Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft
File:                     R-348b8MT7xGnnHJnYJInqHz2ko.mft (raw, json)
Hash identifier:          /ZqRhRi3ePNOxAhY/s9TMKMPfMd6BiH5mVVwHtw3csU=
Subject key identifier:   6F:EF:69:84:78:8B:B9:D5:79:B0:55:78:12:2B:85:11:2F:27:8A:41
Authority key identifier: 47:ED:F8:F1:BF:0C:4F:BC:46:9E:71:C9:9D:82:48:9E:A1:F3:DA:4A
Certificate issuer:       /CN=47edf8f1bf0c4fbc469e71c99d82489ea1f3da4a
Certificate serial:       019D37C1069D10C2F29B53E91FC55F62F6F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft
Manifest number:          1892
Signing time:             Sun 29 Mar 2026 04:01:30 +0000
Manifest this update:     Sun 29 Mar 2026 04:01:30 +0000
Manifest next update:     Mon 30 Mar 2026 04:01:30 +0000
Files and hashes:         1: R-348b8MT7xGnnHJnYJInqHz2ko.crl (hash: SWReMAfws7slGSGm63f813yowqef4b6Kc+ME9trYmsU=)
                          2: mjDE2a2XV65rnlTfLw7oWAEHGqM.roa (hash: 86WbIxRaOZz2IzmvB047OshmE/5HOAZmfFRJwBM7Qcs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c1:06:9d:10:c2:f2:9b:53:e9:1f:c5:5f:62:f6:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47edf8f1bf0c4fbc469e71c99d82489ea1f3da4a
        Validity
            Not Before: Mar 29 04:01:30 2026 GMT
            Not After : Mar 30 04:01:30 2026 GMT
        Subject: CN=6fef6984788bb9d579b05578122b85112f278a41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8e:d1:95:7c:75:29:f9:aa:76:0b:97:30:c3:
                    cc:b7:30:8e:2f:c1:71:b2:e8:be:e5:65:99:af:33:
                    81:e1:9c:9a:2e:b9:57:76:1a:fd:5c:80:23:6e:c2:
                    53:2a:75:f2:17:ec:20:4e:73:4e:1c:98:2e:55:e9:
                    4e:f8:6a:8e:72:13:a9:39:b1:7a:c8:cb:ba:6c:96:
                    da:4c:b1:d7:4f:47:bc:5f:51:f8:b5:71:73:a6:42:
                    a8:33:f7:5c:48:a4:aa:43:f3:41:5e:c5:1c:f4:91:
                    73:a4:ae:13:54:89:6f:34:67:77:6b:9f:e9:56:f4:
                    27:90:e1:2a:34:c9:a0:db:e8:4a:65:ac:a1:9f:d2:
                    5e:83:7d:3e:51:73:28:36:90:c6:35:b1:fe:db:bc:
                    8b:36:18:3b:75:de:fa:c1:17:f4:c8:a9:55:cf:1a:
                    c7:35:1e:e0:e3:25:a0:14:bc:c2:e0:34:6b:d9:11:
                    4b:c8:f3:73:4b:3e:8f:ec:18:0d:17:e3:04:f0:2f:
                    7d:39:cc:e5:29:5f:1c:e0:29:74:dd:41:7c:02:a0:
                    01:a2:d7:eb:fe:51:4f:60:4e:12:85:9e:99:bd:0f:
                    83:f3:b2:f4:94:11:b4:67:34:00:9a:eb:69:2e:c1:
                    8a:cd:66:89:23:d6:99:63:43:b8:a2:7a:28:ff:d5:
                    2f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:EF:69:84:78:8B:B9:D5:79:B0:55:78:12:2B:85:11:2F:27:8A:41
            X509v3 Authority Key Identifier:
                keyid:47:ED:F8:F1:BF:0C:4F:BC:46:9E:71:C9:9D:82:48:9E:A1:F3:DA:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ec:dc:be:6d:aa:f5:7a:6d:c5:84:65:62:52:ab:58:1b:36:13:
         f9:b7:fa:a0:8f:55:a3:c9:ae:a8:3c:c2:f7:4a:89:5b:bc:90:
         1a:b7:51:16:5b:bf:24:25:43:38:1e:71:c4:62:b0:07:5b:e2:
         03:c0:e8:bf:5c:66:dd:8a:4d:67:f5:b2:2d:db:f3:a7:68:8f:
         3c:c8:20:32:01:75:35:e4:0c:66:04:23:7d:19:b0:9a:f1:e3:
         d6:87:59:ff:4a:71:4d:04:e4:40:a5:d7:5b:a8:12:d4:3b:35:
         1f:d5:9b:bc:21:1d:32:9b:9a:fc:33:00:13:a4:3d:4c:f4:e2:
         62:d2:55:26:f9:07:42:0f:95:d1:c2:ee:02:a9:83:d8:69:78:
         0a:d4:07:81:17:13:db:c0:d2:6d:c0:c9:b8:cf:42:cb:7d:3e:
         38:6e:cb:0a:da:88:c3:0e:4c:5f:b1:09:a1:19:5d:91:43:8c:
         24:f3:41:e5:87:73:67:84:92:56:55:c6:6e:ba:ea:57:dd:9f:
         f0:c8:08:f6:d7:25:15:b7:95:e2:69:ee:96:d8:c4:f3:81:16:
         76:f6:a6:43:86:1b:61:af:56:7f:64:54:aa:0c:89:a2:20:38:
         69:fe:2d:a3:4e:bc:9d:53:0d:62:5b:10:0e:a9:57:d9:69:dd:
         2c:20:09:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:16 2026 by rpki-client