number:          1890
Signing time:             Sun 29 Mar 2026 04:00:51 +0000
Manifest this update:     Sun 29 Mar 2026 04:00:51 +0000
Manifest next update:     Mon 30 Mar 2026 04:00:51 +0000
Files and hashes:         1: 5q8b-mFBKEi7KxA-qotiTf_Ngcs.roa (hash: UP1Aef3+F12caRUYXmTS+aJsJJVlKeAHOy7RJvD6MyQ=)
                          2: 79xI2asQ8OQqPcZ_vQ9MuORMq2k.crl (hash: yXSWm7NxfUXP7JyBbOBcnLHLYTJn9Q5GyvxwLei77Qo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/79xI2asQ8OQqPcZ_vQ9MuORMq2k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:6f:01:b9:2b:71:11:4f:7e:3a:d7:91:d2:a6:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efdc48d9ab10f0e42a3dc67fbd0f4cb8e44cab69
        Validity
            Not Before: Mar 29 04:00:51 2026 GMT
            Not After : Mar 30 04:00:51 2026 GMT
        Subject: CN=8c102ab6008fdfe6a2e69e91a10e3c9674c9197c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:67:87:34:90:a4:11:a2:a3:3f:64:f1:f4:6d:
                    55:46:c9:4d:82:84:23:25:24:e8:67:29:3c:51:9b:
                    b1:02:f4:82:6e:ad:99:34:4e:75:3f:9b:c5:9d:f1:
                    b7:50:8c:43:ed:76:38:2a:03:08:51:25:6e:1a:da:
                    1a:b6:dd:ba:18:66:bd:e1:f9:47:49:bb:e2:88:f3:
                    60:1b:ae:9c:a5:89:90:63:96:20:41:e2:e0:30:37:
                    27:8c:52:ae:6b:46:d0:4b:cb:f3:41:f6:b5:50:e2:
                    9b:95:cb:80:d1:a7:6f:c1:ce:b0:78:11:0d:f7:6a:
                    dc:f8:87:b3:a0:e6:54:16:e6:52:94:1a:43:f0:83:
                    6a:5a:d9:4f:cb:d5:64:f5:ff:79:f8:bd:74:62:16:
                    fa:5e:2e:4b:54:f5:f3:4d:6a:14:e2:1b:23:1b:1c:
                    88:03:ac:c5:3c:57:5c:37:d9:76:b3:64:69:fd:af:
                    9b:ca:1e:40:ef:d7:46:3a:25:e5:06:0f:95:13:86:
                    1c:4e:f0:96:63:3e:5e:3b:69:18:1e:a5:db:7d:e0:
                    84:6f:5d:33:b7:ea:08:3a:42:ed:df:83:0d:f4:ac:
                    98:9d:7a:fd:ce:cc:96:f9:97:8b:9c:9e:bd:6a:d9:
                    aa:fb:8c:c3:6a:06:6c:62:56:cc:71:5c:fe:1d:96:
                    b9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:10:2A:B6:00:8F:DF:E6:A2:E6:9E:91:A1:0E:3C:96:74:C9:19:7C
            X509v3 Authority Key Identifier:
                keyid:EF:DC:48:D9:AB:10:F0:E4:2A:3D:C6:7F:BD:0F:4C:B8:E4:4C:AB:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79xI2asQ8OQqPcZ_vQ9MuORMq2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:bc:81:41:fa:32:5e:a1:9c:9f:d5:46:19:e7:c5:74:1f:39:
         99:3d:11:a8:d8:ae:f5:15:5b:0f:43:b6:c0:41:da:34:62:b9:
         5f:a8:fc:ca:25:66:ae:3e:a7:a2:a0:26:bd:b0:36:94:3e:9e:
         21:9d:5a:3f:21:ca:b6:bb:46:7d:a2:c5:ac:5e:c9:99:33:38:
         fc:c5:2b:05:2c:42:d5:7e:3d:fc:c2:e9:3d:ed:92:d3:f3:2a:
         55:69:55:51:20:93:f9:16:69:db:7d:f0:46:7f:1d:d6:5f:0c:
         c3:d6:9e:9e:a7:05:e3:97:49:da:eb:57:48:a4:3f:7f:3b:3b:
         ef:14:9c:7f:e6:60:92:7c:5c:d9:e7:6d:c2:c4:31:02:69:40:
         b4:fe:0e:38:1b:85:ff:92:cb:49:d4:5f:1a:07:ee:42:48:65:
         66:98:87:29:c0:7e:82:a0:2b:6f:3f:5a:bc:8a:d0:95:dd:21:
         08:9c:0c:72:3b:bb:4c:1b:8e:14:2a:f8:9a:a8:c1:40:e5:9b:
         cf:09:8c:f8:37:6b:a7:6e:89:db:26:cb:1d:5d:c5:aa:d4:c0:
         ab:b9:61:24:5d:df:8e:2f:17:44:31:d7:72:49:66:c2:0f:29:
         b9:72:7f:be:a9:7f:b4:94:45:83:53:4e:11:21:10:0c:c4:2a:
         75:4d:b3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:43 2026 by rpki-client