Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft
File:                     C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft (raw, json)
Hash identifier:          ymJpDoC2Lu0YnNxgqeUqjZNc9ab88YmBVFtnbHqIWsw=
Subject key identifier:   E5:49:77:A7:5E:D9:41:7E:21:2F:B2:47:26:1C:48:75:06:B9:61:BA
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Certificate issuer:       /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial:       019D29972189383A87D65E9C2F5AAC95E447
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft
Manifest number:          1537
Signing time:             Thu 26 Mar 2026 10:01:03 +0000
Manifest this update:     Thu 26 Mar 2026 10:01:03 +0000
Manifest next update:     Fri 27 Mar 2026 10:01:03 +0000
Files and hashes:         1: 1M_KfK7WN2a9S2sM4HPxRdgNk3Q.roa (hash: FXLWu7cTao5t5N2dNabz3TuA4IoXpfS81L/ChF9Q08w=)
                          2: 3v4aI3hIcklmgeZ_UAwLSRXNdMQ.roa (hash: IpPkFkZsNYzLAK3kRG6z1JeeccdjVJAcpoXlT9FO7rs=)
                          3: 6hfKommEGXOxbZsoMmyZp1Jipf0.roa (hash: PBG49W+jrBQkGXpn4QJjssvWvrDP7tqPFzk/gI0/fXg=)
                          4: 6iU5q2O8knwO6rsCxrpEDYfQfwc.roa (hash: wn70AHhkmwh/HEbVbZLkEYQ5m0ssl6kZ6p4p/pcbYdw=)
                          5: 9ClNIRUhBNtx6NUYh8zm6GwII1c.roa (hash: vGZ8wnFhqRVJP+elmOStrLyKU7bRjBC5vLXKAyxYAyo=)
                          6: C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl (hash: C1j7ZSSzgLkpYytBdBQPdkxXID/0XnFuie/KgK+ikmQ=)
                          7: CwEJEkChVeT5ByriMeWvHMii5Kc.roa (hash: +buHsgpQk2jvmt0OGhHOlWMDX6OUOHB42I6FSxQelZE=)
                          8: DLvFNukbRAhZM4TuFhov4WWOGb0.roa (hash: Sq2gts+S55hxx/TOW9y2dVTRNKFXvpr4cfM5oauwoaM=)
                          9: EU0dIexXpepLqV4coUUAIRVb-H8.roa (hash: Sb2wLX/RqNGdGCSytUaEJdgIu7Q+7vz9Pa8hlXYY0rU=)
                          10: FSSW1ZODYaGOgTHhq7srADJ7wNo.roa (hash: t1sAD3HTmL1FNe10X/d6I8aLemzTkwpNiXZMluJaeak=)
                          11: Fq-R29bbT_OFMbzC4S4L4IdB-is.roa (hash: JzQ34FqB0/yZtRfeREt9DodHo2xR3cGWACcIkZal6yg=)
                          12: LMCAcXdS2XUrnwUK8y3aA_YgYVI.roa (hash: Zx7X9nBZcYpyZkk9a1fb6zgF5sti3hLdBb/GhQbu+WI=)
                          13: POkwjuuBGCe0F21ORjR2-VQPpzM.roa (hash: 2Yn0ZCvtpiHPj7sihF4ez4hggi+qgq8ycEgz8zN0BIM=)
                          14: WVYa2teNXynmvJvnFVohphSasGE.roa (hash: orfB14/U2twh+Xy8e+efxXCsqq9c3OWe/VkDs9EtPWg=)
                          15: ZJn7G6eupzsYI6Qb_3PZRyUP64A.roa (hash: MBZe37MzhPFgcFvelUunWWfavB0OARuzaKp7z8aRi3s=)
                          16: Zema6N-_yb1spowlt5JHLTMroU4.roa (hash: qF9Cqwb/phFXGyfXmecnj5M4wNF9UM4/U7GSyXzWvos=)
                          17: ala-3w7jXBx1Y6f2e_qq-HBChTo.roa (hash: JIf9VJc6GvAkZ5p/ya8p2yQh9PHmYhCztgviL6iUJrc=)
                          18: dSEucPba5jbG_hBap1JYIaV4Psk.roa (hash: RBIyIZiDbpY1D9V0ivY3QmCifvd4xUi/eYRwLwz+HUI=)
                          19: djDUS_Dp1clYmZIjyKII50PHWfk.roa (hash: vJJCn0Gst4uVO2l5ZPOKkOm7N8sHDzQxxWFRYaz0dr8=)
                          20: eE8w7Gi2e_s5rLXawSVZCcaRlvk.roa (hash: g0rKhAIGDEgpNj647haSdnpBK13OSalrt6qPIIz9V48=)
                          21: hBwQvgPhGJzR_22ttNwtHhdx7UE.roa (hash: BA8aCpTJ5opcE6AfKmkjJWSoOHA/DSBCKSoiBPNDf6k=)
                          22: jp70RKj-l4e-FsAEnfnaN0KnsKo.roa (hash: Wc9n68tUKd4lrFnJAtiaeP7RW1dgjzh0zCTtcCNTJto=)
                          23: oBQjnG6Zj6o_8VxMtUsGatV5hV4.roa (hash: 7dA7xujM9AdU+gFa8obBWyqzT2p9RQ/v2ZO8GDKs3tU=)
                          24: q1151A7ZuAx0qneCNekGqLx9ELE.roa (hash: YKssHAfZubc3YBN3FcLm56XfU+N+9TioOhwID/3M6TM=)
                          25: wfQmPdI-vmy_WQj32p1pdNv8LjM.roa (hash: Wlbgs7E1UKGfQEo0Wy61nxhp0A6dAzQWLbqDaTK1Nbc=)
                          26: wqMSf4TrRzX1v1lLyVp0rCqMWLY.roa (hash: 1E+Xv8wtnswf3OgqernoluNz5hyvaYNmHhkW4xlZGIc=)
                          27: z0A9SiYDfgi894bbsnwqjIIKm_E.roa (hash: 0kWVTAgMN8/IObLAgrvtPloL9CuNOeQsdQJfTEF/3/U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:97:21:89:38:3a:87:d6:5e:9c:2f:5a:ac:95:e4:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
        Validity
            Not Before: Mar 26 10:01:03 2026 GMT
            Not After : Mar 27 10:01:03 2026 GMT
        Subject: CN=e54977a75ed9417e212fb247261c487506b961ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:44:84:a8:df:c2:fe:66:9b:d9:26:a5:1f:07:
                    51:fe:1f:97:63:33:a5:e8:88:04:7f:60:da:bc:cb:
                    f6:6a:c2:ad:f6:31:2a:35:e1:42:f6:68:40:c7:6d:
                    02:a7:8c:f9:a3:47:1e:3a:ca:7b:2d:13:5d:d0:bd:
                    c4:76:92:70:3a:78:ad:56:49:f0:83:90:12:71:d7:
                    2b:f4:0e:c6:ee:30:53:25:e4:af:7f:72:2a:7f:bc:
                    b0:8a:d5:27:76:bc:e5:50:8c:2b:82:5c:30:0f:59:
                    6c:f8:df:fc:1c:c9:60:0a:7a:b3:bf:1a:96:58:7c:
                    5b:f1:3f:50:74:48:02:9a:b6:98:41:ff:44:8a:58:
                    08:63:82:7f:76:af:00:c0:bf:f5:5f:02:6c:cf:a7:
                    15:76:0b:bb:7c:d0:8c:95:7b:12:70:9c:16:90:e3:
                    c5:f7:78:a3:61:97:90:e3:de:cf:4e:a5:cf:5b:17:
                    13:06:28:84:a9:47:7c:82:96:67:b4:45:6e:f6:7a:
                    7b:ff:91:d9:49:07:99:50:d9:2e:6e:94:a9:e8:c7:
                    94:d9:70:c8:83:05:a8:c8:5b:88:02:03:0c:34:f7:
                    0d:19:05:08:90:b5:16:bb:4f:d1:e2:f2:5a:c4:30:
                    ac:56:69:27:3b:00:35:fb:8c:f6:8e:e9:7b:d8:17:
                    56:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:49:77:A7:5E:D9:41:7E:21:2F:B2:47:26:1C:48:75:06:B9:61:BA
            X509v3 Authority Key Identifier:
                keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:8a:88:a4:96:5a:8a:e2:2f:a1:d5:57:33:7f:f0:2b:3f:15:
         bb:d0:1a:54:38:45:3e:3b:3c:a4:93:e2:0c:6e:a0:ac:ac:3f:
         b0:cd:43:a7:cf:62:4a:b4:66:f0:c1:3a:ff:7e:9b:96:b7:9f:
         ca:2a:e3:17:c2:43:17:33:c8:c3:69:16:21:93:dc:a1:3d:35:
         ea:0c:5d:cf:8a:4f:34:30:e3:82:9c:ee:1f:2c:32:c0:5c:53:
         fa:54:78:6a:83:51:cf:0b:02:48:16:00:83:87:21:39:9a:62:
         d6:6e:9a:71:56:f4:87:a2:30:89:b7:99:d9:00:b5:69:38:27:
         ef:54:e8:62:42:a8:13:8d:8b:f4:8e:87:78:ab:c6:28:fb:59:
         e1:ec:bd:1e:a7:25:d2:62:6c:eb:15:fa:6b:37:7b:fa:09:21:
         73:d5:e2:47:52:7c:7c:9e:bc:6c:27:a2:4a:a7:44:c1:5f:db:
         02:7d:d4:50:37:03:5e:d8:44:d5:9b:50:6c:7a:9d:5b:50:c3:
         c0:6d:c2:f9:34:92:f8:6f:6d:2b:91:55:f2:cb:ef:6f:7e:8c:
         05:f6:14:86:c3:84:1a:a2:e4:a2:58:99:94:13:72:79:b3:c1:
         0a:6b:6e:3d:b7:44:65:f1:42:92:d1:fc:bc:14:19:ec:fc:8d:
         15:35:3b:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0plyGJODqH1l6cL1qsleRHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZjU0M2UyM2UyOWZiMDM3NDhkMDkzOTcyNmYzMGZlOWFm
ZmExOWUwHhcNMjYwMzI2MTAwMTAzWhcNMjYwMzI3MTAwMTAzWjAzMTEwLwYDVQQD
EyhlNTQ5NzdhNzVlZDk0MTdlMjEyZmIyNDcyNjFjNDg3NTA2Yjk2MWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA80SEqN/C/mab2SalHwdR/h+XYzOl
6IgEf2DavMv2asKt9jEqNeFC9mhAx20Cp4z5o0ceOsp7LRNd0L3EdpJwOnitVknw
g5AScdcr9A7G7jBTJeSvf3Iqf7ywitUndrzlUIwrglwwD1ls+N/8HMlgCnqzvxqW
WHxb8T9QdEgCmraYQf9EilgIY4J/dq8AwL/1XwJsz6cVdgu7fNCMlXsScJwWkOPF
93ijYZeQ497PTqXPWxcTBiiEqUd8gpZntEVu9np7/5HZSQeZUNkubpSp6MeU2XDI
gwWoyFuIAgMMNPcNGQUIkLUWu0/R4vJaxDCsVmknOwA1+4z2jul72BdWUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOVJd6de2UF+IS+yRyYcSHUGuWG6MB8GA1UdIwQY
MBaAFAv1Q+I+KfsDdI0JOXJvMP6a/6GeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ19WRDRqNHAtd04walFrNWNtOHdfcHJfb1o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9hZmEzNGMtZjNmMC00MDVjLWIwODMt
YTM1ZmM0MzhkNGNhLzEvQ19WRDRqNHAtd04walFrNWNtOHdfcHJfb1o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9hZmEzNGMtZjNmMC00MDVjLWIwODMtYTM1ZmM0MzhkNGNh
LzEvQ19WRDRqNHAtd04walFrNWNtOHdfcHJfb1o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg4qIpJZa
iuIvodVXM3/wKz8Vu9AaVDhFPjs8pJPiDG6grKw/sM1Dp89iSrRm8ME6/36blref
yirjF8JDFzPIw2kWIZPcoT016gxdz4pPNDDjgpzuHywywFxT+lR4aoNRzwsCSBYA
g4chOZpi1m6acVb0h6IwibeZ2QC1aTgn71ToYkKoE42L9I6HeKvGKPtZ4ey9Hqcl
0mJs6xX6azd7+gkhc9XiR1J8fJ68bCeiSqdEwV/bAn3UUDcDXthE1ZtQbHqdW1DD
wG3C+TSS+G9tK5FV8svvb36MBfYUhsOEGqLkoliZlBNyebPBCmtuPbdEZfFCktH8
vBQZ7PyNFTU7Mg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:18:50 2026 by rpki-client