Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.mft
File:                     rQt55LWcX82kk6IK0Y6UVYWdAxs.mft (raw, json)
Hash identifier:          KlBrhKLqS2xGL9PD5wesMWBurngDR57G4QfSA7vjLCU=
Subject key identifier:   D3:13:C0:25:F5:B0:78:AC:54:85:94:33:3F:B8:7C:C6:8E:9B:2C:46
Authority key identifier: AD:0B:79:E4:B5:9C:5F:CD:A4:93:A2:0A:D1:8E:94:55:85:9D:03:1B
Certificate issuer:       /CN=ad0b79e4b59c5fcda493a20ad18e9455859d031b
Certificate serial:       019D382E2D96067053884502B63B5200C1CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rQt55LWcX82kk6IK0Y6UVYWdAxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.mft
Manifest number:          1892
Signing time:             Sun 29 Mar 2026 06:00:43 +0000
Manifest this update:     Sun 29 Mar 2026 06:00:43 +0000
Manifest next update:     Mon 30 Mar 2026 06:00:43 +0000
Files and hashes:         1: rQt55LWcX82kk6IK0Y6UVYWdAxs.crl (hash: eUylo+HqWyXxrh3Y94zDPymF7CkwXG5N80xZCkTCW+s=)
                          2: vXHIexUczGsCWCGJw8QN-Jnm3qA.roa (hash: kCgr7j80pFKGFQ5JfNSfCFsnkeghSYZMqvN7pVoFVSE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rQt55LWcX82kk6IK0Y6UVYWdAxs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2e:2d:96:06:70:53:88:45:02:b6:3b:52:00:c1:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad0b79e4b59c5fcda493a20ad18e9455859d031b
        Validity
            Not Before: Mar 29 06:00:43 2026 GMT
            Not After : Mar 30 06:00:43 2026 GMT
        Subject: CN=d313c025f5b078ac548594333fb87cc68e9b2c46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:37:7e:b7:be:f3:17:73:14:77:2a:df:5a:8e:
                    72:7a:35:7d:12:9e:ea:e5:2a:d8:83:10:7c:71:b7:
                    7f:f4:0e:35:ac:82:ee:42:2a:e7:4a:e5:cf:92:3b:
                    76:cc:de:5a:d4:1c:87:a9:c4:4e:e1:2c:c2:71:18:
                    3b:e6:7c:4b:f0:11:99:16:0e:d0:60:54:99:1c:46:
                    4e:06:68:49:a6:b9:b7:70:42:17:da:80:4c:88:b2:
                    19:6d:ef:d7:09:74:9e:a8:17:21:f0:c6:07:45:95:
                    20:17:2a:75:d7:65:55:e9:3a:a8:b0:2c:c8:35:f0:
                    6d:da:9d:10:54:52:78:b0:74:65:9c:51:9d:71:4b:
                    55:f9:dc:ac:f8:55:b1:d0:1b:fe:9c:ad:8f:7b:92:
                    35:49:45:41:d6:ce:11:47:01:6b:60:30:52:57:fe:
                    92:11:97:1e:fd:60:27:9a:81:f6:1a:1f:a5:6d:35:
                    21:85:55:96:85:63:bf:80:9e:7e:18:89:03:53:ed:
                    6f:e2:b0:24:dc:46:32:53:8a:cc:45:07:23:fd:0d:
                    e9:39:39:2c:11:70:24:10:4f:7a:35:46:ab:04:e9:
                    6a:14:24:f4:12:a9:08:59:c9:13:97:dc:e0:34:87:
                    cf:7c:5a:8a:10:5c:fd:42:54:23:3a:95:75:84:ec:
                    1b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:13:C0:25:F5:B0:78:AC:54:85:94:33:3F:B8:7C:C6:8E:9B:2C:46
            X509v3 Authority Key Identifier:
                keyid:AD:0B:79:E4:B5:9C:5F:CD:A4:93:A2:0A:D1:8E:94:55:85:9D:03:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQt55LWcX82kk6IK0Y6UVYWdAxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:d2:9d:06:57:a9:0e:5f:59:e7:db:3b:2d:16:8c:0a:11:43:
         31:95:31:a9:fb:59:5f:07:f3:dd:fd:95:69:ad:87:3a:b7:6f:
         1b:04:81:71:5c:af:93:0a:d7:9e:8e:d2:99:da:1e:7e:53:3c:
         f7:80:4d:13:9d:c5:b3:4c:eb:7f:d2:d7:e1:17:59:a1:a6:0f:
         0d:a0:7e:37:a0:50:02:3d:a9:26:78:ce:1a:df:bb:50:ba:8c:
         80:c5:08:d2:df:a2:90:86:22:9f:86:a3:b7:57:5b:fa:c2:04:
         d6:ff:b2:74:e5:fe:e7:a2:f5:63:2a:2f:1f:4d:d2:23:39:20:
         1d:79:24:57:f2:01:43:18:89:39:5e:93:65:61:49:f2:ad:b7:
         c3:89:64:00:7c:69:b8:19:ad:16:64:b6:06:80:47:f9:8f:06:
         df:1c:36:46:86:ef:df:0c:d0:eb:6e:8b:ca:c1:48:98:72:e2:
         9b:51:d9:d2:75:73:50:1e:22:8d:6c:66:16:28:af:ed:e5:26:
         e5:4f:ec:cc:ec:8f:e1:4b:28:00:e6:28:9f:a7:02:c6:10:a6:
         13:61:09:05:93:57:64:03:fe:e9:a5:bb:e4:60:53:e7:48:31:
         95:bf:9c:e7:28:f1:de:4f:f6:db:9f:15:e7:63:9c:a2:ce:ed:
         72:42:47:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:48:53 2026 by rpki-client