Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft
File:                     1EggcpoPmr-2ysO1-WwnGY12ORs.mft (raw, json)
Hash identifier:          6Mbblu3vI9W1GPN2RWi/+/zc/sf/IVIKptmSRDixHBM=
Subject key identifier:   ED:5B:D5:8C:D0:B0:C5:F5:B4:DE:80:87:0E:B3:A2:66:76:E0:D0:FA
Authority key identifier: D4:48:20:72:9A:0F:9A:BF:B6:CA:C3:B5:F9:6C:27:19:8D:76:39:1B
Certificate issuer:       /CN=d44820729a0f9abfb6cac3b5f96c27198d76391b
Certificate serial:       019D371BCE6408003A2206E392DF441800E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft
Manifest number:          188E
Signing time:             Sun 29 Mar 2026 01:01:02 +0000
Manifest this update:     Sun 29 Mar 2026 01:01:02 +0000
Manifest next update:     Mon 30 Mar 2026 01:01:02 +0000
Files and hashes:         1: 1EggcpoPmr-2ysO1-WwnGY12ORs.crl (hash: LHMljxMDUR3e6fR57DdcHOZtstqBRB2JFVjOVZhYOQQ=)
                          2: CbDZWAH-omIyip_WwmqNFzGEN6Q.roa (hash: JAGjJAojKoIa2rnuQE4G2jO7W0AL58snegAhZ+6Gung=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 01:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:1b:ce:64:08:00:3a:22:06:e3:92:df:44:18:00:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d44820729a0f9abfb6cac3b5f96c27198d76391b
        Validity
            Not Before: Mar 29 01:01:02 2026 GMT
            Not After : Mar 30 01:01:02 2026 GMT
        Subject: CN=ed5bd58cd0b0c5f5b4de80870eb3a26676e0d0fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3a:de:e7:ac:1a:28:03:25:46:ce:b6:4a:bd:
                    fd:dd:2b:41:44:96:ad:6c:26:c4:55:3f:a7:8b:cc:
                    58:76:ae:d8:41:a1:d8:d9:e7:c2:e5:ec:f0:3b:66:
                    3d:b9:6c:60:99:89:53:5c:3f:9a:51:42:f6:2f:26:
                    fd:b2:eb:17:bb:2c:4f:46:13:8a:56:e9:3d:4c:82:
                    6c:83:b0:88:5d:0c:00:45:d5:e2:f9:3d:22:e3:a1:
                    9c:c7:f8:c4:8c:b5:f6:a6:63:73:c0:41:de:c5:53:
                    ea:50:05:77:d8:99:bb:63:d5:e6:4e:6c:48:ea:be:
                    f6:f2:94:21:4d:6b:b1:2a:92:32:7c:cf:8e:bb:00:
                    af:1b:53:5e:6e:2e:55:20:e1:9a:2f:f5:14:51:69:
                    25:76:50:49:6d:54:76:83:6c:a4:8b:28:e2:72:d3:
                    d4:3b:e1:db:37:2f:ca:83:80:78:fc:23:93:7c:4f:
                    62:ca:18:26:79:e0:fb:da:3c:39:bf:5e:29:39:37:
                    f3:ae:af:08:2f:5a:51:d8:99:28:66:da:b3:70:d0:
                    f9:e3:99:24:1a:b3:8d:ec:d1:8a:3d:37:64:30:6f:
                    72:30:3c:92:f4:03:62:e4:3d:97:10:6a:35:df:61:
                    a1:f1:be:0a:34:df:8e:e4:c2:26:15:a9:da:32:60:
                    16:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:5B:D5:8C:D0:B0:C5:F5:B4:DE:80:87:0E:B3:A2:66:76:E0:D0:FA
            X509v3 Authority Key Identifier:
                keyid:D4:48:20:72:9A:0F:9A:BF:B6:CA:C3:B5:F9:6C:27:19:8D:76:39:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:3a:d2:57:7a:09:8c:98:25:9e:ec:df:f5:83:b3:1c:36:99:
         34:83:92:e4:c6:dc:ea:87:17:28:34:88:d9:6a:a2:ae:22:0c:
         e5:cb:a2:20:8a:7e:74:a3:19:53:5f:ba:9f:7c:23:77:6c:63:
         8b:cd:b1:6b:be:4b:44:05:fc:22:55:39:8a:cf:f4:ff:fa:b2:
         21:e8:19:2d:72:30:f8:b8:40:cc:90:a4:6b:54:b5:84:04:4e:
         35:56:3a:32:08:85:70:29:e6:e0:c9:a6:09:4c:e6:3a:29:94:
         26:f5:7f:3d:15:cc:d5:3d:2b:e3:f3:15:69:43:3e:b2:40:99:
         a5:af:4d:3c:56:32:54:0b:ca:08:bd:67:6d:9a:b2:07:1b:03:
         ee:06:af:ec:c8:ba:ff:d4:4a:57:03:ec:ad:f9:c0:65:38:c0:
         3c:26:a0:d6:e5:c6:20:fc:cf:0a:91:72:4c:47:07:1f:7e:09:
         e1:4b:86:dd:0b:65:f1:de:f5:cc:d6:04:db:a3:b8:f2:03:dc:
         ab:50:63:b9:c6:f6:e4:63:9d:dd:c5:20:7f:0b:6f:71:54:a5:
         05:59:7d:1f:05:40:09:c9:02:dc:8d:3d:e9:10:21:83:23:02:
         5f:90:ef:35:21:a6:da:0c:54:58:02:81:c5:b6:c0:e4:4b:5d:
         99:99:7e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:35 2026 by rpki-client