Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.mft
File:                     d3JBEvAoXYMMh-4yVtUZaPFbuQs.mft (raw, json)
Hash identifier:          nP/fpukfZatubGYFPQfoSbGeSUyqQBvv6pEMoJtHZO8=
Subject key identifier:   0C:DC:49:FB:A4:9E:80:35:62:83:67:2E:F4:64:A6:68:91:89:27:02
Authority key identifier: 77:72:41:12:F0:28:5D:83:0C:87:EE:32:56:D5:19:68:F1:5B:B9:0B
Certificate issuer:       /CN=77724112f0285d830c87ee3256d51968f15bb90b
Certificate serial:       019CE0A209401E109409ED3AC246F72E8574
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d3JBEvAoXYMMh-4yVtUZaPFbuQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.mft
Manifest number:          1F
Signing time:             Thu 12 Mar 2026 06:00:41 +0000
Manifest this update:     Thu 12 Mar 2026 06:00:41 +0000
Manifest next update:     Fri 13 Mar 2026 06:00:41 +0000
Files and hashes:         1: 6p1ednwrZQ_JDbcmNlbUx0LPSFQ.roa (hash: hIJJSdmlqRlS5NfeTFhoCLt5Vs93+x5E1RzMdfdB3oA=)
                          2: d3JBEvAoXYMMh-4yVtUZaPFbuQs.crl (hash: vaHnmnAdtWCLNlRfI9YgrhvWgR4QraHpBGZv+9Eaij0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d3JBEvAoXYMMh-4yVtUZaPFbuQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 06:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e0:a2:09:40:1e:10:94:09:ed:3a:c2:46:f7:2e:85:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77724112f0285d830c87ee3256d51968f15bb90b
        Validity
            Not Before: Mar 12 06:00:41 2026 GMT
            Not After : Mar 13 06:00:41 2026 GMT
        Subject: CN=0cdc49fba49e80356283672ef464a66891892702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a3:db:1a:b5:da:56:63:4d:8d:14:d8:67:7c:
                    94:8d:27:c2:00:b2:fa:fe:ee:d5:30:cc:e5:8d:06:
                    72:85:fe:2f:00:e3:fe:be:83:70:76:cc:26:88:f3:
                    0c:c1:05:01:2c:8f:bd:ae:a3:ec:85:cb:5c:af:57:
                    50:60:32:06:8b:b6:f6:fd:90:db:14:e5:0e:47:3d:
                    e0:cd:b2:78:5b:42:1e:c3:0e:df:83:e4:83:6f:76:
                    bd:8c:30:6e:4f:e2:ad:d5:25:41:6a:de:bc:73:95:
                    55:e6:c7:5e:bc:aa:e5:83:a7:2a:b2:ee:88:4a:2d:
                    6c:16:b4:72:15:65:7f:56:1a:5c:9c:9c:7e:b4:76:
                    0e:89:7f:02:2b:4b:69:90:29:6f:49:1a:6e:c3:94:
                    c5:ba:9f:7a:f3:ad:75:47:bf:ab:fc:fe:f4:53:4b:
                    7a:a3:9b:24:73:3d:80:13:56:a5:48:8c:13:e2:e3:
                    7b:6e:2a:9f:79:76:78:17:59:db:d3:0a:66:38:9d:
                    23:41:0d:11:66:14:29:c4:5f:41:1e:0e:1f:04:d5:
                    ab:40:90:f4:1d:6c:15:ba:ec:79:89:05:dc:21:2f:
                    b1:72:4a:92:cb:60:0e:f8:a0:9a:89:f3:d6:99:49:
                    20:e3:2a:a7:bf:26:0a:91:c6:60:1a:87:8d:4c:0f:
                    14:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:DC:49:FB:A4:9E:80:35:62:83:67:2E:F4:64:A6:68:91:89:27:02
            X509v3 Authority Key Identifier:
                keyid:77:72:41:12:F0:28:5D:83:0C:87:EE:32:56:D5:19:68:F1:5B:B9:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3JBEvAoXYMMh-4yVtUZaPFbuQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:9d:89:af:9d:bc:8d:3f:51:07:d8:62:93:5c:ef:bc:b7:17:
         e2:14:41:ce:19:7e:b7:82:05:7a:6c:d2:72:73:af:8d:9d:a8:
         39:be:69:ea:a1:1e:e8:2c:1a:2d:05:d8:b2:af:ac:fd:a8:ae:
         e8:a5:0c:22:82:25:9a:f7:38:cc:72:29:a0:b2:a2:c9:61:d6:
         a2:16:d2:7d:b2:53:51:4a:ee:83:99:24:9a:ab:7a:d9:16:87:
         a8:0a:b3:b5:dc:4e:03:33:c5:f9:23:b7:e1:83:a3:09:3b:ed:
         6c:44:3f:29:a1:d6:dc:7e:eb:be:80:ff:6c:3c:32:e9:32:87:
         1e:10:f6:07:a1:62:7c:bf:ed:e1:37:66:53:56:6a:e2:82:6f:
         66:45:80:63:8d:83:4f:53:64:5d:2e:4b:68:47:00:e4:22:70:
         01:33:a4:70:75:29:34:b6:67:c3:f5:6a:07:01:c5:ef:6e:24:
         4a:23:22:e0:c3:c4:bc:f0:0f:3e:a3:ac:73:90:7c:d2:ae:ee:
         8f:31:af:e9:47:9c:05:29:36:54:c2:93:73:9c:50:4b:65:a2:
         79:cb:12:e5:77:d8:3f:17:8e:b5:10:be:63:f0:ce:97:31:29:
         2c:24:01:d6:3b:0f:6a:bb:f9:90:e3:c2:7e:8e:e9:68:21:32:
         c9:76:6c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 16:28:26 2026 by rpki-client