Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.mft
File:                     b88Z734vchyq9pz4LUynxLVBU2Q.mft (raw, json)
Hash identifier:          i6vxg5lv8v5VApvRz0pQh+L6BXkDJBF05nV3uVl35ls=
Subject key identifier:   4B:CC:6B:13:09:FA:A1:73:25:93:84:8D:14:00:20:6B:57:1A:44:C1
Authority key identifier: 6F:CF:19:EF:7E:2F:72:1C:AA:F6:9C:F8:2D:4C:A7:C4:B5:41:53:64
Certificate issuer:       /CN=6fcf19ef7e2f721caaf69cf82d4ca7c4b5415364
Certificate serial:       019D371B55EA3209B694578B6A2D000909A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b88Z734vchyq9pz4LUynxLVBU2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.mft
Manifest number:          1890
Signing time:             Sun 29 Mar 2026 01:00:31 +0000
Manifest this update:     Sun 29 Mar 2026 01:00:31 +0000
Manifest next update:     Mon 30 Mar 2026 01:00:31 +0000
Files and hashes:         1: b88Z734vchyq9pz4LUynxLVBU2Q.crl (hash: XS60XqBBWo2Vbcs3B27ptLYQ8iqA8c/p1wcRbIVRUMU=)
                          2: cHiZ6LZ8hPW5ER2wStwg89RK_q4.roa (hash: zXYUqoAnuDgMfHstPqrZUYqgzvB3jLNDf5DCgccR8yM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b88Z734vchyq9pz4LUynxLVBU2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 01:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:1b:55:ea:32:09:b6:94:57:8b:6a:2d:00:09:09:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fcf19ef7e2f721caaf69cf82d4ca7c4b5415364
        Validity
            Not Before: Mar 29 01:00:31 2026 GMT
            Not After : Mar 30 01:00:31 2026 GMT
        Subject: CN=4bcc6b1309faa1732593848d1400206b571a44c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4f:a6:c1:71:f1:d7:54:c3:c7:c0:4d:56:bd:
                    d9:2d:d3:79:92:9d:ee:57:fc:8e:37:e2:c9:2e:cf:
                    e7:e5:87:a4:9d:18:09:9e:95:b3:0b:57:5b:f7:87:
                    fc:0e:86:37:c0:77:3a:87:3a:27:74:7a:39:1b:8c:
                    c0:9f:31:4c:66:ca:20:2c:46:d6:f3:7d:50:28:0e:
                    a0:b1:e0:f5:0c:8c:9d:1d:b7:1c:20:fd:96:4a:30:
                    05:69:3f:0c:d5:dd:20:ee:a6:cb:08:75:72:38:ab:
                    df:0c:84:12:26:d5:3f:9f:e0:73:bc:86:94:1e:39:
                    f0:31:28:a1:4f:71:f6:c1:d5:c0:b2:f2:46:35:1c:
                    80:2d:a4:42:72:e5:c2:3e:11:29:e9:e6:b5:bf:76:
                    23:4c:f2:26:9b:9c:bb:a7:80:a8:6a:0c:d7:82:63:
                    20:2e:bb:29:4f:e8:36:09:8d:aa:14:58:39:84:fe:
                    a7:99:ea:89:bc:f8:cd:7b:7d:07:8a:19:cd:b7:14:
                    10:b9:18:02:a8:14:7a:0b:45:30:d0:c5:c6:5b:08:
                    cd:70:e4:ae:64:9f:bd:3c:5d:65:d1:e2:a0:91:62:
                    11:5c:c9:61:5c:6d:75:2c:63:6f:d4:3f:22:99:e7:
                    c2:c3:f6:08:01:07:a7:27:ce:9d:b9:ac:d9:c0:f1:
                    a3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:CC:6B:13:09:FA:A1:73:25:93:84:8D:14:00:20:6B:57:1A:44:C1
            X509v3 Authority Key Identifier:
                keyid:6F:CF:19:EF:7E:2F:72:1C:AA:F6:9C:F8:2D:4C:A7:C4:B5:41:53:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b88Z734vchyq9pz4LUynxLVBU2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:85:e4:fd:fa:9f:6a:e7:81:3f:1e:c7:3b:a4:10:33:04:cb:
         1f:a3:92:7d:8e:a8:ca:eb:91:31:e9:d4:26:b2:f3:e5:3d:8e:
         d1:dc:88:b1:f2:86:25:21:ca:14:c7:86:09:70:b2:98:1b:45:
         94:c0:17:b4:e6:e5:c7:c1:ae:7f:4b:13:34:bc:53:f2:38:2c:
         29:cd:1b:f0:a4:6f:8f:b0:a7:55:df:5c:82:75:fa:1f:8f:21:
         00:00:00:41:d7:04:c6:54:84:5b:70:3c:77:28:91:fd:f1:c7:
         4b:82:b4:62:7b:cd:b9:de:13:f6:da:ae:9e:b2:cc:61:5b:91:
         bc:e7:d6:20:8b:90:e7:cf:0e:80:85:22:2b:9b:08:ef:3c:3c:
         91:ff:0b:54:3d:6c:14:6f:7f:da:d8:b1:8a:01:93:38:5e:96:
         6b:aa:18:ac:d2:7c:99:9f:41:4a:c1:bd:9d:eb:55:eb:6a:3d:
         d3:38:cd:f0:00:31:a3:c3:e9:67:46:3a:a6:e3:31:44:48:2a:
         34:9c:7a:eb:df:9b:6d:08:7b:d3:99:78:41:42:87:a8:fc:01:
         30:0f:88:3a:ba:56:b4:34:9d:a5:76:63:4c:00:fa:e0:a9:92:
         cc:a2:bb:35:93:78:c3:80:7d:21:ed:eb:af:28:fd:4b:eb:5f:
         35:20:89:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:32 2026 by rpki-client