Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.mft
File:                     1tk74RT4LQJYkWqXjKy_sVu1hAo.mft (raw, json)
Hash identifier:          bGR6atYfbNPmLiVGlOo6THD+7WLbHwS9lxX9ctgIM98=
Subject key identifier:   03:E5:F7:7D:BD:97:32:40:A4:DE:C8:4E:55:DB:C7:7F:96:D1:6F:E4
Authority key identifier: D6:D9:3B:E1:14:F8:2D:02:58:91:6A:97:8C:AC:BF:B1:5B:B5:84:0A
Certificate issuer:       /CN=d6d93be114f82d0258916a978cacbfb15bb5840a
Certificate serial:       019D37C0F894AFA5C4C68BDA004E691EFFC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1tk74RT4LQJYkWqXjKy_sVu1hAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.mft
Manifest number:          1304
Signing time:             Sun 29 Mar 2026 04:01:26 +0000
Manifest this update:     Sun 29 Mar 2026 04:01:26 +0000
Manifest next update:     Mon 30 Mar 2026 04:01:26 +0000
Files and hashes:         1: 1tk74RT4LQJYkWqXjKy_sVu1hAo.crl (hash: xui4728YqsFFa/KNdS5Wm3UtSU0ggCh4GE+9bOm0y8k=)
                          2: DuQCI0LzJ_jv1-vJ6IDr9-AqYNg.roa (hash: v/EHF8za/yF5QkLDnsNNBRhuf4fJfY8/YwjXrsygUS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1tk74RT4LQJYkWqXjKy_sVu1hAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:f8:94:af:a5:c4:c6:8b:da:00:4e:69:1e:ff:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6d93be114f82d0258916a978cacbfb15bb5840a
        Validity
            Not Before: Mar 29 04:01:26 2026 GMT
            Not After : Mar 30 04:01:26 2026 GMT
        Subject: CN=03e5f77dbd973240a4dec84e55dbc77f96d16fe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:22:f6:02:c3:4e:5e:1a:37:3b:e4:69:f9:c8:
                    d8:ae:43:59:17:4e:e2:1c:41:c0:67:c7:80:55:05:
                    e9:10:48:54:1f:58:e1:c2:0b:48:f8:a6:f9:80:a8:
                    f5:3b:66:27:2b:9d:0b:f1:22:a9:e3:7d:62:9d:43:
                    cb:b5:c3:c1:16:af:12:79:23:f1:00:f5:11:5e:dc:
                    65:c7:25:fe:08:fc:1f:09:89:fa:14:dd:a1:9b:81:
                    3c:84:a5:04:09:49:c1:e1:4e:00:0a:b9:3e:a4:75:
                    16:08:53:3d:6c:24:b7:1e:55:25:ef:fc:0f:b3:c9:
                    b7:5f:a8:92:46:4f:70:30:8f:68:46:71:c8:99:68:
                    23:6b:c2:f1:31:95:96:b1:15:4d:7f:e7:c4:c9:fb:
                    8b:9e:27:5b:cd:df:43:33:1c:8c:a2:0d:91:a0:e1:
                    44:76:fa:05:5b:92:53:00:ff:c9:7c:ca:7c:e6:e0:
                    cf:cc:eb:df:5b:de:ee:d3:43:34:47:bd:6d:cd:88:
                    04:6c:c1:90:d9:d8:83:5a:20:e5:71:45:d4:f2:c4:
                    00:ff:8c:75:5a:06:c6:1f:73:d2:81:d1:2c:fd:5f:
                    32:58:33:b5:74:f4:88:1e:ca:14:03:75:e6:a2:82:
                    80:9c:2c:4b:29:86:46:4d:ef:2c:c6:3c:70:32:ce:
                    44:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E5:F7:7D:BD:97:32:40:A4:DE:C8:4E:55:DB:C7:7F:96:D1:6F:E4
            X509v3 Authority Key Identifier:
                keyid:D6:D9:3B:E1:14:F8:2D:02:58:91:6A:97:8C:AC:BF:B1:5B:B5:84:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tk74RT4LQJYkWqXjKy_sVu1hAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:d8:f3:ae:21:4c:20:3e:f2:7b:6d:e3:1d:1c:56:be:89:e8:
         03:75:51:ea:8a:5f:cf:dd:c2:7b:7c:0a:b1:55:99:d9:43:5a:
         85:23:a2:fe:0f:96:74:18:e0:6f:78:04:52:dc:74:47:87:de:
         eb:7f:ee:82:38:be:d8:fe:38:b6:72:3b:7e:0e:56:87:44:bf:
         33:64:03:20:20:70:0d:af:04:53:4c:80:bb:c0:62:72:2b:c9:
         d0:73:26:2b:f1:a2:97:56:79:b7:1a:f0:a7:78:76:b6:83:50:
         d1:d0:ff:b1:cc:90:b1:f5:11:d7:96:4d:6c:c0:55:9e:02:c1:
         1b:2e:ee:8f:0d:e5:d0:e4:0e:f9:65:e4:ac:51:4c:66:3a:cd:
         43:ff:b9:5a:57:b0:4d:45:0a:7b:9b:6c:70:e1:ba:96:36:46:
         cd:6d:a7:67:8e:92:60:b0:0b:fb:53:35:05:c1:13:47:7d:ab:
         b4:44:bf:39:ae:45:0b:4b:86:9f:42:14:de:8a:18:79:26:85:
         69:9a:91:19:77:7b:a1:ef:61:67:a3:4c:9e:49:da:ca:41:18:
         e7:ce:fc:19:e1:1a:31:25:58:2c:45:be:ae:b4:8e:de:7e:49:
         60:cc:cf:f9:5a:bc:72:23:df:1b:14:2d:06:4e:79:84:83:74:
         33:99:3d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:47:14 2026 by rpki-client