Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.mft
File:                     V5Sv215qGIV4CSClT_qCQI6oW6E.mft (raw, json)
Hash identifier:          3JOcBoBFC+FeIg32JSrmyzuFVoBxO88C6HTYgKoCuaU=
Subject key identifier:   26:C2:CC:95:D9:D6:37:55:49:D1:B3:B6:31:AD:C6:65:73:E0:E3:3D
Authority key identifier: 57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
Certificate issuer:       /CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Certificate serial:       019CFCF59D52DA034A634381F85044155402
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.mft
Manifest number:          1897
Signing time:             Tue 17 Mar 2026 18:01:20 +0000
Manifest this update:     Tue 17 Mar 2026 18:01:20 +0000
Manifest next update:     Wed 18 Mar 2026 18:01:20 +0000
Files and hashes:         1: 2nST-WJVV3wnt2Ywo-h_QbVYVc8.roa (hash: BuSb1j+4OFxPz/aKcDFoWL6I9jIRxHVEzdI/3BhNSpc=)
                          2: FYrbP-biAkhXruhifr7O1McOPZQ.roa (hash: AUoP4IVKHs2BTsO3edboDlY2BE9t/NvsoIynqQS/l20=)
                          3: GLrMDn_b0I1MejoPRWfg9LMBjjI.roa (hash: as4V3NC8zYiNgBHptnpjtVduVkflidyYfc83EQtz0Z8=)
                          4: Q64mrHsfqfejpj_z4O12utLFM00.roa (hash: XT4EXYh1li4iWcnimafwT98eN/bCIwvyopUeL/L3kuI=)
                          5: V5Sv215qGIV4CSClT_qCQI6oW6E.crl (hash: Ifj2Cj/zcVnVhmgAsr1A1Pe/2vFM599He2qKgj9vtTA=)
                          6: VCtB3XpWALiiYZlR8kJ9-T8jFlM.roa (hash: PjwhiA7JGNs6MbNHIzd4jnryrVDjAI+5D7u5r33tbKg=)
                          7: lQbx2GFG3GJlYjI818tRZTvWCqU.roa (hash: hYFJgU1AzbjoQcSMuHA0vL1GNjSzMHcYgTXKGRPWjps=)
                          8: uDo1JMrF3KNScD7ByahXY9Q0hOM.roa (hash: 2A9Xtk9walDaSopHVstfJToBQgQNhRzATAnAC7xPnSI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Mar 2026 18:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:fc:f5:9d:52:da:03:4a:63:43:81:f8:50:44:15:54:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
        Validity
            Not Before: Mar 17 18:01:20 2026 GMT
            Not After : Mar 18 18:01:20 2026 GMT
        Subject: CN=26c2cc95d9d6375549d1b3b631adc66573e0e33d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5d:f8:07:7c:d3:bb:74:91:be:a4:20:30:a5:
                    9e:56:29:8e:87:33:d4:3d:a4:e3:99:e2:9b:e4:20:
                    48:49:bf:6c:be:f0:18:78:c9:04:98:0f:a4:b2:95:
                    24:ca:75:9d:7e:20:f7:e1:ed:7d:cb:09:c5:84:e0:
                    8e:53:aa:04:ec:c4:22:09:f4:25:40:06:45:a9:3e:
                    90:61:60:17:38:06:67:75:f5:d4:ed:24:0f:a7:3e:
                    48:ac:b4:e2:2d:9f:49:2d:c5:e5:b5:9e:a1:dc:d9:
                    98:11:54:9b:11:6c:15:ed:ae:99:87:d1:93:52:fb:
                    ea:10:7c:4b:30:6a:4a:26:2c:16:2a:c7:fa:b0:0e:
                    45:40:33:bb:43:b5:79:63:7a:38:67:22:63:78:b4:
                    eb:0b:ad:55:8c:04:30:0c:15:8c:b5:e2:b7:fb:e2:
                    1f:1b:e2:4b:16:eb:13:4f:5b:6c:d6:2b:54:05:ac:
                    8b:58:2c:27:7b:96:60:15:f9:91:54:eb:32:69:55:
                    ca:c5:bb:8f:04:d4:66:5a:6b:e8:8b:27:84:b4:07:
                    b5:d6:83:01:60:30:4d:e8:66:61:e0:e2:be:52:02:
                    fd:66:7b:c1:48:c1:6f:af:ba:00:93:b5:a1:13:56:
                    1d:8d:ea:d8:1e:a3:24:73:41:9b:38:9a:1c:ff:99:
                    50:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C2:CC:95:D9:D6:37:55:49:D1:B3:B6:31:AD:C6:65:73:E0:E3:3D
            X509v3 Authority Key Identifier:
                keyid:57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:a3:e8:da:da:12:1a:53:75:9e:a5:0b:ad:1d:2f:57:fe:c0:
         4f:e4:fc:53:d3:0e:e3:7e:3b:94:52:c1:a5:0e:a1:3c:ef:2e:
         74:2d:26:a8:b7:5d:b5:e7:1b:66:5c:4f:47:af:46:a1:8a:6e:
         a7:21:e0:ad:de:77:62:cb:73:0f:7f:bc:ad:1d:f3:b6:3c:7e:
         76:c4:e4:3b:28:de:cf:bb:69:25:fd:36:e0:ff:ef:9f:60:90:
         64:5a:92:f3:d5:fd:2b:0f:3c:27:07:7b:11:67:ff:ba:6e:c5:
         ec:0e:17:b4:6f:37:14:d7:70:78:f6:0c:65:c9:74:d1:d9:14:
         02:d6:87:4c:9d:5f:ef:06:6b:46:49:3c:b8:41:ae:1d:b3:7a:
         d9:8f:aa:cb:00:11:61:cf:b5:93:16:81:9f:86:a9:8d:f8:c8:
         38:11:26:d6:41:91:23:ba:85:df:28:ae:3e:3b:bc:a9:3c:88:
         38:ac:d1:7f:36:ba:db:23:76:78:b8:b0:8d:16:b4:98:a9:3e:
         15:13:3d:df:f9:f8:e3:a1:0f:bf:53:e0:62:b0:09:26:ee:95:
         e2:ee:53:6d:50:d6:96:73:e8:10:a9:4b:fe:86:44:92:62:d1:
         de:5c:1b:8e:11:dc:97:c3:81:f9:84:cf:35:e8:d0:25:84:64:
         38:61:4b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 02:41:58 2026 by rpki-client