Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/_N6Mo-LOUrvM5TxKKSbTycQQwEs.mft
File:                     _N6Mo-LOUrvM5TxKKSbTycQQwEs.mft (raw, json)
Hash identifier:          fBsSWauipq6BLqct9G7wbRSBVoegHZTDDa4a3+0oznA=
Subject key identifier:   B2:59:DD:B4:83:34:5E:40:E4:BD:A2:87:22:96:88:FE:60:F2:65:10
Authority key identifier: FC:DE:8C:A3:E2:CE:52:BB:CC:E5:3C:4A:29:26:D3:C9:C4:10:C0:4B
Certificate issuer:       /CN=fcde8ca3e2ce52bbcce53c4a2926d3c9c410c04b
Certificate serial:       019D37525C3C28D9136BB275112B88D3E6E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_N6Mo-LOUrvM5TxKKSbTycQQwEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/_N6Mo-LOUrvM5TxKKSbTycQQwEs.mft
Manifest number:          1890
Signing time:             Sun 29 Mar 2026 02:00:37 +0000
Manifest this update:     Sun 29 Mar 2026 02:00:37 +0000
Manifest next update:     Mon 30 Mar 2026 02:00:37 +0000
Files and hashes:         1: _N6Mo-LOUrvM5TxKKSbTycQQwEs.crl (hash: r5O85rDHKKNyQPhCXu0w9tpK7dWSSMl8Zx+S/Gb1Djo=)
                          2: ymXWMAWfB9q7ESOg8w23w3_30kY.roa (hash: yQfR3w+BgKhB1YbUyT8a2WBXc4jJ8HHQXvRgfhx3Gm4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/_N6Mo-LOUrvM5TxKKSbTycQQwEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/_N6Mo-LOUrvM5TxKKSbTycQQwEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_N6Mo-LOUrvM5TxKKSbTycQQwEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 02:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:52:5c:3c:28:d9:13:6b:b2:75:11:2b:88:d3:e6:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcde8ca3e2ce52bbcce53c4a2926d3c9c410c04b
        Validity
            Not Before: Mar 29 02:00:37 2026 GMT
            Not After : Mar 30 02:00:37 2026 GMT
        Subject: CN=b259ddb483345e40e4bda287229688fe60f26510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8b:c0:98:09:cf:cf:74:1e:cd:98:a9:3b:16:
                    59:26:1a:4c:06:26:b3:12:74:a0:a9:d6:c5:43:69:
                    bd:90:bd:64:d4:4f:ef:a6:b0:84:a6:53:ae:dc:0c:
                    53:06:93:1b:37:87:89:82:00:6c:eb:2c:0b:17:be:
                    06:96:46:b4:f0:73:23:a6:fd:ce:29:ec:48:65:1b:
                    ae:38:3c:10:ea:25:e3:d6:4b:78:93:f8:88:ad:b5:
                    6a:7e:b7:a9:1e:3b:28:d5:e8:5e:b3:71:b4:60:3e:
                    3c:8d:f8:ff:28:97:94:aa:bb:59:af:1f:51:85:e6:
                    3d:6d:57:8a:7a:92:92:89:19:aa:30:5c:fb:72:17:
                    53:c8:2c:f9:c1:7b:45:8a:02:ec:2d:02:df:bf:0d:
                    6e:e2:0d:71:2e:5a:c7:12:a5:99:b9:c7:2d:b0:ef:
                    f1:86:cc:33:22:e9:e4:2b:94:71:d6:b2:d6:6b:53:
                    10:6c:7b:cf:31:a6:f8:a3:d1:26:5f:71:44:a5:af:
                    c0:77:4e:4e:d0:4f:18:64:ba:1c:68:59:55:bf:f2:
                    b8:1a:4c:52:f5:3f:38:46:1c:a5:c0:8f:6c:62:c6:
                    c1:c1:ec:fc:4f:ad:05:f1:9e:39:1c:28:d7:9e:b7:
                    ad:38:10:8f:d4:d0:1e:59:6d:7a:79:2d:43:da:3c:
                    67:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:59:DD:B4:83:34:5E:40:E4:BD:A2:87:22:96:88:FE:60:F2:65:10
            X509v3 Authority Key Identifier:
                keyid:FC:DE:8C:A3:E2:CE:52:BB:CC:E5:3C:4A:29:26:D3:C9:C4:10:C0:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_N6Mo-LOUrvM5TxKKSbTycQQwEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/_N6Mo-LOUrvM5TxKKSbTycQQwEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/_N6Mo-LOUrvM5TxKKSbTycQQwEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:af:1f:dd:e5:a2:e1:d9:91:57:68:6b:b8:35:1c:2f:ce:a4:
         86:f1:13:f7:a5:ed:84:5a:f9:71:7f:0e:3b:6c:68:93:f7:35:
         60:b2:ff:f7:40:a0:fa:af:fa:11:02:0b:c7:7b:a4:2f:1a:09:
         da:93:e9:26:31:d6:27:a8:bb:5b:ef:f7:f6:d3:07:b2:23:4c:
         63:f5:b5:65:54:a6:df:ce:69:7d:57:03:34:7c:46:33:3d:83:
         77:6e:b3:43:75:21:64:3e:c9:41:b4:18:0a:40:d6:99:e0:bd:
         91:8f:ab:5e:66:11:67:28:95:02:37:05:77:73:31:2e:ac:9e:
         98:74:be:c4:1f:b6:d2:dc:66:6f:c3:25:0b:6c:dd:08:17:25:
         af:23:66:f4:57:46:ef:eb:5f:78:b4:95:89:80:f3:3a:13:52:
         c4:60:21:a2:68:03:6d:ad:ae:a2:f5:ba:7e:fc:24:3d:86:37:
         90:4d:6b:4a:69:a6:4f:d9:21:10:46:f9:98:18:7c:d4:0a:02:
         26:84:81:47:74:45:20:5c:e8:52:c5:d4:b1:83:5e:22:af:05:
         bc:97:ad:7a:ca:d6:a6:e3:ce:8d:d8:b5:2b:ee:54:83:0a:ea:
         e6:d4:08:f8:5a:c4:09:19:88:2f:d8:92:ca:88:df:41:1c:e9:
         d6:34:4c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:54 2026 by rpki-client