Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
File:                     prswRa6njo-nZIEpcU-3NgaNw3s.mft (raw, json)
Hash identifier:          BExuREk2s33Drmnu5X9QXB98JkMEtWBAvqkK77dq9uA=
Subject key identifier:   EC:E9:F4:B4:87:51:9D:4A:F5:C8:DB:8C:EB:7C:DB:DB:53:92:71:84
Authority key identifier: A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B
Certificate issuer:       /CN=a6bb3045aea78e8fa7648129714fb736068dc37b
Certificate serial:       019CF383DF02DEBAB3C72BEDEB7FCB25214A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
Manifest number:          0BC7
Signing time:             Sun 15 Mar 2026 22:00:31 +0000
Manifest this update:     Sun 15 Mar 2026 22:00:31 +0000
Manifest next update:     Mon 16 Mar 2026 22:00:31 +0000
Files and hashes:         1: G42-Fdl3gJAxSTqoOxR_BXG1oH8.roa (hash: pai33aN90kyIzUMmy6nzZwQfDVVekgEOsKj6Cwhhy24=)
                          2: prswRa6njo-nZIEpcU-3NgaNw3s.crl (hash: E2ye3UtWCdtT73pbFvniA86r7mSpD5BfMWmntVb5iqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Mar 2026 22:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:f3:83:df:02:de:ba:b3:c7:2b:ed:eb:7f:cb:25:21:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6bb3045aea78e8fa7648129714fb736068dc37b
        Validity
            Not Before: Mar 15 22:00:31 2026 GMT
            Not After : Mar 16 22:00:31 2026 GMT
        Subject: CN=ece9f4b487519d4af5c8db8ceb7cdbdb53927184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b2:38:ce:9c:9a:48:ee:45:cc:fd:a3:86:00:
                    96:4b:18:5b:c6:5a:d0:9c:3b:1c:7b:39:09:1b:63:
                    1f:64:40:12:2a:7c:6a:1c:2f:3d:f0:2d:b1:7c:d3:
                    77:7a:00:4e:42:91:08:77:26:ab:ef:02:4b:ca:4d:
                    1b:78:13:da:e3:ca:5a:8e:a2:16:de:9b:0c:ec:5c:
                    8f:b9:58:87:dd:16:e9:89:41:69:3d:ca:2e:d1:ef:
                    51:d3:ab:59:f9:27:76:e2:00:b2:83:6e:87:f5:5d:
                    92:21:f1:af:4c:5b:7e:4b:12:ac:b9:b1:cf:e7:3e:
                    ad:0a:f4:fb:0e:db:a9:f4:66:51:7a:f0:8e:60:dd:
                    d1:f4:d0:9f:72:ed:d4:bc:23:65:c8:8e:00:ea:61:
                    48:c4:7e:dd:6e:13:21:c5:bf:5d:63:51:8d:8a:4e:
                    e9:95:8b:55:aa:7c:1e:b2:24:54:f4:27:55:2b:d1:
                    15:4e:10:7a:1c:49:ff:cf:20:1f:1f:c6:a8:b8:22:
                    ea:e8:d1:23:1c:87:0a:5b:55:8a:8b:b4:f2:56:79:
                    a5:20:da:82:1b:47:1f:d5:23:6f:74:06:09:05:a3:
                    88:1d:6c:1f:c4:6f:34:85:f5:29:c0:9f:8a:15:47:
                    8b:44:45:51:bd:e1:65:80:01:eb:f9:dc:10:30:86:
                    c7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E9:F4:B4:87:51:9D:4A:F5:C8:DB:8C:EB:7C:DB:DB:53:92:71:84
            X509v3 Authority Key Identifier:
                keyid:A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:d2:d4:5a:c8:bc:29:46:61:d1:5b:6d:fb:5a:eb:86:9c:ea:
         b6:91:04:7c:55:09:44:7e:d8:73:0e:d3:d2:a2:e3:dd:90:df:
         af:bd:5a:f8:79:79:a0:c8:ff:03:4c:22:04:d5:48:49:46:f7:
         80:3d:62:1b:21:88:7b:a1:0a:c8:90:e7:88:68:19:6f:45:54:
         f1:4e:2a:47:4b:9b:91:25:f9:04:3a:72:52:ac:e1:09:6c:97:
         09:7a:13:9c:0a:4c:51:eb:87:29:50:ad:22:84:b8:0d:26:80:
         93:c4:0d:00:64:36:39:15:8a:7c:53:04:90:9d:ff:94:f1:80:
         7b:7a:98:a4:35:a8:ee:0c:9b:d4:fb:af:0a:64:a0:8d:5f:0e:
         6b:4f:1f:cd:a7:00:a4:43:e7:12:6b:c6:b2:0c:77:42:6c:a4:
         99:ce:1c:ad:4a:f3:be:e3:7a:65:de:f0:c7:5d:e5:7d:85:0a:
         31:10:d5:62:fb:1b:ac:d9:ad:0b:32:2c:86:4c:84:ac:84:36:
         e9:1c:4d:2e:a0:5e:ef:94:5e:97:b9:65:ce:66:47:0b:ad:30:
         28:24:aa:3d:5f:a1:8c:fd:12:bb:80:92:77:7b:ef:24:ad:d6:
         f8:db:4c:61:0f:34:85:6c:36:4c:ea:d6:0e:60:44:91:b4:bf:
         90:b0:f5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 03:14:30 2026 by rpki-client