Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft
File:                     SAw7k_8qNPv6WuglVvZwNAy11ck.mft (raw, json)
Hash identifier:          a9nyfrpSw1R+9CgGoNjXrj8D3p+tqF7/uMRk68Sc290=
Subject key identifier:   5D:AA:8F:5E:B7:06:A7:93:5C:3B:AD:F4:C6:36:D3:AE:77:5D:6D:F6
Authority key identifier: 48:0C:3B:93:FF:2A:34:FB:FA:5A:E8:25:56:F6:70:34:0C:B5:D5:C9
Certificate issuer:       /CN=480c3b93ff2a34fbfa5ae82556f670340cb5d5c9
Certificate serial:       019D389BC22387F81BE2B41609043D1502C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft
Manifest number:          188F
Signing time:             Sun 29 Mar 2026 08:00:24 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:24 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:24 +0000
Files and hashes:         1: J5oJ0yY-0bzK1HfAz1Y_hlgSX8M.roa (hash: llpZQ9/tPuCwPDtcXQrfq/Zd/gdnLAnw8oHK6Zm0ygk=)
                          2: SAw7k_8qNPv6WuglVvZwNAy11ck.crl (hash: BVHcpK/EUmf4ABqQFzT43h3Sl+6r4FQgrSTzYtW8yZo=)
                          3: nAH3H9obEDKPlNqoUXx9V7rYSxw.roa (hash: VQ7cf7+kTzq+f0dyjeb2mnlvMFjzIzqtRjcZld88OE0=)
                          4: qaQdus1BOleDA5YBatWLdmpF4V8.roa (hash: qoEh+iI2D1MSwoWJBnblgqwJNtj9VkryalvSfDPlSuw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9b:c2:23:87:f8:1b:e2:b4:16:09:04:3d:15:02:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=480c3b93ff2a34fbfa5ae82556f670340cb5d5c9
        Validity
            Not Before: Mar 29 08:00:24 2026 GMT
            Not After : Mar 30 08:00:24 2026 GMT
        Subject: CN=5daa8f5eb706a7935c3badf4c636d3ae775d6df6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7b:ef:e7:d6:69:9e:99:92:e6:d9:d9:0f:fb:
                    21:59:49:d2:9e:3e:84:24:d8:71:ae:fd:ce:8c:51:
                    8b:ab:ae:1a:64:a9:f1:f9:6b:5b:59:ab:a0:37:d8:
                    0f:60:c7:a6:2f:43:22:16:20:8e:80:0f:7b:ee:d7:
                    6c:22:75:b7:7c:a0:44:55:35:dd:e2:46:72:77:66:
                    c1:fc:d8:e8:0d:bb:7c:39:2b:24:a6:fc:e3:8a:8f:
                    f7:a5:e9:5c:96:b3:b8:71:62:bc:b2:2f:99:53:cf:
                    57:54:03:af:5a:af:90:7d:d7:b4:fe:1d:8a:3d:b2:
                    de:20:4f:01:93:46:4d:93:81:75:05:19:99:71:0a:
                    b1:98:40:5b:67:14:ba:94:18:3e:a1:e1:0e:01:e8:
                    09:11:35:7e:ca:12:a1:e0:15:34:65:e9:13:8e:62:
                    0a:bf:ae:bd:ba:b4:e8:d6:98:11:8c:0a:a1:f0:df:
                    a4:20:0b:bd:c5:ed:9c:13:45:b8:a1:4a:d1:1f:20:
                    f1:ca:d6:d8:6d:a1:6a:4d:11:95:8f:50:0c:1f:e3:
                    99:8c:41:8a:26:ef:75:4c:6d:c2:25:e4:d5:79:9e:
                    bc:90:f5:f4:26:39:54:3b:1f:80:56:4f:fb:21:b1:
                    87:b6:11:88:ff:e8:9c:1c:9e:90:2d:84:c3:9b:f0:
                    9a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:AA:8F:5E:B7:06:A7:93:5C:3B:AD:F4:C6:36:D3:AE:77:5D:6D:F6
            X509v3 Authority Key Identifier:
                keyid:48:0C:3B:93:FF:2A:34:FB:FA:5A:E8:25:56:F6:70:34:0C:B5:D5:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:e6:25:05:56:75:51:c9:c4:50:7a:dd:09:5e:08:65:71:fc:
         1a:2e:87:34:4f:69:d3:41:86:d7:27:d8:63:ce:3a:8f:97:e4:
         b2:c3:78:a3:a9:c0:27:2d:df:f8:cc:a2:74:a2:4d:ff:e8:84:
         10:b4:b5:99:60:04:68:22:79:65:55:28:34:6a:88:6e:4c:a4:
         7a:ba:3e:0f:21:72:44:70:eb:a3:d6:60:c4:39:7c:50:b0:cc:
         c7:8e:47:c2:12:a2:9f:d0:a0:42:6b:01:62:1d:52:09:55:bc:
         72:16:10:6c:33:84:4c:7c:0b:74:7d:54:37:36:e8:ed:05:af:
         b5:eb:04:1f:07:be:97:44:c1:ca:92:1b:ec:90:4a:a6:23:3c:
         7d:e0:2b:ff:71:2b:a8:3a:94:cc:d1:4c:cf:1a:55:b8:97:82:
         32:db:de:a9:30:d0:21:06:09:da:75:70:d0:41:93:58:ba:4f:
         45:60:a2:e9:e9:11:52:6d:5f:b7:86:a5:de:b4:c0:50:f6:56:
         f6:d4:0d:6e:e0:42:46:c4:94:2e:6e:0c:c4:f3:de:ff:fe:a7:
         7d:4c:38:d3:1c:c3:d2:fb:c1:56:fc:ff:17:ec:84:e4:ce:fb:
         8b:f8:e9:5c:08:23:cb:92:a3:61:ba:32:0b:f7:dd:cc:12:9a:
         0c:80:30:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:28 2026 by rpki-client