Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
File:                     1BGrxMBGirKJHqrK26DcA3eTb9U.mft (raw, json)
Hash identifier:          0nk3a4cablei3TB1Kpln36mF3pH2xJVnp5G8uILi3NE=
Subject key identifier:   9A:AE:99:2F:07:9E:72:25:37:C6:0E:3A:E7:1A:5F:44:0F:69:CA:4B
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Certificate issuer:       /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial:       019CE5C8A4BC54DB8544B79128882BC52200
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
Manifest number:          1876
Signing time:             Fri 13 Mar 2026 06:00:57 +0000
Manifest this update:     Fri 13 Mar 2026 06:00:57 +0000
Manifest next update:     Sat 14 Mar 2026 06:00:57 +0000
Files and hashes:         1: 1-hrB_4i445lAPatm9pXp75UPr1I.roa (hash: YEzNTLD9wfX8VjD6MK1Rs1n5S4HzUgswhciPZWTMqSc=)
                          2: 1BGrxMBGirKJHqrK26DcA3eTb9U.crl (hash: GSmT2psVxO+i5xiGYmFj23BeAaleoR4XTrSOjlf28L4=)
                          3: 1OiPrxPQn3lkIhfte5yQ-6wFTA8.roa (hash: z9/vDo3XxLBhdAOAkVfQRjghVloHXSHSVsc9PHpJpsk=)
                          4: 359PtD2aT4lYVKLtb8GpHiwDpSM.roa (hash: +hV5lfZcoxfXxvE4zajqvEY/eOPBG4IbY8Wpf+1cu3I=)
                          5: 3TVHsbS8DDbS5jFNHXliJUV-vt0.roa (hash: VNMhI1DbQRZPhe0DLvYfFvfWzVgThx5w3CClRDwW+eI=)
                          6: 3x1Z8euWyQ8oU2eTqmH2oNYDUlg.roa (hash: hzh/xwb8heLsOXwzZrTck/MAmVN9avO1bZxPN2Q3Qc4=)
                          7: 6zpsdnIXKDCxVFEhevxRA4_zSCs.roa (hash: OPbPEb2Sk8Js+TBK52PtXkK2BFw7aQaLU/bCQ0DpgQ0=)
                          8: CjqRUuv68PFiU7765GT5HXOx8Bw.roa (hash: PvucfJQmBJoQyaNYzAVmEi/q9uSQDhp1g2JhGdUwoW0=)
                          9: EtSMAsHbVT4Pxm9MD2bBL5Zv5fA.roa (hash: pwqZR3sLomznVe36SGqzsoCNYDQVFyLcuDqHZembszU=)
                          10: I7Gi0c9R1I2nkTBa_FilFRmrh1A.roa (hash: rgMw3gFLvDe2bJ2gkzdn82gcIPRZuH5eYyiNhuqG2wY=)
                          11: IUnxJCEXGpjb9x8O-AKLChbdKH4.roa (hash: ngyGAWfnTLrenQ1MiPj1AnwG2yKMniipm+cR6MK1lC0=)
                          12: MMG6kAYHdbSTZ5cmO-QHmBxivT4.roa (hash: gTpV76Ww0BCzvfD9wYqWRlnMaGyxOQ5bU1mc1SqNJxs=)
                          13: _0yShHb3_Lvo8oOIhf1dP9etifM.roa (hash: C5c+j5BtUc+Edi1FogFMem4oHE95WUZxlK525NIu8Uk=)
                          14: bYA_hDz-uHsDwzycumiOlbXWrtA.roa (hash: Yl9BNnwj6zQSqqxSRXXKmcquJUlgVyqLxCnPkLZIOXw=)
                          15: beBz1EHSK0ejZhV2Z5PmcoiuBnM.roa (hash: mDHGqDcF8EKgwMgysUIVSZ+OvPwZjW1FW23RjIyMX4g=)
                          16: g0RaLD65-oQgpyqHw6Rb1clt6Us.roa (hash: MBY8mcPfd1xDaI5XexA7xmIlVnR5RWaKP5T2lgf3SaQ=)
                          17: idbIVY02MqkT2W1Sz2Hn6vm7Wgc.roa (hash: iSNlVvk976S8zGXNaqHMWJhFzSvDbSMz0/sY5GUQxFg=)
                          18: jPMCixDvfVo9glBXbNMOz86F-rU.roa (hash: yq4kSM4l08bAj6xNIMbu+OFNBQBF0qIIeLACLieVs2o=)
                          19: keMt9GC91bHZXuQ0h87FQe-gBaY.roa (hash: W4gS8hqr2Jgdapo27zgTBxXWuHg7t03Y6FgU8O4hTKw=)
                          20: mPZY1GYZYbQ6yjTCuTRg1ZzMsqw.roa (hash: BLYdcZ3Gbdmq0apl8BQS+jPj3Rqpg+Sj0dliHzXdyWM=)
                          21: okpxkpXVkTuoxcjFPQV6FQoe0Gg.roa (hash: hH8YmXQn5X8TblBZy3b0UzoPWUDgyN7U0BO4gNmqkZc=)
                          22: rdklJtnIsRPpCMnxSS1GGHIWCtI.roa (hash: i2J/w0/vFTIyr+KWAGpYaVRFjg90ISDIds54aojdKiA=)
                          23: xrEslglVuEnnQ0vF9Dsq9qhfjps.roa (hash: Qjzp64QTM1xn969UZDkr+b0btpansANNv6kwoq7jiQo=)
                          24: zX07X_H3K2-11ztBe_0TWCV6UDU.roa (hash: m7+UubbmMpsAyslPYtLacfeBJL7t5bWeQmDZDfKFeeY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 06:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:c8:a4:bc:54:db:85:44:b7:91:28:88:2b:c5:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
        Validity
            Not Before: Mar 13 06:00:57 2026 GMT
            Not After : Mar 14 06:00:57 2026 GMT
        Subject: CN=9aae992f079e722537c60e3ae71a5f440f69ca4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:cc:50:cf:21:5d:c0:da:e7:41:a6:5b:8f:d3:
                    84:e3:44:81:64:fa:6b:c4:35:ba:a5:74:e5:87:88:
                    07:f2:7c:f4:19:45:77:9a:e8:f7:85:f1:22:85:b0:
                    15:36:0a:a4:dd:8c:ce:cb:13:a5:33:e7:fc:4f:57:
                    1c:85:00:7f:b7:34:35:73:30:4d:01:3f:7e:d2:90:
                    f1:d3:30:dd:f9:1c:af:8e:8e:06:36:5a:94:64:7e:
                    dd:d2:6f:54:0c:e1:ee:a0:4d:bb:e9:07:47:6b:42:
                    d1:dd:ad:df:7e:20:e6:8b:c9:62:1d:e4:2b:bd:c4:
                    ea:19:98:2c:6e:ec:fa:57:b9:a3:06:3e:cb:4f:c7:
                    2d:ee:ed:37:a9:02:87:58:6b:d6:b9:19:da:df:25:
                    68:5d:11:81:a7:53:3a:80:70:23:cb:09:b1:e8:e7:
                    5b:fd:86:62:44:ca:63:cd:9e:7f:d4:01:a4:dd:e2:
                    bb:e4:2b:66:82:a8:bc:dd:da:98:46:48:b8:e0:48:
                    34:02:c6:b3:a3:a7:c6:3c:e1:11:20:eb:44:32:f1:
                    a1:1e:a2:35:7f:90:4f:17:24:6f:ba:6a:5e:05:2a:
                    a2:61:12:cc:e0:54:36:85:bc:7d:d0:3b:c9:42:33:
                    84:c9:5d:ec:2c:b9:16:8f:e4:68:f1:8e:b3:f4:52:
                    55:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:AE:99:2F:07:9E:72:25:37:C6:0E:3A:E7:1A:5F:44:0F:69:CA:4B
            X509v3 Authority Key Identifier:
                keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:d0:1d:25:53:a6:d2:d5:77:3a:d0:4f:97:49:dc:9d:9c:a0:
         0b:04:52:df:0a:21:9d:1d:c5:04:3d:d2:ef:17:71:a5:9d:3c:
         8d:ed:3a:d1:a4:53:26:a2:d5:3c:c5:2a:9d:a2:02:2d:6e:2a:
         49:53:cd:0c:b3:12:09:bc:fb:a0:d9:b6:b9:88:bf:6d:83:00:
         cc:52:a9:f4:2e:09:21:dd:d7:09:45:c7:49:3d:09:78:64:7d:
         07:cf:5f:e8:8f:db:a8:fc:43:07:e1:90:f5:7a:aa:a7:24:04:
         a5:16:d0:dc:08:29:99:90:ed:7a:b3:0c:0a:39:fc:dd:d5:54:
         ac:65:3f:48:32:6e:6c:54:a7:2e:4d:2b:64:95:cb:d4:19:7a:
         87:85:3b:aa:12:e2:41:0f:aa:1f:91:0c:69:eb:47:64:ee:26:
         20:9a:46:a9:b0:09:69:f0:a3:4c:43:2d:c9:d2:d4:53:f6:18:
         f5:b8:7c:f0:ad:cc:11:d0:87:28:8e:bf:2b:fb:de:63:ed:58:
         55:cb:d7:d4:fd:51:7d:de:57:5a:b9:80:c3:18:f0:cf:53:83:
         e6:9c:0e:f9:e5:5f:79:60:dc:4c:d6:f6:9b:78:3a:61:74:14:
         a8:af:a2:b9:da:ce:2d:06:96:0b:60:96:f3:2f:16:23:30:70:
         6d:10:e6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:32:36 2026 by rpki-client