Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
File:                     89SUuLJxr7fGLxOX9xLPLc02QYU.mft (raw, json)
Hash identifier:          OL7YunNLlW1CEhfkbrEorSthQ69AMr5wGsOcIJTy8rA=
Subject key identifier:   6B:AA:BC:D0:5B:ED:30:DE:E1:6B:3B:43:32:F4:2C:41:54:54:50:53
Authority key identifier: F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85
Certificate issuer:       /CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
Certificate serial:       019D2F2B35E283DA18CA0414B9678511BFF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
Manifest number:          188E
Signing time:             Fri 27 Mar 2026 12:00:53 +0000
Manifest this update:     Fri 27 Mar 2026 12:00:53 +0000
Manifest next update:     Sat 28 Mar 2026 12:00:53 +0000
Files and hashes:         1: 89SUuLJxr7fGLxOX9xLPLc02QYU.crl (hash: tE+4+vb7TIAhuelYPeXF3PQd/LalbjkeEYO+Z05cQ4I=)
                          2: mhvprDFBImPl7iFEWW3FxFWOZ6g.roa (hash: YcvQtGrqc9rsfbkzmvXWNEdP5V2+qw1zO++Zl2+6+Eo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Mar 2026 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2f:2b:35:e2:83:da:18:ca:04:14:b9:67:85:11:bf:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
        Validity
            Not Before: Mar 27 12:00:53 2026 GMT
            Not After : Mar 28 12:00:53 2026 GMT
        Subject: CN=6baabcd05bed30dee16b3b4332f42c4154545053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1f:70:60:95:e8:c0:d2:53:b1:f8:63:a3:1d:
                    39:3c:66:81:95:5f:3c:db:51:87:0c:17:f6:c1:ef:
                    83:a3:58:f5:2d:e7:2f:2f:ab:cd:30:b6:a1:a2:64:
                    4a:45:88:a3:dc:2b:d9:cb:e4:4b:d0:c1:82:d1:82:
                    4d:ce:f7:a8:50:9c:c9:0a:1f:c9:99:ac:45:a3:23:
                    f3:71:56:e7:09:ac:d5:fc:58:33:20:f4:5d:12:fa:
                    4e:5c:bd:07:da:b6:1d:3b:6b:ad:6d:79:a2:63:de:
                    fe:2e:5b:54:fc:a6:91:6e:81:32:5b:21:91:b4:62:
                    b7:21:72:76:9a:2d:e6:49:d6:8c:28:d5:7b:e8:00:
                    17:f9:33:ca:53:1c:3c:13:79:5c:c1:e7:8e:2d:ce:
                    71:cc:19:1d:b8:ab:ee:18:2c:58:ff:7a:8e:ab:4d:
                    9d:9e:ba:90:90:d3:2a:48:f3:e0:38:c3:62:37:cc:
                    26:56:5a:d6:0a:69:70:74:36:f5:c4:5c:58:40:32:
                    82:75:c9:07:e5:0a:97:5c:b7:4c:9e:17:c8:e7:b6:
                    29:dd:04:22:3c:58:c4:d9:85:ea:31:55:5e:a3:ac:
                    44:87:c0:eb:42:3c:5c:be:fa:e8:f0:b7:2f:2e:38:
                    93:e5:be:59:9a:ab:36:70:5e:17:1b:9e:c6:ad:5e:
                    2e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:AA:BC:D0:5B:ED:30:DE:E1:6B:3B:43:32:F4:2C:41:54:54:50:53
            X509v3 Authority Key Identifier:
                keyid:F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:19:25:3a:1f:20:d0:f4:0c:d9:9e:2d:4c:af:ea:19:2e:50:
         0c:5e:ad:f1:ff:05:91:3a:c4:e2:48:41:a6:72:4b:67:ad:70:
         76:8a:5b:9a:30:5b:f3:ab:69:dc:dc:93:10:c1:b3:5e:ef:eb:
         2b:a4:18:80:24:7b:a9:c7:8a:e0:f7:4c:d3:b8:dc:aa:ae:fe:
         67:e6:b7:9d:56:57:f2:fb:1c:fc:33:07:e4:6f:31:b0:58:8e:
         a7:cc:30:cd:a6:4b:ee:38:70:5f:ab:5a:0a:48:5b:bb:af:be:
         db:04:da:e6:5c:5f:b2:70:48:32:04:9f:11:63:dd:7a:09:69:
         96:ef:e1:83:2d:48:cf:ac:0c:64:f2:fe:59:62:68:98:76:87:
         fc:4c:04:9e:d1:0e:a5:78:20:ef:fe:c8:f3:93:3d:27:d0:ad:
         5a:ab:7b:9e:7d:55:e8:43:86:b5:eb:98:a0:3f:39:09:e6:d0:
         c0:18:88:a4:5f:48:1d:84:62:98:d0:ef:1d:21:e8:1d:39:37:
         ff:97:59:ba:c1:8f:5c:17:4d:a7:49:8d:77:a9:31:ae:cb:69:
         3d:82:b1:6f:a2:83:5d:9a:1a:c4:dd:9c:1a:4e:2d:d7:a0:e8:
         d0:f7:c4:de:43:c0:1f:77:ad:59:ef:d9:8f:62:80:4b:f7:15:
         59:55:b5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 15:21:35 2026 by rpki-client