Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
File:                     1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft (raw, json)
Hash identifier:          CKUe/gwE9djD9itQ9y44GVSSjRUbEatE3l486h73pqc=
Subject key identifier:   CD:70:BB:85:50:10:D4:4B:6B:E9:18:0F:A6:C6:F9:E5:7A:5E:FB:CC
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Certificate issuer:       /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial:       019CF496C04AB95DA34ABEC97BDD562305C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
Manifest number:          1886
Signing time:             Mon 16 Mar 2026 03:00:46 +0000
Manifest this update:     Mon 16 Mar 2026 03:00:46 +0000
Manifest next update:     Tue 17 Mar 2026 03:00:46 +0000
Files and hashes:         1: 1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl (hash: B7Kp9xC/xlqUA+fqzC7Zmtz+YDq38JmreCvLFVcGn2s=)
                          2: 13XDGJYyNR2DoNt3I63wL8U0Jzs.roa (hash: I+JS8FII02pQo9N3kTh18PHz112YKE00khkm+cip7eA=)
                          3: 63yOiYKwU7JqEfSC9NxVJ01fCWk.roa (hash: K4Ob2YWWp3LxgFe3+6MIi9FKOa85HqimBOJiSHujQxY=)
                          4: 6nEB7u7VDBwJvvErhhk_sp8HgHM.roa (hash: SyBKloheaGBrGvFtFMvv0iZL+4Dv+JFkW0KebHTTw6E=)
                          5: 9H1b9QtJvvO5Q7tBMNvVVoE03o8.roa (hash: 8xeDQJquFgw+UoHUSmYV/m/pwUj8nT1iQkun0bxE7+Q=)
                          6: FzGpWZvbvQzmHwZ1mYWzl0OhA6A.roa (hash: V5FzneMXIFpEivxgGPkmTl20CGF3hlX/oPutyNatcaM=)
                          7: WS24_ZfdS-p841fXys78kKEcHFE.roa (hash: mdNWTDkBQ1LOAKpfMoKowipt1skh6RMzRxFFxzvaz1g=)
                          8: cohsG3SQlcWk1HwXz_9_V1W-DnM.roa (hash: Z0rTIgtHw2j6D7sRMbadoj6J39N2b5eJp5yHD6/XmPU=)
                          9: dIH6BysLhLi3YbgR32hD9CEC-Rc.roa (hash: EKTQSkYkTx/FLfYfj9JDL2Xp6XAMkpHk8crmyAFs8gY=)
                          10: dfv3LSNj2V7BvnxQDjPYXNhLTeY.roa (hash: +CS62sl2ChgX++5UXeYQ9A8BJy1JzvdoEucP6DULUqI=)
                          11: gjckOvmNiIbZmA-TT11ORA--iTU.roa (hash: TpmN78WgePeN399lIDAzsZi1InWuYIsnhRRV8YOoTWc=)
                          12: vF0VYWecbrRxbZK9c56uBdCo4ik.roa (hash: GSJ2HtyoNkdo5nkx3DTM8Av/uYVGzIaDwGAeMRt+F5E=)
                          13: xmMPaUT6o6zuoGJkONl9ukiVCBw.roa (hash: LEqoxiigz/XFOxjw1QTNnhB5q/85VzWFuwng23PfuYc=)
                          14: xrmNcJYM7IC02cwip42NZ9MYOJI.roa (hash: b6C56Rw+1/MSwcd/+Js8l5OXj80gDxqiFimnPx3BaLg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Mar 2026 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:f4:96:c0:4a:b9:5d:a3:4a:be:c9:7b:dd:56:23:05:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
        Validity
            Not Before: Mar 16 03:00:46 2026 GMT
            Not After : Mar 17 03:00:46 2026 GMT
        Subject: CN=cd70bb855010d44b6be9180fa6c6f9e57a5efbcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:99:6e:2c:20:44:0d:1d:e2:41:05:d2:29:68:
                    90:78:60:94:a2:e6:52:55:bc:ad:c4:ea:9a:33:53:
                    03:2e:09:26:eb:a2:94:79:34:22:96:78:e8:9a:93:
                    e4:64:6e:32:bd:27:d7:04:9d:2d:72:32:e2:7a:e0:
                    07:bc:c3:05:45:bf:75:c1:c4:58:91:5d:ad:8c:19:
                    90:b9:ab:3f:ff:e7:7e:3c:d9:9d:c5:81:3f:44:e9:
                    cc:32:4b:cb:f1:3f:0b:67:0e:68:62:de:36:af:ab:
                    fd:38:20:1f:85:26:07:d8:31:75:25:52:a4:a2:86:
                    da:c2:74:9f:ec:e6:3c:b5:b6:79:21:cf:20:b2:42:
                    50:49:ea:1b:6c:56:1c:fe:b4:bd:f0:0b:55:7c:59:
                    8c:2a:3a:5a:ed:79:41:d1:b0:ee:73:ce:f8:ea:b8:
                    c6:8a:e4:ba:83:ab:68:e6:f8:f3:b5:78:fa:7d:d0:
                    d4:ff:d8:0e:26:3a:f3:44:51:65:15:30:1f:2e:26:
                    83:42:01:74:f3:5d:0a:81:f4:de:8c:40:60:45:2d:
                    c4:33:bd:4a:f0:fa:a3:f0:5c:4c:2e:6e:9f:42:86:
                    e0:1b:11:81:6c:25:fd:0e:fd:0e:d1:e9:d2:4f:e2:
                    a3:93:19:fa:0d:5d:48:2a:10:8c:53:05:a0:d2:5a:
                    5c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:70:BB:85:50:10:D4:4B:6B:E9:18:0F:A6:C6:F9:E5:7A:5E:FB:CC
            X509v3 Authority Key Identifier:
                keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:43:14:79:16:33:dc:e3:d9:85:75:35:aa:c6:36:39:8f:d3:
         ba:6d:f5:35:01:94:f7:c2:ee:01:c6:17:a4:85:25:e8:b1:2e:
         07:45:9a:c0:5c:1e:50:48:da:8e:b7:1c:b9:ab:82:f2:28:10:
         eb:69:66:5c:8b:99:4a:a0:8c:81:5b:93:c7:4a:04:9a:f5:2c:
         db:13:e5:8d:e5:af:5f:fa:09:96:a0:94:d7:01:be:d7:48:8b:
         cb:42:7a:d2:60:2d:a8:e5:31:6e:88:56:14:e0:db:b1:cf:6a:
         df:c8:bf:02:8c:0f:4b:eb:93:ca:e0:3e:d6:7f:29:b0:c7:98:
         07:e2:b8:f4:71:29:c8:56:c5:5f:55:3d:32:8f:21:ca:f8:77:
         f4:c6:2b:2b:13:7f:48:1a:86:23:dd:67:0d:5c:de:f1:2a:9d:
         7d:38:b9:8f:be:18:ee:59:8a:d2:6a:7b:09:f4:e8:26:c0:45:
         ec:66:20:50:a1:b7:37:ee:fe:67:54:44:04:dc:ce:35:01:bd:
         5c:96:61:f1:63:1c:e6:1c:ec:0a:b8:39:68:c6:5f:80:28:a2:
         06:b0:5f:85:30:77:f0:d8:e0:52:04:3c:37:3f:b0:bc:29:40:
         b8:b8:36:2d:87:49:3b:2b:a6:24:55:39:ec:27:da:58:ae:52:
         b3:4e:0a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 09:36:30 2026 by rpki-client