Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft
File:                     gVeAUy7Smj-A57pBTvyzednsl8k.mft (raw, json)
Hash identifier:          PSoDgBVL0zBUr3B9GpfVPMspzecWureS1XlF5+E6X24=
Subject key identifier:   F7:0D:7C:D0:12:3B:1B:D6:AC:AF:14:DF:67:47:A1:D0:46:AD:39:1A
Authority key identifier: 81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9
Certificate issuer:       /CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
Certificate serial:       019D265FDB8E47448D448FAFD4DAD928FB65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft
Manifest number:          0B43
Signing time:             Wed 25 Mar 2026 19:01:49 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:49 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:49 +0000
Files and hashes:         1: 167q1DVVPrTdRYPkfcZCi239sJI.roa (hash: iphiS6YGG+NOQC8zeFXWVmhAQBLx2sZq4Y6HLVXVZOE=)
                          2: S9G5psiJeIcbArfBTp1QLAQdHYg.roa (hash: Zc2Nnr9uGhkOJwiMMBzf+F7Jqn4jLoEjO1hmaVvwrus=)
                          3: UrAwf58fhahFUOSzWtBJdSxqbEY.roa (hash: i0STbq1FvyERG4BX0Y5U86QJxom1+453IaNfNJ6A64s=)
                          4: d9jQ0MXnPvYgpDXafRNOfTdiez0.roa (hash: NVVF5QPKokAaAxOOfP2zdbiF9jm9CYGboJv9rbq85QI=)
                          5: gVeAUy7Smj-A57pBTvyzednsl8k.crl (hash: 1D06a4HPJw4zcH+4uuLB8unXrMzDfro4Qxlde1ZC1jQ=)
                          6: hnX3GEWSMirkXg0F3Fz0pWka2cc.roa (hash: WY0W829d26Ieh54IESsnjlETa41xER8gZPgemFOcDZk=)
                          7: mHsA_rVsySauclXQKxspDTECljE.roa (hash: flPV0bAd69ESTw3Hk72QzoQVnq7R0pY25e/DdE1uZIQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:db:8e:47:44:8d:44:8f:af:d4:da:d9:28:fb:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
        Validity
            Not Before: Mar 25 19:01:49 2026 GMT
            Not After : Mar 26 19:01:49 2026 GMT
        Subject: CN=f70d7cd0123b1bd6acaf14df6747a1d046ad391a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:67:45:81:79:b4:d1:b6:54:a3:3a:24:6b:14:
                    44:de:38:48:ea:52:75:0d:6e:d8:69:21:1f:64:7f:
                    b6:ec:c7:0c:7b:02:53:94:36:88:ab:b8:a3:c4:21:
                    ea:a9:76:4d:01:03:38:58:75:45:b6:4b:38:6f:ff:
                    35:b1:0b:4d:61:06:ca:28:db:91:25:5e:30:a5:be:
                    bd:47:39:ef:47:e2:82:74:a2:d5:66:96:9c:d4:bd:
                    01:e8:66:1b:61:9b:6d:cd:37:41:09:e6:7c:9a:e2:
                    a5:01:5f:73:98:26:bd:d6:c0:98:9b:91:26:18:4d:
                    a4:e8:d8:6a:ba:bf:2e:fd:c8:30:81:69:99:22:4d:
                    a1:23:bb:ab:2d:78:15:4a:0a:8f:e4:fd:80:94:93:
                    f7:a8:83:c2:42:ef:6e:91:df:b0:55:ff:d3:b9:a2:
                    f2:5d:ac:c8:e8:25:5d:13:10:ea:3f:f7:34:20:2b:
                    c7:a8:d1:77:44:fd:91:b0:eb:31:81:54:59:8e:74:
                    19:f9:c7:72:8b:0d:c5:ff:d0:b9:7f:ad:29:0e:21:
                    98:ce:0b:32:eb:a0:15:23:5b:49:79:6c:d5:97:3e:
                    f8:af:6d:71:9e:90:a9:8f:dd:6c:1d:f9:09:5d:11:
                    f0:02:5c:2b:13:bd:a9:e2:3d:ee:bb:73:ae:12:3a:
                    4a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:0D:7C:D0:12:3B:1B:D6:AC:AF:14:DF:67:47:A1:D0:46:AD:39:1A
            X509v3 Authority Key Identifier:
                keyid:81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:14:f4:da:99:ba:fe:28:39:b4:4d:cd:27:c7:59:2d:68:06:
         af:f9:48:d6:d0:c8:7b:5d:09:3e:7b:e3:fc:17:3a:f3:51:7e:
         9d:f9:7f:58:20:e0:ff:81:e0:c1:31:ca:b3:69:27:9a:83:c5:
         95:0c:1e:40:61:f5:ab:b6:ff:82:0f:21:0f:ac:25:2a:f8:49:
         e8:88:12:01:5e:6f:72:df:ae:44:fa:a9:5b:bb:5f:b2:75:44:
         b5:c8:24:dc:40:1e:0d:09:bb:4f:20:7e:e2:71:dd:fa:7e:e5:
         bc:0b:2e:cb:5d:52:af:b2:b1:32:9c:4f:ee:57:91:c1:22:49:
         49:e7:b2:92:87:0c:b7:29:0c:5c:a4:26:83:b1:9b:9e:57:13:
         c3:c2:d6:f9:d9:e4:91:67:73:82:4e:73:59:76:af:68:53:ad:
         5d:75:28:85:d2:c2:d3:22:61:44:68:cf:7b:b9:d0:8f:9c:c0:
         c6:f3:37:50:b5:de:81:c3:63:05:74:72:82:c9:ce:60:2c:43:
         d5:ff:f5:bd:ff:92:54:a1:9f:08:b0:92:83:e5:44:71:50:56:
         c9:a6:63:a8:65:f7:05:10:55:50:50:e7:64:9a:c9:fe:06:ba:
         db:e5:32:ae:1f:e5:b8:6f:99:38:34:9b:b4:1e:48:1a:e0:c4:
         6d:36:82:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX9uOR0SNRI+v1NrZKPtlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNTc4MDUzMmVkMjlhM2Y4MGU3YmE0MTRlZmNiMzc5ZDll
Yzk3YzkwHhcNMjYwMzI1MTkwMTQ5WhcNMjYwMzI2MTkwMTQ5WjAzMTEwLwYDVQQD
EyhmNzBkN2NkMDEyM2IxYmQ2YWNhZjE0ZGY2NzQ3YTFkMDQ2YWQzOTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32dFgXm00bZUozokaxRE3jhI6lJ1
DW7YaSEfZH+27McMewJTlDaIq7ijxCHqqXZNAQM4WHVFtks4b/81sQtNYQbKKNuR
JV4wpb69RznvR+KCdKLVZpac1L0B6GYbYZttzTdBCeZ8muKlAV9zmCa91sCYm5Em
GE2k6Nhqur8u/cgwgWmZIk2hI7urLXgVSgqP5P2AlJP3qIPCQu9ukd+wVf/TuaLy
XazI6CVdExDqP/c0ICvHqNF3RP2RsOsxgVRZjnQZ+cdyiw3F/9C5f60pDiGYzgsy
66AVI1tJeWzVlz74r21xnpCpj91sHfkJXRHwAlwrE72p4j3uu3OuEjpKqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPcNfNASOxvWrK8U32dHodBGrTkaMB8GA1UdIwQY
MBaAFIFXgFMu0po/gOe6QU78s3nZ7JfJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1ZlQVV5N1Ntai1BNTdwQlR2eXplZG5zbDhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9kZTMxYTYtYWFhMy00MDlkLThkNGYt
ZjYxNTU0YzZjMTQ1LzEvZ1ZlQVV5N1Ntai1BNTdwQlR2eXplZG5zbDhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9kZTMxYTYtYWFhMy00MDlkLThkNGYtZjYxNTU0YzZjMTQ1
LzEvZ1ZlQVV5N1Ntai1BNTdwQlR2eXplZG5zbDhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbhT02pm6
/ig5tE3NJ8dZLWgGr/lI1tDIe10JPnvj/Bc681F+nfl/WCDg/4HgwTHKs2knmoPF
lQweQGH1q7b/gg8hD6wlKvhJ6IgSAV5vct+uRPqpW7tfsnVEtcgk3EAeDQm7TyB+
4nHd+n7lvAsuy11Sr7KxMpxP7leRwSJJSeeykocMtykMXKQmg7GbnlcTw8LW+dnk
kWdzgk5zWXavaFOtXXUohdLC0yJhRGjPe7nQj5zAxvM3ULXegcNjBXRygsnOYCxD
1f/1vf+SVKGfCLCSg+VEcVBWyaZjqGX3BRBVUFDnZJrJ/ga62+Uyrh/luG+ZODSb
tB5IGuDEbTaC+Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:35 2026 by rpki-client