Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
File:                     R-lMy3tgHaDKCUafYPZTZA_tjBw.mft (raw, json)
Hash identifier:          oejNsLpWHiw7tjeG1AXDI1jd1gLix8KjWPIYb4bpmQ8=
Subject key identifier:   A5:78:B6:BF:60:C4:6D:75:5A:E4:83:50:41:9E:DD:D9:BD:2D:19:80
Authority key identifier: 47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
Certificate issuer:       /CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Certificate serial:       019D3608AB316928E0DB70DC812BCD27A171
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
Manifest number:          18A2
Signing time:             Sat 28 Mar 2026 20:00:30 +0000
Manifest this update:     Sat 28 Mar 2026 20:00:30 +0000
Manifest next update:     Sun 29 Mar 2026 20:00:30 +0000
Files and hashes:         1: AFEWredyAjvqwTGptAJ8OUVB7P4.roa (hash: 2m1v01Idcr237fiGD0VAWcDdfdXlJYmgXEBaQhLhLnM=)
                          2: NDSds1zweD0ntatyUwleIAzeIJM.roa (hash: +ZrwYT4v0e9jZWWQ6oW4TJF+kc5mZHurMYfZvW1kcaw=)
                          3: NG0J62IT4TEYyBuMqKM6OpYG_0Q.roa (hash: 0M3OIOezZ3BNzW0tJgVErTfGfdQ/cL0eGWBKnFHK6bA=)
                          4: R-lMy3tgHaDKCUafYPZTZA_tjBw.crl (hash: M5Cm7L1m4K67dOyOItSD3nbUsfIg1dyvuFWTEiUQe5I=)
                          5: c4vO0T2N1wxzMzxlgtz0m8cOMRE.roa (hash: 8oVfciD817bSEs2qpkUByGlM63u7F5Is6kgsu7Ks33U=)
                          6: eUCYKUszQzKLl5y0TD_e2TpUs_M.roa (hash: sXPTK8NFfl134JTfg8VQ0nOUGTnLwDMaXmy5yBYZ7ag=)
                          7: ydzz4qC4IHTCEdAs_sR3u8QA-U0.roa (hash: BxYGaauFkfj9FqWYAmJGU+STO4UuDXKQhKUEiwoFjr0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 20:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:36:08:ab:31:69:28:e0:db:70:dc:81:2b:cd:27:a1:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
        Validity
            Not Before: Mar 28 20:00:30 2026 GMT
            Not After : Mar 29 20:00:30 2026 GMT
        Subject: CN=a578b6bf60c46d755ae48350419eddd9bd2d1980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a5:85:7c:28:c9:a3:46:24:79:45:0c:14:38:
                    2a:5a:79:a6:99:6d:62:b8:51:b0:ce:75:cb:28:a3:
                    36:e2:8a:90:2e:89:d2:65:31:08:65:3a:c6:a1:44:
                    e3:e7:45:53:5d:6c:50:34:12:c4:2c:55:5c:ac:9e:
                    ef:7d:ec:ab:0d:cd:d4:19:ba:ab:fa:9f:fe:75:35:
                    56:bf:86:3d:30:ef:cf:68:3e:37:d8:0b:57:7f:c9:
                    73:c2:b0:c2:9a:83:ad:d7:59:00:bb:46:cf:10:e9:
                    a9:d1:1b:52:e4:5a:55:c2:f9:54:9c:7d:f2:7a:58:
                    cb:fc:cc:57:34:e0:7b:11:10:a7:dc:7f:24:49:52:
                    be:f9:bd:82:d5:ca:6d:58:84:79:b0:8a:c4:e2:29:
                    c7:c1:79:23:ea:09:01:b7:1e:c5:a0:18:1a:8d:fb:
                    41:4d:8c:51:10:4e:35:d0:6f:90:f1:63:a3:26:f3:
                    ff:8b:ba:1b:8c:a4:ec:aa:40:52:68:f4:06:b8:2e:
                    2a:0b:6b:98:52:05:4d:fc:10:4e:3e:60:a3:ed:4f:
                    06:66:70:b8:49:71:59:21:9d:a3:e7:f8:01:00:3c:
                    07:6b:88:70:c8:8a:43:4d:6a:13:1d:ad:07:45:f1:
                    70:42:c3:00:94:c9:2f:61:8a:51:ae:ad:3c:66:f5:
                    b1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:78:B6:BF:60:C4:6D:75:5A:E4:83:50:41:9E:DD:D9:BD:2D:19:80
            X509v3 Authority Key Identifier:
                keyid:47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:72:6a:f4:01:84:5a:f2:55:7c:3f:62:8e:6b:7d:c3:b9:8c:
         43:35:8f:16:5c:bd:70:d1:8f:7b:55:de:f3:58:6b:89:7c:51:
         5e:25:7e:4d:87:b4:b6:3c:6e:e1:ab:b1:18:98:9f:92:43:7a:
         f1:3e:13:e7:0c:66:c0:c8:e3:bf:23:b2:e9:6a:33:72:3f:1f:
         dd:79:5d:92:b2:e7:13:74:0c:06:be:21:d6:d7:6b:45:65:3b:
         c4:99:94:44:51:01:23:f9:94:99:8b:15:a4:17:03:78:57:7e:
         f0:2e:aa:33:f4:89:1b:09:4f:fe:2a:21:83:49:05:e9:25:44:
         12:a1:6b:af:91:5f:b9:61:e5:c9:37:0d:96:26:93:1d:9b:f0:
         aa:e1:c8:91:5f:7a:1e:e7:db:b2:e7:d9:9c:90:34:b3:79:ab:
         b8:7a:aa:f0:72:89:82:a7:30:66:6e:5f:e0:ed:a2:f6:2f:6d:
         9d:d3:e3:30:47:55:76:bf:c4:37:f8:a7:f7:8a:7d:b1:51:09:
         89:03:9f:79:2e:32:c4:a3:31:68:0c:66:bd:70:6c:52:a5:b0:
         a1:e7:42:2e:21:f3:e6:67:b1:e8:04:dc:82:0b:e3:40:9b:c8:
         36:1c:8d:d1:f6:db:12:6e:1e:53:ca:85:e5:e5:09:6b:c6:08:
         7a:82:b6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 05:29:16 2026 by rpki-client