Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.mft
File:                     4SOGDiDNss_fLO-zdToVuCKCkmY.mft (raw, json)
Hash identifier:          ILbZ4Yzk7GFmDWR+VtuLCfshUce7LMf2Liey4sswBco=
Subject key identifier:   EB:EF:3F:42:66:A5:20:8E:8F:EA:DC:EB:D3:07:24:03:7F:79:E7:D3
Authority key identifier: E1:23:86:0E:20:CD:B2:CF:DF:2C:EF:B3:75:3A:15:B8:22:82:92:66
Certificate issuer:       /CN=e123860e20cdb2cfdf2cefb3753a15b822829266
Certificate serial:       019D22F0A0CEA033A34B3E1CB0BC1E039748
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.mft
Manifest number:          1896
Signing time:             Wed 25 Mar 2026 03:01:28 +0000
Manifest this update:     Wed 25 Mar 2026 03:01:28 +0000
Manifest next update:     Thu 26 Mar 2026 03:01:28 +0000
Files and hashes:         1: 4SOGDiDNss_fLO-zdToVuCKCkmY.crl (hash: DpzewshIOShq7n9kuHEzr/zD9qUMo4en1nhn+dX49x8=)
                          2: S7Uz_I8IzeD7hTGoQXYS9N__GC0.roa (hash: FP7SIZ/7iLDFogtQKcQOvCQlmpm4Vmx1iE/C1QcnQWM=)
                          3: _0nCseq1FCkVbzbEBFv3dRP0CRo.roa (hash: OhfKgZoueIF3fYUkheqntTclHjDepm3uHFhyWV7IKyI=)
                          4: tEWXmnOT8-tMqoRFm6EyOLojzhA.roa (hash: Qf0eR7/hJrKNYOJsvae06sHOvRAjRyYfjiFaNgfMGTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:22:f0:a0:ce:a0:33:a3:4b:3e:1c:b0:bc:1e:03:97:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e123860e20cdb2cfdf2cefb3753a15b822829266
        Validity
            Not Before: Mar 25 03:01:28 2026 GMT
            Not After : Mar 26 03:01:28 2026 GMT
        Subject: CN=ebef3f4266a5208e8feadcebd30724037f79e7d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9b:63:21:8f:61:49:1c:8a:1d:eb:36:bd:6b:
                    d7:de:48:ef:5d:36:7c:b3:78:56:49:a0:8f:92:20:
                    79:d0:be:7f:84:70:2b:ca:b0:23:07:16:7f:43:0f:
                    48:bc:60:28:7c:ae:75:28:12:a0:b1:16:f3:48:5e:
                    53:02:8f:70:4b:d1:f1:a7:94:ee:4a:18:7f:7c:95:
                    bd:08:33:89:ee:b5:4b:4b:1d:68:05:80:03:c0:82:
                    a9:af:76:b0:59:99:05:aa:88:8f:a2:c3:00:01:b4:
                    80:a5:7a:b2:eb:28:90:0c:d2:83:fe:49:78:54:df:
                    be:62:6e:ff:8f:c1:6c:dd:03:da:ab:29:6f:6c:5d:
                    64:00:7b:a2:02:11:c4:ef:4e:52:38:a2:17:1c:51:
                    63:ea:ec:87:2c:38:a5:b6:c3:48:9a:e7:6a:7e:20:
                    30:dd:de:da:9a:8f:dc:e7:6c:2d:16:2c:ca:3b:2c:
                    4d:c8:ef:12:f2:6f:b7:8b:ac:7a:f5:b6:9f:c4:dc:
                    15:e3:0a:06:9e:be:02:91:5f:f2:cc:60:fd:1f:2c:
                    76:c4:db:4e:40:d8:86:4a:8b:8e:8c:79:96:0c:8b:
                    53:09:d1:43:3f:06:3e:6c:fd:8b:b3:37:d0:d2:ee:
                    86:17:ab:c5:fb:e3:00:53:ea:a8:28:a8:70:87:e1:
                    68:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:EF:3F:42:66:A5:20:8E:8F:EA:DC:EB:D3:07:24:03:7F:79:E7:D3
            X509v3 Authority Key Identifier:
                keyid:E1:23:86:0E:20:CD:B2:CF:DF:2C:EF:B3:75:3A:15:B8:22:82:92:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:7a:12:c0:3c:5a:ab:8b:df:40:49:f1:ea:2a:11:57:29:ba:
         f9:78:36:f1:4b:f7:b3:e5:b1:0f:2a:b0:22:5d:90:1c:46:44:
         96:3e:98:4c:38:6e:f7:89:61:e0:12:a7:2d:86:6c:2a:ed:df:
         d1:d4:be:9b:f9:ad:71:5e:96:dd:a9:88:12:6c:f6:0b:25:dc:
         09:b6:b3:b0:8a:cf:35:92:4d:c1:8d:11:e7:8f:37:75:f4:c5:
         d2:fd:97:26:1f:0e:4f:47:4a:91:b6:ce:ab:a5:6a:9d:d8:72:
         27:82:e3:a5:04:09:fb:e2:89:14:cc:98:63:da:c8:ff:7d:96:
         19:e0:32:8b:b0:91:cb:67:73:b8:2d:9e:1e:de:8e:45:a9:ad:
         35:1b:a8:49:2f:bf:8e:89:da:46:3e:e8:91:c0:6f:b4:f6:35:
         85:61:88:57:6c:d4:1f:fe:29:7b:2d:4d:77:8b:26:c8:c3:2e:
         35:82:4f:db:4e:c5:54:2b:ff:fa:2c:dd:08:1a:68:e0:9f:1d:
         17:49:f1:07:66:37:10:8d:7b:64:75:13:4d:fa:5d:3f:36:88:
         c7:41:0d:60:ce:55:ba:3b:26:65:03:b7:37:93:ca:6d:f7:89:
         b7:39:db:f0:2c:63:f5:7f:2f:18:44:3c:10:85:cf:ea:f7:d8:
         c2:c3:a7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 06:40:14 2026 by rpki-client