Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
File:                     _z8mtUHwu6ilznHqU4EbRsFlerM.mft (raw, json)
Hash identifier:          YJ9GriX8IqK+PJVVnrtaNN2pLVXThG3TvBOkCk0pgUg=
Subject key identifier:   84:6D:38:64:92:61:01:DE:4D:6B:3A:DA:96:FB:D5:2A:43:5C:83:D9
Authority key identifier: FF:3F:26:B5:41:F0:BB:A8:A5:CE:71:EA:53:81:1B:46:C1:65:7A:B3
Certificate issuer:       /CN=ff3f26b541f0bba8a5ce71ea53811b46c1657ab3
Certificate serial:       019D3A1C4412EF221171CF66C3B1A5195048
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
Manifest number:          188E
Signing time:             Sun 29 Mar 2026 15:00:24 +0000
Manifest this update:     Sun 29 Mar 2026 15:00:24 +0000
Manifest next update:     Mon 30 Mar 2026 15:00:24 +0000
Files and hashes:         1: _z8mtUHwu6ilznHqU4EbRsFlerM.crl (hash: GbFDO5VKrrISN4J5KtKLDZLTYXvqXx+4bnNMBiCdxIM=)
                          2: zoiA9GOl58HURHRI6-GRtkRSEfA.roa (hash: oLHIfegomnibpy5nfP5FLa3cn06nEqDH56LteMyYgZQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 15:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:1c:44:12:ef:22:11:71:cf:66:c3:b1:a5:19:50:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff3f26b541f0bba8a5ce71ea53811b46c1657ab3
        Validity
            Not Before: Mar 29 15:00:24 2026 GMT
            Not After : Mar 30 15:00:24 2026 GMT
        Subject: CN=846d3864926101de4d6b3ada96fbd52a435c83d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b7:2d:eb:b6:3e:76:a4:92:79:da:87:20:7d:
                    cb:a3:99:2e:3e:3e:a0:b2:be:31:36:ca:ac:65:29:
                    f7:7f:01:ec:85:6c:56:cc:96:77:f2:bd:23:27:17:
                    54:62:f1:3a:49:c3:58:74:66:99:cf:83:15:c4:b9:
                    5c:66:8e:a1:39:f3:62:82:0b:eb:e0:94:f3:97:8c:
                    ca:d2:fe:ed:c0:e7:d5:43:31:15:02:0a:93:c3:59:
                    dd:60:dc:76:d3:2f:8a:6f:b3:e6:e8:d6:bf:c3:a1:
                    ba:dd:c8:f2:2b:4f:64:42:e8:52:b1:21:75:22:64:
                    5b:8f:d4:e4:cc:a1:58:2e:28:e6:9f:ea:ef:7f:1a:
                    49:a1:c5:09:5b:44:84:40:0e:6b:bf:aa:e4:25:cb:
                    59:f4:9d:61:94:a8:cb:f2:34:69:7a:b6:ee:51:1e:
                    6f:ee:70:cd:1e:4b:ba:fd:03:a4:30:16:66:fe:de:
                    95:59:db:5a:64:d2:df:09:de:13:2b:26:c1:70:34:
                    c6:72:e9:ce:bb:20:ee:7f:c2:bd:44:0c:75:67:e9:
                    16:59:be:1e:2d:29:ae:dc:e7:27:db:56:48:64:58:
                    eb:fc:6c:33:63:40:5e:89:83:e8:56:fc:4d:e0:17:
                    6a:8a:bc:bd:5d:f0:83:b1:15:fc:ff:61:57:62:a9:
                    d8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:6D:38:64:92:61:01:DE:4D:6B:3A:DA:96:FB:D5:2A:43:5C:83:D9
            X509v3 Authority Key Identifier:
                keyid:FF:3F:26:B5:41:F0:BB:A8:A5:CE:71:EA:53:81:1B:46:C1:65:7A:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:d4:4a:dc:63:9b:fb:7b:4b:f0:06:c3:91:ed:cc:cc:f6:a1:
         96:df:c0:fa:0d:2e:02:19:cf:3f:81:e6:c9:6c:37:9b:26:00:
         7c:2a:c6:7e:45:df:4f:fb:7b:0d:d6:5b:8f:55:72:ca:27:75:
         8f:f6:7d:92:36:7d:d9:62:8e:81:f0:cb:bb:7b:c2:85:9a:18:
         b2:fe:01:bb:76:9c:79:71:80:a0:d2:96:73:c3:3e:ba:dd:fc:
         8c:cd:75:f4:6f:2e:16:3f:a1:3a:0e:2a:22:0f:64:57:1d:13:
         ae:7d:45:5f:fc:7f:13:fa:11:9b:46:5d:20:2b:0c:c6:f9:01:
         a9:74:e3:b3:ee:9e:0a:42:de:f7:f8:47:91:15:42:32:63:cf:
         a7:ac:bc:35:95:b2:d2:b5:76:07:fa:eb:ef:af:5f:29:91:c9:
         70:88:65:54:10:b9:88:08:ff:6b:21:f2:06:ed:ad:d4:db:f4:
         ba:b0:a1:e6:29:65:14:46:f8:54:31:44:e5:e2:d7:f4:c6:ba:
         30:08:83:f0:94:5d:d2:2f:1a:7f:72:da:30:64:5b:99:76:0d:
         de:42:5b:b8:62:68:c2:f2:1b:b4:c9:26:27:06:0d:e5:90:d7:
         0a:d7:f7:53:8f:af:e7:e8:12:cb:ad:7a:a1:b7:c3:d1:58:62:
         10:04:84:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:10:50 2026 by rpki-client