Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
File:                     daWp6O8n4wJyk--E-4-NMPq25tY.mft (raw, json)
Hash identifier:          5MczJj4ilKMc5maRY4rMcDFZ96P/qnbS2usan9i4rvo=
Subject key identifier:   F4:17:B2:D1:9F:5F:39:F1:5C:76:B6:D1:16:C3:AB:59:A6:E6:D2:63
Authority key identifier: 75:A5:A9:E8:EF:27:E3:02:72:93:EF:84:FB:8F:8D:30:FA:B6:E6:D6
Certificate issuer:       /CN=75a5a9e8ef27e3027293ef84fb8f8d30fab6e6d6
Certificate serial:       019CF94F369BB672991AE16A0C1CD8558BA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
Manifest number:          186E
Signing time:             Tue 17 Mar 2026 01:00:43 +0000
Manifest this update:     Tue 17 Mar 2026 01:00:43 +0000
Manifest next update:     Wed 18 Mar 2026 01:00:43 +0000
Files and hashes:         1: daWp6O8n4wJyk--E-4-NMPq25tY.crl (hash: MMAwRV5Ub75SBsqYAzDzqL7CrOXbGMITddInV38mHAQ=)
                          2: nDj9PT5N_QWx4Sz5FT7RF4CSpok.roa (hash: h0RW3y25bIVEC8aKObDu/RDtNTnrw2v6jC5PsgpIK5Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Mar 2026 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:f9:4f:36:9b:b6:72:99:1a:e1:6a:0c:1c:d8:55:8b:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75a5a9e8ef27e3027293ef84fb8f8d30fab6e6d6
        Validity
            Not Before: Mar 17 01:00:43 2026 GMT
            Not After : Mar 18 01:00:43 2026 GMT
        Subject: CN=f417b2d19f5f39f15c76b6d116c3ab59a6e6d263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3e:52:b9:a0:05:f7:9b:db:e3:2b:d2:61:ed:
                    08:13:9c:3e:f0:f7:41:e1:c1:e5:a1:61:c0:8f:d7:
                    f9:a6:d3:ff:2e:f9:99:b8:ec:1d:50:cf:ff:cc:8a:
                    38:35:25:38:60:d5:65:76:7a:20:5d:a1:1d:a5:f8:
                    8e:11:d4:fa:29:dc:ff:d8:cd:e4:e8:34:f2:e1:95:
                    90:ca:4e:2f:51:19:be:e6:54:29:63:13:fb:af:27:
                    31:ab:14:9b:e7:29:19:f2:2c:76:27:e8:bb:c1:6c:
                    ad:37:07:98:4c:ae:b2:23:d6:b6:d6:15:fa:6e:95:
                    49:a2:0a:6e:d3:ee:ac:ac:1d:74:e4:d8:40:6e:53:
                    15:66:32:53:04:62:ac:9f:b4:5b:4e:8d:6b:3b:1d:
                    6b:d7:3d:18:b9:cc:10:29:66:67:81:b6:96:86:c7:
                    50:96:31:a7:3c:28:3d:85:ae:8f:c9:1c:bc:63:3b:
                    33:00:55:02:0d:ca:49:6d:d8:e4:70:4a:82:ac:fc:
                    fb:e6:39:aa:5b:f1:3a:52:61:62:3f:40:10:b0:46:
                    ab:a0:3a:f6:d5:2d:d8:db:a6:25:0b:27:3d:f2:00:
                    68:a2:4b:eb:ec:49:15:48:82:9b:8d:5f:cb:1d:17:
                    ee:61:e3:85:53:da:84:04:57:52:0b:59:58:d6:c2:
                    88:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:17:B2:D1:9F:5F:39:F1:5C:76:B6:D1:16:C3:AB:59:A6:E6:D2:63
            X509v3 Authority Key Identifier:
                keyid:75:A5:A9:E8:EF:27:E3:02:72:93:EF:84:FB:8F:8D:30:FA:B6:E6:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:19:0b:bb:48:f0:29:a0:02:76:c0:f1:2e:de:fb:76:a5:b1:
         ac:e1:cb:10:ab:b4:18:4a:fd:9f:78:0e:33:8a:b2:a0:7e:0d:
         dd:9c:34:14:89:52:b1:6a:c6:83:a8:82:96:c4:6f:57:4d:bd:
         04:ca:2d:8f:e1:55:4d:a2:3b:05:16:34:d2:1b:98:50:c6:8b:
         2f:6c:6e:64:db:08:61:5b:1f:fd:56:71:d4:4c:08:78:17:54:
         c5:c2:7d:86:f0:f4:63:88:85:0a:a1:ef:7f:4e:9d:77:36:43:
         ab:5e:5a:10:e9:88:11:c4:a1:ce:60:8f:bb:31:7b:b7:ef:d6:
         dc:0b:93:b0:ed:4c:8a:50:f9:19:4c:7f:86:12:bc:6c:86:92:
         7a:20:77:53:e0:c9:65:47:b4:02:41:a6:6b:22:3a:64:79:0b:
         a6:e1:9c:d2:cb:87:5f:29:ce:78:68:98:62:10:45:c4:99:78:
         6f:9f:b7:cb:d4:68:6f:e2:7f:28:27:93:03:06:b1:f3:4b:12:
         1b:ea:44:fd:f0:ff:2f:37:fe:cf:1f:ba:df:91:bd:4a:dc:d0:
         03:c1:57:b7:d8:1f:eb:93:5f:ca:67:f4:08:69:56:01:0a:3d:
         ee:a1:64:12:58:0d:fb:58:2c:2c:14:26:5f:16:97:33:1f:14:
         e3:7c:26:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 09:24:39 2026 by rpki-client