Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
File:                     AF_5zInGaoo6XXNKDWXGH9yFGL4.mft (raw, json)
Hash identifier:          HLIxvK+iYJWYc/8VqN/C78zplvIkM2xISNsbRPpSl1M=
Subject key identifier:   1C:80:F9:43:4E:2A:8B:C3:F5:3E:02:28:68:4A:30:E5:DB:80:86:B1
Authority key identifier: 00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE
Certificate issuer:       /CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
Certificate serial:       019CE3D9FA84FFA215495CA36D0EFFABFF77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
Manifest number:          1867
Signing time:             Thu 12 Mar 2026 21:00:39 +0000
Manifest this update:     Thu 12 Mar 2026 21:00:39 +0000
Manifest next update:     Fri 13 Mar 2026 21:00:39 +0000
Files and hashes:         1: AF_5zInGaoo6XXNKDWXGH9yFGL4.crl (hash: x6fddx7447/nOwYZ+eGwQ6+NTxr7AGeL3/szEvN/uII=)
                          2: KbY29WtKZkz8Fbjj7QvLlg811Iw.roa (hash: vGh5FY7zuISKMd7QAir+eppKFgiFx2llO5uFQh7FV0A=)
                          3: Yczj7zwVDs2cX_wNQ-ssqLpurf0.roa (hash: lpodXqk6t7MJFjfZg1Uow8LLK/4R3ylcdMkmlTgRneo=)
                          4: hkJYoKxZ5NaqYkSY0GG7dfC0J6M.roa (hash: M6l2Qx3MyNr2ADezdHbYqYOeyWWrHzzKzTBcWubDLyY=)
                          5: iN3PbeV3-UffGNWyXfh7JHJfK74.roa (hash: JtoeR6EU9pVtvyEClltI2vcG5Q/h7OJRN/rUzf7IfP8=)
                          6: qydppjeYfUzDVxdV73Ghn9vaAYk.roa (hash: F/o5ke8f18yC9oKEjHkU0hNCPxAS0/yMbN5QTK0st0g=)
                          7: sH1teYqG2FqEXd7RfMCaBcOnmaw.roa (hash: suxWcXpZV2IMJ73fGzjwM37LJ58quwhaki1YE7N0sRY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 15:04:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e3:d9:fa:84:ff:a2:15:49:5c:a3:6d:0e:ff:ab:ff:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
        Validity
            Not Before: Mar 12 21:00:39 2026 GMT
            Not After : Mar 13 21:00:39 2026 GMT
        Subject: CN=1c80f9434e2a8bc3f53e0228684a30e5db8086b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:37:e4:1f:be:30:6b:94:45:3e:0d:af:d5:0a:
                    9b:96:ce:a5:50:fd:dd:cb:ef:75:48:eb:0f:52:b4:
                    68:6e:7f:d1:86:e7:d6:7f:23:ae:10:7a:00:1b:cd:
                    ce:00:84:51:45:82:f3:06:62:ec:4c:ac:d0:bc:4d:
                    c3:65:d2:d9:a4:60:81:24:aa:3c:d4:7b:0e:fd:40:
                    29:3d:6e:06:f2:3f:a7:d2:55:05:16:06:19:97:46:
                    f1:e1:8d:ce:3d:71:b3:36:0b:7a:37:b9:41:76:c3:
                    4f:e5:e5:d6:c1:97:83:a4:ae:4c:1a:8e:89:20:1b:
                    d2:a1:7f:59:b3:95:11:0b:5d:94:95:e7:68:94:e5:
                    4a:f5:a7:5c:fc:f4:21:ee:44:5d:63:9b:6d:8e:db:
                    51:87:25:39:3b:d1:50:91:9c:e9:81:7c:87:5c:61:
                    ab:e5:94:c1:a1:1d:77:e8:a3:2c:80:c9:c6:b4:74:
                    3c:b7:af:59:60:7e:d8:7e:04:2b:bc:a8:b6:9f:ac:
                    15:f3:65:db:a0:0e:1b:0b:06:55:5b:fe:a3:ac:45:
                    0c:47:c0:06:42:4d:d2:5e:77:ea:e1:b3:68:fc:b0:
                    7a:7b:9d:f7:16:f6:db:45:36:ff:5b:f8:90:a1:4b:
                    de:8d:f2:88:8a:e4:b8:30:c6:f5:03:73:48:6f:5f:
                    2f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:80:F9:43:4E:2A:8B:C3:F5:3E:02:28:68:4A:30:E5:DB:80:86:B1
            X509v3 Authority Key Identifier:
                keyid:00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:7d:30:c9:44:00:db:ca:a1:9a:2b:89:98:f4:aa:96:39:57:
         e2:45:ba:7d:3b:a1:c5:10:31:bc:61:94:c1:28:dc:67:5b:25:
         d4:d6:40:53:ca:ce:a7:8b:10:86:b2:28:05:da:a3:34:f7:96:
         29:3a:02:17:84:3f:40:a7:94:ec:a8:fe:a9:a6:70:4a:18:88:
         6e:c0:97:ea:0a:cd:ab:c5:45:1e:92:bd:76:55:52:ff:51:dc:
         63:4d:52:e1:21:37:ea:d8:00:a6:29:6c:33:25:fc:3a:79:55:
         72:30:7e:a0:93:93:c6:a4:81:39:d2:2a:cf:fc:85:b3:69:8c:
         1a:72:62:41:4a:25:d7:19:97:13:15:2f:00:29:b4:6d:42:3d:
         d7:b5:b0:6e:47:f2:aa:22:27:8b:93:6a:10:4d:51:88:0b:10:
         97:1a:a5:cb:f0:13:d5:f0:cc:53:eb:87:ec:fc:31:62:ef:bc:
         ab:85:41:78:8a:da:d5:50:c9:24:16:46:b9:68:54:83:40:ca:
         7f:84:64:58:a6:7b:dc:9e:58:a2:82:2f:c6:d4:c3:ed:e1:7c:
         ab:10:0d:d1:6a:40:1b:d0:98:c2:82:a2:78:39:dc:f4:34:61:
         de:aa:d0:66:c9:c6:d3:26:3e:bb:ce:2a:7b:31:d2:35:30:68:
         64:e9:c4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 01:28:27 2026 by rpki-client