Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft
File:                     Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft (raw, json)
Hash identifier:          t2mMIkW8DAM5mirIdeX7I0Rx8LnI8ht9A8NSAODzzlI=
Subject key identifier:   53:66:1A:75:C0:41:38:DC:78:64:3C:E1:C2:93:DB:3D:3C:C8:74:D7
Authority key identifier: 32:AD:80:D4:11:AC:B9:36:85:F5:58:AA:7E:12:F4:6B:D1:70:A7:FB
Certificate issuer:       /CN=32ad80d411acb93685f558aa7e12f46bd170a7fb
Certificate serial:       019D2BF324D946A6254E1AB79B4A86D5A78A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft
Manifest number:          1259
Signing time:             Thu 26 Mar 2026 21:00:48 +0000
Manifest this update:     Thu 26 Mar 2026 21:00:48 +0000
Manifest next update:     Fri 27 Mar 2026 21:00:48 +0000
Files and hashes:         1: H-zR6ky2pDadloAxkXUrEUDR0Lw.roa (hash: lG6oXiAUIS6xft8V5DugdkR0sps6sV68ctJDl4dFR2E=)
                          2: Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.crl (hash: 6MkQWnocVsxblZE9+iOtrajHt4BDF3voYMn3EtIK2Jw=)
                          3: cwRccrAENANpUtgyG-cs76t2uhQ.roa (hash: UiM4/U2KaMcgUdcESji12E4Ep2EXmuZnwMAQ53YQTaw=)
                          4: lLChUBZNxYsI76RgX__pDESB_OA.roa (hash: 5jzvmBS7qQYnrtTH7wbbIQMDBZ7lUHZfG/KhrPJAXYA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:f3:24:d9:46:a6:25:4e:1a:b7:9b:4a:86:d5:a7:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32ad80d411acb93685f558aa7e12f46bd170a7fb
        Validity
            Not Before: Mar 26 21:00:48 2026 GMT
            Not After : Mar 27 21:00:48 2026 GMT
        Subject: CN=53661a75c04138dc78643ce1c293db3d3cc874d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:96:df:74:90:98:85:21:1f:77:26:22:2a:82:
                    24:dc:35:7e:0b:69:be:e0:78:60:fe:6f:03:10:59:
                    86:24:97:18:5f:21:52:ae:c7:e4:4f:4b:64:cd:94:
                    0e:e4:df:8e:a3:04:ac:f3:51:cc:8e:a1:31:30:02:
                    45:d2:4c:50:c3:70:81:70:fc:34:82:86:9b:a4:ab:
                    e3:4e:b1:f1:ef:ce:ce:58:51:2b:12:25:3d:6b:ba:
                    57:08:34:36:25:5c:19:32:53:95:8c:7e:ac:b5:64:
                    0d:a4:94:03:23:b7:17:8a:a2:da:d5:a5:a7:08:db:
                    8e:41:51:48:1d:c9:e4:bf:a8:2d:1b:07:c8:42:d8:
                    d3:16:a2:95:79:c0:1e:ef:8e:a7:be:77:90:a2:c2:
                    cb:be:ea:67:d7:e3:a6:9f:f3:40:45:fa:6c:a4:3a:
                    6a:ba:77:07:84:82:49:5a:a5:69:74:15:34:26:74:
                    0b:41:bc:bb:df:4a:99:d8:c5:dd:e5:99:03:08:2f:
                    33:a0:41:17:0c:29:07:1c:c6:e5:6b:ea:3b:c9:e3:
                    d8:3e:e3:c7:cb:b7:3b:d0:c4:91:fc:ab:92:27:97:
                    28:17:c0:a0:7a:98:60:21:d1:52:16:57:9f:c6:ee:
                    0c:a1:c7:44:1b:23:96:d4:8e:32:48:f1:db:bf:60:
                    09:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:66:1A:75:C0:41:38:DC:78:64:3C:E1:C2:93:DB:3D:3C:C8:74:D7
            X509v3 Authority Key Identifier:
                keyid:32:AD:80:D4:11:AC:B9:36:85:F5:58:AA:7E:12:F4:6B:D1:70:A7:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:b6:a1:f7:a7:d7:b0:3b:e8:0a:40:51:20:a0:b1:87:75:77:
         59:27:31:75:41:59:67:4b:a2:87:5a:3f:0c:be:a2:94:a9:81:
         bc:d2:2c:f4:db:4f:0e:bb:8f:bb:b4:c6:cf:ab:00:f2:05:97:
         ad:f3:3a:aa:37:41:b8:c9:f0:d1:31:6c:37:3f:bd:a4:a1:a9:
         27:de:35:f1:5c:7f:15:6c:7b:c3:f6:17:77:e9:1f:f4:36:c9:
         c1:4d:f1:1a:88:2a:0e:70:30:ea:16:5c:1d:86:ba:98:7d:fc:
         9a:ef:f9:39:d4:54:19:a7:75:b3:57:34:8b:de:63:52:5e:c0:
         f5:38:db:41:89:57:93:e0:6d:1c:0d:b7:98:14:c8:2c:93:43:
         61:05:0f:0c:5f:b2:8d:66:77:2f:78:43:92:b6:5c:94:6d:66:
         20:43:12:d1:fe:8a:eb:c1:93:0a:ca:00:b1:35:c6:24:d4:4d:
         36:09:3e:51:e5:e3:4d:09:e6:33:7b:c6:87:d4:ee:22:12:db:
         ad:1b:29:63:b1:b4:d9:9f:6b:a9:29:7c:c0:94:2a:f2:bc:34:
         36:be:32:fe:df:1c:7e:73:86:d3:81:93:be:ab:b6:85:f6:bf:
         25:60:59:a1:b8:20:27:f7:98:32:32:dc:80:82:4d:98:21:5e:
         ab:9b:60:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0r8yTZRqYlThq3m0qG1aeKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyYWQ4MGQ0MTFhY2I5MzY4NWY1NThhYTdlMTJmNDZiZDE3
MGE3ZmIwHhcNMjYwMzI2MjEwMDQ4WhcNMjYwMzI3MjEwMDQ4WjAzMTEwLwYDVQQD
Eyg1MzY2MWE3NWMwNDEzOGRjNzg2NDNjZTFjMjkzZGIzZDNjYzg3NGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pbfdJCYhSEfdyYiKoIk3DV+C2m+
4Hhg/m8DEFmGJJcYXyFSrsfkT0tkzZQO5N+OowSs81HMjqExMAJF0kxQw3CBcPw0
goabpKvjTrHx787OWFErEiU9a7pXCDQ2JVwZMlOVjH6stWQNpJQDI7cXiqLa1aWn
CNuOQVFIHcnkv6gtGwfIQtjTFqKVecAe746nvneQosLLvupn1+Omn/NARfpspDpq
uncHhIJJWqVpdBU0JnQLQby730qZ2MXd5ZkDCC8zoEEXDCkHHMbla+o7yePYPuPH
y7c70MSR/KuSJ5coF8CgephgIdFSFlefxu4MocdEGyOW1I4ySPHbv2AJzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNmGnXAQTjceGQ84cKT2z08yHTXMB8GA1UdIwQY
MBaAFDKtgNQRrLk2hfVYqn4S9GvRcKf7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXEyQTFCR3N1VGFGOVZpcWZoTDBhOUZ3cF9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS85YzI1MDgtZjY5Yi00NDRiLWI4NjAt
ZGMwZTgxYTlkN2I0LzEvTXEyQTFCR3N1VGFGOVZpcWZoTDBhOUZ3cF9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS85YzI1MDgtZjY5Yi00NDRiLWI4NjAtZGMwZTgxYTlkN2I0
LzEvTXEyQTFCR3N1VGFGOVZpcWZoTDBhOUZ3cF9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM7ah96fX
sDvoCkBRIKCxh3V3WScxdUFZZ0uih1o/DL6ilKmBvNIs9NtPDruPu7TGz6sA8gWX
rfM6qjdBuMnw0TFsNz+9pKGpJ9418Vx/FWx7w/YXd+kf9DbJwU3xGogqDnAw6hZc
HYa6mH38mu/5OdRUGad1s1c0i95jUl7A9TjbQYlXk+BtHA23mBTILJNDYQUPDF+y
jWZ3L3hDkrZclG1mIEMS0f6K68GTCsoAsTXGJNRNNgk+UeXjTQnmM3vGh9TuIhLb
rRspY7G02Z9rqSl8wJQq8rw0Nr4y/t8cfnOG04GTvqu2hfa/JWBZobggJ/eYMjLc
gIJNmCFeq5tg3w==
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:01:55 2026 by rpki-client