Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
File:                     a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft (raw, json)
Hash identifier:          2ppEldJBk8JGio2R3WYf0Pjy5TARwh6czf8xt3IXMf0=
Subject key identifier:   E1:30:E0:2A:8D:AF:8F:D6:20:B7:16:45:F5:3D:BF:58:9F:6C:04:49
Authority key identifier: 6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D
Certificate issuer:       /CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
Certificate serial:       019D37C02E0C6AECEC7417878A1119CE3812
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
Manifest number:          1892
Signing time:             Sun 29 Mar 2026 04:00:34 +0000
Manifest this update:     Sun 29 Mar 2026 04:00:34 +0000
Manifest next update:     Mon 30 Mar 2026 04:00:34 +0000
Files and hashes:         1: 0xwfSsFkb05U4ozVSEb8hCqR4ZM.roa (hash: wDnxCrMW737wBP0bFwNqAOo1oxv3iXJSRvzrJ/qp1Dc=)
                          2: a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl (hash: +RyRClhdxyDTN43Gxm90NsopYqEy4206inGGBtBS/mI=)
                          3: zq7GSsBTb4iCu4BsJeZ1X5mLg0g.roa (hash: wAonBOQHcI2HVnsLhr53pN++Gv5Cyj0r6V/3M0lZCdA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:2e:0c:6a:ec:ec:74:17:87:8a:11:19:ce:38:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
        Validity
            Not Before: Mar 29 04:00:34 2026 GMT
            Not After : Mar 30 04:00:34 2026 GMT
        Subject: CN=e130e02a8daf8fd620b71645f53dbf589f6c0449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:27:f3:22:dd:c9:dc:86:65:8e:57:b8:05:38:
                    b2:02:31:00:ec:a8:1c:75:1b:ec:f7:67:6b:c7:77:
                    57:dc:d6:90:9a:4d:3e:41:da:0b:da:d6:6a:e5:a1:
                    ea:19:da:01:a7:ac:80:01:ba:9a:a7:11:38:8a:48:
                    f7:f1:46:35:36:d3:aa:2c:d1:0d:ca:42:68:88:db:
                    5c:cb:dd:98:31:e3:d9:ab:e0:a4:48:ec:ff:fc:5e:
                    6c:7b:f7:02:aa:fa:63:38:23:e6:8f:60:81:ed:2a:
                    d7:be:3f:80:49:49:af:16:76:6d:b0:8a:ae:86:d7:
                    59:93:2a:99:7c:f7:7e:4f:d2:36:d3:a7:fe:ae:83:
                    14:c4:32:b3:e5:6b:a8:c9:10:59:e7:07:71:09:36:
                    19:89:69:53:3f:5a:77:ba:8d:57:4a:fa:5b:27:bc:
                    ee:39:29:71:a8:81:4e:1a:f7:4e:93:9d:c9:6c:89:
                    27:c7:e4:25:ed:68:e1:79:4b:15:03:c1:6c:2a:ff:
                    f2:ec:f2:57:95:6d:15:12:bd:4d:d7:ab:0f:f5:21:
                    62:1a:7f:0a:7b:c8:e0:25:c9:a0:9c:f0:7b:41:f6:
                    e8:38:08:d3:11:a2:15:51:25:6f:f0:3f:1e:bc:4d:
                    32:fb:7c:55:c3:37:ae:aa:31:a2:60:fb:78:70:4a:
                    69:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:30:E0:2A:8D:AF:8F:D6:20:B7:16:45:F5:3D:BF:58:9F:6C:04:49
            X509v3 Authority Key Identifier:
                keyid:6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:5f:fa:96:e9:d0:c7:02:5d:8d:a4:eb:1a:5e:bd:34:8f:07:
         f4:dc:d3:c0:e3:7f:ea:0e:86:b6:38:4c:f4:ef:79:ff:db:df:
         cd:c9:e1:3d:33:38:0c:b4:a8:9e:a6:43:ed:6e:c2:ac:5f:11:
         47:33:79:78:42:e6:5e:ea:d4:9b:bf:4a:8b:94:30:9d:61:9a:
         e6:85:14:d8:3a:17:0f:9a:a5:a5:74:7c:89:19:e2:eb:ac:f1:
         1a:da:ab:c4:44:2e:78:06:28:19:f2:33:0d:b4:a3:75:b4:de:
         08:c7:f4:13:5f:2f:1c:cd:ee:3a:89:89:fc:ab:87:70:68:18:
         26:87:75:87:17:72:07:ff:43:f4:0a:a1:15:85:54:cc:69:ea:
         46:6e:66:f6:43:b5:a0:b1:55:cc:0b:21:f7:0a:23:2d:0b:7b:
         28:b8:82:d8:e8:15:3e:04:6b:a7:4b:7f:01:2e:bc:07:73:f6:
         7f:e7:96:81:b5:c5:35:ad:c9:6e:47:68:4d:81:16:17:73:34:
         ca:9e:ae:6d:4e:ff:6e:d1:d5:23:74:2a:4d:db:08:ff:d9:a8:
         c9:41:0b:e4:8a:b7:60:1b:92:55:4e:d1:af:a7:4c:7c:0c:8a:
         63:9c:cd:9c:f2:78:fa:a6:37:89:69:c7:5b:20:b7:61:87:21:
         4c:ff:e0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:40 2026 by rpki-client