Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
File:                     w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft (raw, json)
Hash identifier:          A2clf90I+W8RenVyKPJmlp3l+K7B2vnjhA76PPlmfnY=
Subject key identifier:   1E:E5:9F:7C:BE:46:92:B7:23:9C:58:3E:61:3A:0E:DC:61:72:85:B9
Authority key identifier: C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF
Certificate issuer:       /CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf
Certificate serial:       019CE5233FD7A8FFB26ADEE4D523826A012F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
Manifest number:          186F
Signing time:             Fri 13 Mar 2026 03:00:18 +0000
Manifest this update:     Fri 13 Mar 2026 03:00:18 +0000
Manifest next update:     Sat 14 Mar 2026 03:00:18 +0000
Files and hashes:         1: 77h1Q6qUz5qlMm7h_AznswYtOZ0.roa (hash: sRXxLopp6/463zgP26zWNJzhuSr+AeItnoxYVZGJazU=)
                          2: HN1urgNHkidDzjrtQwQt8embI9M.roa (hash: EeB/nRcF8dH+A2iZTqxjbaTiyibP5r0zfqmmI1yddPU=)
                          3: w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl (hash: f8Cb71sUXRkcdHmPiNgwJ8aufD/EjymT2Ifa/QMazj0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 03:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:23:3f:d7:a8:ff:b2:6a:de:e4:d5:23:82:6a:01:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf
        Validity
            Not Before: Mar 13 03:00:18 2026 GMT
            Not After : Mar 14 03:00:18 2026 GMT
        Subject: CN=1ee59f7cbe4692b7239c583e613a0edc617285b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b0:d7:c9:80:56:ec:79:84:b0:aa:79:06:68:
                    74:1c:82:f3:f9:00:cc:9a:be:5b:aa:9c:e1:07:33:
                    c8:b0:f3:bf:bf:1b:96:03:8a:71:33:6c:62:fc:e4:
                    28:8c:24:8d:3a:37:83:98:be:37:35:e9:72:2d:58:
                    30:79:7f:d7:f8:94:1e:58:fd:89:b9:f8:a9:fe:66:
                    80:40:02:f0:71:b9:f8:3a:3f:4d:e4:8b:08:e6:3f:
                    5f:41:e4:1b:36:93:b9:f0:fb:7f:83:44:f7:5f:19:
                    84:cf:b6:bb:3e:97:ae:8b:be:35:5f:91:9a:5e:89:
                    48:90:77:d8:94:04:ca:bc:e7:3c:bf:68:41:0a:52:
                    90:71:76:66:65:93:91:af:45:88:c0:2f:0e:01:dc:
                    b2:f2:22:8b:5c:1e:0c:26:fc:04:fe:bd:65:96:69:
                    6a:70:0e:b3:33:00:4e:82:48:a3:aa:f9:fd:9b:6c:
                    83:c7:3c:ff:d8:bc:96:ab:c8:df:73:46:08:47:e3:
                    1b:04:ac:01:74:f5:0a:d5:f6:6e:f5:b3:8e:26:fb:
                    36:f1:c0:ca:3c:2a:a2:f3:8f:63:d9:3a:68:b4:0d:
                    7b:27:fe:fc:fb:65:20:30:de:02:25:d7:2d:23:44:
                    0b:68:7b:2e:d2:03:25:d5:95:18:db:e4:fd:b3:d6:
                    53:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E5:9F:7C:BE:46:92:B7:23:9C:58:3E:61:3A:0E:DC:61:72:85:B9
            X509v3 Authority Key Identifier:
                keyid:C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:4a:62:56:f5:ab:27:48:6e:53:8f:43:04:19:52:ed:77:8f:
         ed:9a:b0:55:03:26:24:b6:81:ea:df:0c:ca:75:e1:3e:35:8c:
         47:05:7d:4c:70:f3:7f:d4:6c:8c:fa:30:06:fe:da:84:b4:fd:
         5b:05:1c:b8:71:9d:ef:be:88:8c:f4:53:bd:ed:32:6e:a1:00:
         38:ee:9a:d2:a9:2c:63:fd:ac:aa:86:1f:d0:39:41:e2:32:eb:
         ee:ab:de:11:7c:87:ef:0f:54:dd:98:02:6e:26:6f:ea:8b:55:
         5c:3e:28:4a:7a:2c:e7:88:5b:fa:a7:3c:9f:51:91:4f:f5:40:
         ae:9f:91:94:f2:00:a1:1e:16:8d:7e:82:9b:6f:d1:cc:7c:d0:
         44:0b:66:f1:25:92:5c:c0:f3:23:0d:38:5d:ab:af:c9:d0:2f:
         50:8a:c6:8b:30:9f:b0:94:93:da:e4:dc:e4:29:23:dd:79:67:
         bf:b4:03:3f:8c:78:50:c5:2c:ef:1a:e5:89:50:f0:0c:59:50:
         53:37:65:ea:2b:79:55:70:b9:c7:a6:6f:47:25:64:42:9f:03:
         35:50:86:2f:6b:52:fc:18:b0:fe:66:6e:f9:8f:12:b7:cb:52:
         c2:97:8c:11:5d:84:e8:ca:2e:e2:11:00:57:a4:fe:66:df:96:
         46:29:01:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:15:41 2026 by rpki-client