Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.mft
File:                     drC8_CzbBSuJ4pylp1u-8pIsgMM.mft (raw, json)
Hash identifier:          vpZdicpfYsjmbLDwQ7tJZoCSUzaU74PKkTNqcJQ+JSE=
Subject key identifier:   76:84:3E:64:9A:F6:E9:6E:68:35:BE:18:F7:88:96:C4:FB:D1:62:49
Authority key identifier: 76:B0:BC:FC:2C:DB:05:2B:89:E2:9C:A5:A7:5B:BE:F2:92:2C:80:C3
Certificate issuer:       /CN=76b0bcfc2cdb052b89e29ca5a75bbef2922c80c3
Certificate serial:       019CE52325C3FE25374DDC37F6508930D424
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/drC8_CzbBSuJ4pylp1u-8pIsgMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.mft
Manifest number:          1863
Signing time:             Fri 13 Mar 2026 03:00:11 +0000
Manifest this update:     Fri 13 Mar 2026 03:00:11 +0000
Manifest next update:     Sat 14 Mar 2026 03:00:11 +0000
Files and hashes:         1: 4t2uA4e7Ltd3CMxnN6xJlnAnCfE.roa (hash: QUBmzyJjWkqAkNmxTIkOKj9TlJBpwjA6voy4B8LR2j0=)
                          2: drC8_CzbBSuJ4pylp1u-8pIsgMM.crl (hash: +pAmpuWqraliyGekgbksFxJ+jpY8lsDEjy81/CaCwK0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/drC8_CzbBSuJ4pylp1u-8pIsgMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:23:25:c3:fe:25:37:4d:dc:37:f6:50:89:30:d4:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76b0bcfc2cdb052b89e29ca5a75bbef2922c80c3
        Validity
            Not Before: Mar 13 03:00:11 2026 GMT
            Not After : Mar 14 03:00:11 2026 GMT
        Subject: CN=76843e649af6e96e6835be18f78896c4fbd16249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6d:ac:d1:60:2d:78:bb:19:da:9d:03:02:46:
                    e3:cd:28:12:c3:76:f1:a0:df:f3:18:1d:f2:78:97:
                    62:11:49:57:ed:0f:e8:4f:eb:1a:61:d7:18:c1:c0:
                    31:1d:e0:bc:cc:c7:ff:ba:0d:18:ee:fc:3a:a2:fd:
                    19:85:dc:52:17:22:4e:6c:3c:f9:e7:a9:85:a7:85:
                    4c:13:b6:aa:e8:a6:12:b6:f3:cf:19:b9:b2:f9:0b:
                    0d:9b:fc:e6:87:92:6b:78:e2:3e:16:d2:e6:aa:b8:
                    28:e1:89:ce:70:ce:d0:32:71:40:4a:5b:0c:8b:b2:
                    5e:03:46:54:8c:de:9c:88:89:c6:62:03:e0:4e:4e:
                    06:34:55:d1:11:3b:66:49:21:59:b8:0a:ac:1c:c5:
                    b1:de:b2:05:7e:7f:2c:fb:7d:eb:d9:d3:6f:3f:01:
                    06:30:af:c0:6c:7b:ef:71:21:c3:88:d5:d7:71:f0:
                    a9:6f:94:9a:3d:ff:d8:0f:8b:17:91:66:07:0d:02:
                    a8:f9:ba:c4:4f:6b:09:ad:fb:69:d2:c9:e8:6b:a1:
                    0f:f3:d2:e1:46:36:ce:cd:47:9e:20:a0:e9:d2:0e:
                    15:c7:0c:73:57:ed:0b:4a:8e:8c:a2:c8:52:90:b6:
                    37:15:be:68:89:c0:0b:96:32:27:b9:2d:28:41:bb:
                    89:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:84:3E:64:9A:F6:E9:6E:68:35:BE:18:F7:88:96:C4:FB:D1:62:49
            X509v3 Authority Key Identifier:
                keyid:76:B0:BC:FC:2C:DB:05:2B:89:E2:9C:A5:A7:5B:BE:F2:92:2C:80:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/drC8_CzbBSuJ4pylp1u-8pIsgMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:e6:27:5f:c6:f6:5e:07:ac:dd:ef:6f:2c:97:04:7e:41:4b:
         35:6c:d8:d6:79:3d:c8:de:94:c1:c1:f7:64:20:83:3a:1f:0a:
         37:72:e2:24:89:4a:21:04:4a:37:58:0d:d2:97:66:8a:43:b8:
         ab:32:57:2c:5e:3c:39:b1:1b:86:7f:58:7e:0e:1c:de:95:3d:
         39:2a:0c:6e:7a:bb:3c:bf:de:64:a0:da:1c:81:89:23:ea:c2:
         a9:42:17:36:09:9c:41:48:c7:55:9f:9c:c5:78:38:98:b3:32:
         5f:32:3e:98:b7:9b:02:82:1e:6f:51:55:08:45:29:a5:4c:1c:
         55:d3:8d:02:3e:de:37:2a:10:2c:4c:a5:0c:d1:e8:f5:01:04:
         38:e8:00:f5:f2:c6:37:7f:91:ac:77:02:94:20:c5:1e:25:2a:
         f5:7c:43:08:73:bb:7e:13:56:e1:4d:c5:89:05:f3:d3:4b:2e:
         8a:ee:fe:9f:70:62:8f:a4:40:b2:d8:8c:ce:8e:fe:00:8b:5c:
         9c:ce:92:bb:14:bb:26:77:2d:49:87:ff:86:66:f9:68:7b:11:
         3f:ff:28:28:da:59:10:db:6c:24:f5:92:fe:05:aa:61:71:14:
         33:42:84:a4:04:3c:00:8d:01:f7:23:77:c5:11:e3:59:02:a7:
         a3:f3:bd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:10:00 2026 by rpki-client