Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.mft
File:                     acZ5acPJ2Prbyac-P_VjYdAgO3E.mft (raw, json)
Hash identifier:          CORNvFn4IUrTzU5dj5+PhidUUuL0Kp90WSH8fZHdnUc=
Subject key identifier:   27:36:BA:F1:6D:B2:5E:8F:2A:33:42:C5:44:90:9A:C3:E6:ED:A7:7A
Authority key identifier: 69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71
Certificate issuer:       /CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71
Certificate serial:       019D38663D5FC24CC9E6E030334C0EC69C56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.mft
Manifest number:          1895
Signing time:             Sun 29 Mar 2026 07:01:57 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:57 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:57 +0000
Files and hashes:         1: BXc4TLN2CmhRJ2yOY8M4OZ5D4Ho.roa (hash: 4HtwLPKM/gPNWVp+9ccMF2LmMtM+RFcuZfWJ7xzFuic=)
                          2: Exw5qyeOsmaTxkuI-TVnrQ12bNY.roa (hash: 5anMOhWc/Hz9I+7ZHBfOzmKMYIxEdwwqXzXF5HG055M=)
                          3: _NBJFnlrLjlxU-NkUZtiAj1J8qo.roa (hash: HyoiSLaZjrIA6KdMeiHJErPb4cCaz1fssEroy13+1F0=)
                          4: acZ5acPJ2Prbyac-P_VjYdAgO3E.crl (hash: EQ9SmH8wsWlH59LJQ/Ojt078TDgOVm5eU13jbxqs/OI=)
                          5: e3iOXt4kN0x8sNUsLzYrx2gh1uA.roa (hash: wihWRQC4V6tMHjFES8yjsPfSZBAFUkTbgCOxUXuLKJQ=)
                          6: g4p9tyK55FRpeCWOSuZ8Bmz5xrg.roa (hash: hjRNfDC3YP5pXhjMmniTuNmauo3ts39PcOEU3dAW+7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:66:3d:5f:c2:4c:c9:e6:e0:30:33:4c:0e:c6:9c:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71
        Validity
            Not Before: Mar 29 07:01:57 2026 GMT
            Not After : Mar 30 07:01:57 2026 GMT
        Subject: CN=2736baf16db25e8f2a3342c544909ac3e6eda77a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e7:2b:24:d3:6c:91:8d:d8:00:d2:8d:40:2d:
                    3a:4f:78:3c:dd:bf:c1:1a:70:c6:b8:48:89:8a:2a:
                    f6:da:34:e1:61:ac:2a:0c:28:93:a7:af:2f:28:21:
                    c7:3b:34:f4:7e:3e:21:3a:64:32:a5:6b:43:84:bf:
                    9a:68:f3:47:33:cc:da:30:a2:55:54:7c:5a:7a:10:
                    52:84:2a:bd:4a:10:62:2f:f7:21:23:57:19:02:96:
                    8a:c9:61:dd:75:74:e0:69:20:56:ff:93:93:e0:97:
                    a1:81:6c:b6:00:b4:e6:bf:e2:c1:34:0b:39:d8:70:
                    c9:91:14:f3:85:97:7f:da:11:54:27:e2:90:0b:1a:
                    28:ab:d4:f6:27:52:2a:88:48:8c:6d:c9:66:f7:89:
                    11:c7:3c:8f:93:13:18:53:e6:24:2c:aa:fc:7f:81:
                    6c:f6:48:e5:09:e3:d6:5c:20:e7:a2:2f:b6:b4:81:
                    b8:49:78:1d:bd:63:e7:53:cb:e5:45:a9:20:43:5b:
                    c8:07:a6:95:24:ee:a3:11:e9:ed:f1:23:c5:38:59:
                    91:6e:58:bc:f2:78:d2:39:78:e2:b3:04:b3:56:98:
                    3a:be:06:02:e3:2d:d3:8a:f5:78:c4:49:61:09:ac:
                    10:27:95:26:ee:55:8c:80:c6:87:ee:5e:e7:31:a6:
                    5d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:36:BA:F1:6D:B2:5E:8F:2A:33:42:C5:44:90:9A:C3:E6:ED:A7:7A
            X509v3 Authority Key Identifier:
                keyid:69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:97:ff:84:a0:65:23:ca:21:77:e3:59:a3:1a:a4:92:71:07:
         1e:c6:8e:63:07:4b:79:3e:8c:54:32:f7:0c:c6:ba:b7:a8:cf:
         d5:87:41:46:af:71:41:f3:e5:ea:ed:40:e3:e5:7c:d3:a0:a8:
         f2:f4:5d:64:19:95:82:dd:56:eb:bc:1f:38:60:40:a1:d6:f5:
         d0:6a:e5:b6:38:aa:03:6a:a9:10:85:cc:9e:7f:45:db:6e:73:
         09:1a:ba:e1:0e:2f:61:15:f1:f0:c2:75:72:a7:26:ee:a2:45:
         cf:50:55:da:4a:24:42:5f:17:ea:28:0b:02:bb:e2:56:33:5f:
         69:9b:fd:d4:7c:8d:9a:db:d4:7d:b2:d8:0d:9b:8f:97:90:e5:
         cd:85:36:e4:cc:b1:e0:07:b3:d6:ff:59:8e:19:a4:8d:b9:57:
         fc:78:9d:e5:c5:70:eb:e8:e8:26:2f:e3:2c:ea:91:b2:3b:fd:
         db:1b:01:ed:72:19:6d:93:9f:79:ad:4f:8f:86:96:33:af:11:
         71:55:60:76:57:3e:5c:fa:4f:5d:b8:06:88:c8:30:46:0b:e4:
         b8:49:87:92:c6:65:a1:e7:4d:ec:fe:fd:e7:3f:87:05:c3:c8:
         d4:88:2f:9b:f1:67:b4:78:61:96:f3:ef:26:a9:f5:cb:7c:37:
         53:71:ab:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:57 2026 by rpki-client