Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
File:                     IxIMamyM8XJufUjjFKFszQXvhgc.mft (raw, json)
Hash identifier:          ZSv0EsyjlRuNIpAAgySwK1evh3NxO5zEuCkQ4sWta9M=
Subject key identifier:   CA:B2:5F:49:9E:A2:6D:AC:FF:39:4E:17:33:8B:73:1E:16:D5:72:FD
Authority key identifier: 23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07
Certificate issuer:       /CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
Certificate serial:       019D37F7290D392487BFA2218F1F5C2C615A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
Manifest number:          1894
Signing time:             Sun 29 Mar 2026 05:00:37 +0000
Manifest this update:     Sun 29 Mar 2026 05:00:37 +0000
Manifest next update:     Mon 30 Mar 2026 05:00:37 +0000
Files and hashes:         1: CQE3Ua-6p5IOmLVZBdiochWyjps.roa (hash: gNg92KVIAocfXOKmJRK5kb9MA5JxKznIoERJBi3d7ws=)
                          2: IeF5X1a3aG1itamyPWDSY8JYd_s.roa (hash: y2AA0T0iuCLSj/XH3EgJGp5sX2Tv0JE6WQ9K2PDxxXQ=)
                          3: IxIMamyM8XJufUjjFKFszQXvhgc.crl (hash: gq+HFcQJooJh75VuQCezuXNEylEqiQOhWLX04RB+FCw=)
                          4: KATv9TIszgZ-B1Uoi7DkR6JPCXQ.roa (hash: /5lbXOjfh+/6SdaUgfM3MyOsJ/JBXtRsEqHn8qkyRLY=)
                          5: a_bZi_JF-htWi2WNdUEbarLHqjE.roa (hash: 2XF8puYADeEdrWHojv63xz3QjBToR9sg7lU4Wxe4W+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 05:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:f7:29:0d:39:24:87:bf:a2:21:8f:1f:5c:2c:61:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
        Validity
            Not Before: Mar 29 05:00:37 2026 GMT
            Not After : Mar 30 05:00:37 2026 GMT
        Subject: CN=cab25f499ea26dacff394e17338b731e16d572fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f3:a2:72:21:35:a7:5b:ad:4c:e9:83:ef:be:
                    aa:3f:2f:0b:5d:d1:85:92:9c:9c:ec:d8:3a:c0:ac:
                    92:92:7f:0d:a0:f3:1e:60:b5:8d:a4:19:46:76:41:
                    ee:9f:ee:06:27:db:72:42:33:24:c1:b0:3c:46:e0:
                    0b:df:bd:87:b8:e5:2a:97:6a:4f:62:ca:f5:cb:b2:
                    95:89:b2:8f:25:6b:e5:84:e9:73:46:eb:aa:c5:63:
                    40:c8:95:38:9a:a8:44:41:61:6c:7c:fa:f4:dd:97:
                    43:18:da:1b:ae:b8:0b:5a:31:9a:01:14:9e:b8:7b:
                    b0:71:5d:ff:09:22:1f:e0:2f:ae:d8:ba:48:bd:68:
                    b8:95:7b:6a:3b:74:a5:12:3b:f2:2b:a9:90:82:9a:
                    75:e6:1c:a8:2b:ab:56:53:af:3d:70:e1:76:30:7a:
                    c5:c4:26:f9:60:e3:c0:8c:30:73:9f:63:64:9d:b9:
                    3d:55:e5:8f:5b:6a:df:23:c3:ba:c7:a8:a4:fe:8a:
                    9d:ac:7e:74:af:9a:bb:fe:ae:3a:1e:66:53:77:c8:
                    d7:fb:13:c5:68:f4:8b:ff:79:fc:d9:a1:49:08:55:
                    b9:de:00:e1:af:66:d2:61:a5:d7:5b:eb:13:5a:03:
                    b3:0d:ed:2a:e3:df:91:02:b2:e2:70:b8:06:f6:e7:
                    a9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:B2:5F:49:9E:A2:6D:AC:FF:39:4E:17:33:8B:73:1E:16:D5:72:FD
            X509v3 Authority Key Identifier:
                keyid:23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:5d:31:89:0b:87:84:74:1d:a4:ef:ad:9b:42:a6:dc:7a:ec:
         af:87:7f:da:d7:11:11:06:a7:21:89:5a:b4:f2:6d:46:76:56:
         b7:23:2a:33:43:0a:1b:e6:0b:7e:fe:db:dd:1c:d4:fe:6f:d0:
         82:bb:b1:74:52:6d:96:97:85:2c:52:49:d3:59:ae:ee:59:a5:
         66:a3:4b:40:c0:a5:f4:62:27:94:bb:8e:b5:bf:00:a1:6f:e6:
         44:37:84:e8:61:29:36:54:78:a1:2a:18:f0:4f:17:4d:41:87:
         04:d9:63:10:88:ad:9e:4a:79:e2:8d:8c:f6:bd:5c:c3:b7:2c:
         a3:94:42:1d:fe:e0:8e:97:d2:80:6f:11:03:f1:42:ea:42:e7:
         c8:6f:3f:e9:1d:ea:a8:a5:80:69:2f:d0:4c:10:89:1b:bf:51:
         c1:43:14:fe:83:0e:a7:9a:64:b0:00:c2:8b:ba:3c:d6:86:ac:
         b5:c3:6a:2c:7f:07:c4:64:ef:f7:16:09:ad:f8:d8:27:8c:77:
         c8:94:0a:07:65:bd:59:16:b9:04:be:d3:b2:95:b8:35:84:42:
         d1:05:2e:2e:63:74:31:1a:f9:ba:fd:9d:14:9f:8e:02:a8:56:
         b5:47:3a:a4:8a:3a:1b:d5:cb:0f:2a:45:5a:48:f9:50:eb:93:
         73:56:7f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:29 2026 by rpki-client