Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft
File:                     1-F0E5sULqQb5rBHC51vz9dEEKmI.mft (raw, json)
Hash identifier:          OxJYHixLe6GA8vrHHzhIdefQzfDzHV0ra+pBq5T0R/U=
Subject key identifier:   D4:BA:94:55:AF:F6:3F:E2:EF:80:3E:4C:DD:16:39:59:D3:41:51:64
Authority key identifier: F8:5D:04:E6:C5:0B:A9:06:F9:AC:11:C2:E7:5B:F3:F5:D1:04:2A:62
Certificate issuer:       /CN=f85d04e6c50ba906f9ac11c2e75bf3f5d1042a62
Certificate serial:       019D37F716A522A9EC4B6B28F459ABF6D28F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-F0E5sULqQb5rBHC51vz9dEEKmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft
Manifest number:          1893
Signing time:             Sun 29 Mar 2026 05:00:33 +0000
Manifest this update:     Sun 29 Mar 2026 05:00:33 +0000
Manifest next update:     Mon 30 Mar 2026 05:00:33 +0000
Files and hashes:         1: 1-F0E5sULqQb5rBHC51vz9dEEKmI.crl (hash: m5tZHE0H113/Ib5/dteJP+Ae9o2Ht/yMFrJMwEZGbuk=)
                          2: BoWpyd3JOZi5Y_vkexanhVBW_Ag.roa (hash: TuPfakwU0uajSPw+NwpFbys7R8R7VeHveufD46rtpys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-F0E5sULqQb5rBHC51vz9dEEKmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 05:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:f7:16:a5:22:a9:ec:4b:6b:28:f4:59:ab:f6:d2:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f85d04e6c50ba906f9ac11c2e75bf3f5d1042a62
        Validity
            Not Before: Mar 29 05:00:33 2026 GMT
            Not After : Mar 30 05:00:33 2026 GMT
        Subject: CN=d4ba9455aff63fe2ef803e4cdd163959d3415164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a9:83:15:86:29:95:67:36:86:1f:5f:d8:a5:
                    bf:09:02:88:55:86:37:78:59:58:4b:60:f7:ef:29:
                    35:93:5f:bd:ba:23:42:e5:67:f4:3f:f3:75:96:fb:
                    23:fa:01:44:5a:8d:1a:39:04:90:a8:1a:c4:f4:ac:
                    52:61:52:eb:d1:17:a5:e2:4e:6e:29:65:68:96:08:
                    13:c1:03:01:99:34:52:44:71:f0:b8:1f:e9:40:06:
                    18:b1:80:a6:0e:6e:61:a3:2c:ae:81:dd:50:d3:35:
                    75:56:63:04:91:0c:93:12:cb:28:53:b3:c9:86:f4:
                    2b:0b:55:f1:ad:3a:16:8b:58:21:38:7f:28:66:14:
                    63:cd:e0:74:a0:b3:4b:7b:95:66:35:eb:2c:86:bd:
                    35:ff:84:e5:a2:d1:97:81:97:e7:42:31:db:f9:d2:
                    12:8c:d8:ff:0e:f9:ea:4c:a7:a7:31:82:e3:ff:5c:
                    98:63:4c:03:28:8d:1b:d6:05:f0:3b:c4:54:68:03:
                    11:c0:ce:44:59:6d:a4:ab:ba:41:f5:0e:60:81:9a:
                    be:37:72:92:8e:6c:9f:28:17:8b:03:6b:15:34:56:
                    6e:26:e1:93:5b:2f:e7:c1:95:8e:ef:44:56:b5:ae:
                    cf:7b:fe:61:98:46:6c:7d:81:fa:25:5c:d2:1b:78:
                    14:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:BA:94:55:AF:F6:3F:E2:EF:80:3E:4C:DD:16:39:59:D3:41:51:64
            X509v3 Authority Key Identifier:
                keyid:F8:5D:04:E6:C5:0B:A9:06:F9:AC:11:C2:E7:5B:F3:F5:D1:04:2A:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-F0E5sULqQb5rBHC51vz9dEEKmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:84:43:1b:96:c8:47:4a:83:b9:a1:d8:81:57:20:80:03:2e:
         b1:2b:c4:51:38:ad:98:f2:99:26:96:46:9c:e9:f8:fa:1f:37:
         a8:94:6f:89:56:23:1a:df:7e:b9:62:ad:92:a9:ef:81:84:b5:
         d1:e9:b4:67:0d:6b:5c:31:0f:ee:e8:1a:30:37:38:a3:25:b0:
         1b:30:0a:8b:5c:b0:c8:7b:db:8d:21:c0:8e:16:ce:3f:12:55:
         c5:d0:0f:a3:2f:5a:15:39:fc:4d:75:6d:c0:0a:90:1b:8a:8b:
         e2:7e:e7:bf:5c:e4:dc:df:b9:e2:5c:4f:16:73:4a:df:b8:89:
         0b:be:1a:53:b6:08:de:53:36:86:20:b8:94:8b:55:4c:ed:5f:
         09:e3:be:45:3c:02:09:b5:0b:3c:4a:bb:aa:28:92:5a:03:a5:
         0d:bf:bc:bc:b0:d1:76:8d:cb:f0:d1:5f:d7:1c:50:42:b6:5d:
         c2:7d:bb:e6:03:df:94:13:f6:8a:81:d5:5a:c0:93:89:a8:65:
         82:5f:04:b7:7f:f1:27:e1:65:b3:ef:0b:0b:d2:58:3b:32:ae:
         8c:ed:76:7b:d4:de:89:7d:db:31:3a:8e:67:44:a3:b5:6e:49:
         6c:b9:93:8a:fe:ec:e5:f5:99:dc:e8:55:96:50:70:eb:51:24:
         ac:7a:d9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:41 2026 by rpki-client