Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.mft
File:                     SVls7MId0CZ3pyfvN_BolUbqUJc.mft (raw, json)
Hash identifier:          /LMb/4MTF5pPcNzbgQsXYHnN5BZPUOhZyTrz3ec9Ufs=
Subject key identifier:   4C:01:92:AD:2E:83:47:51:3B:44:0E:4C:4C:0E:2B:32:E1:42:FB:93
Authority key identifier: 49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97
Certificate issuer:       /CN=49596cecc21dd02677a727ef37f0689546ea5097
Certificate serial:       019D265FB6A5B674163D629B6EE52C53D529
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.mft
Manifest number:          1893
Signing time:             Wed 25 Mar 2026 19:01:39 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:39 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:39 +0000
Files and hashes:         1: 0OHFR3u6ZXPU60e_Kpdpjm7xdtw.roa (hash: W4HSwATsQSpsxelPBRvCUZgXsPPIeFu2oVqzLSkQvRE=)
                          2: 0quk8yFCaAT37LSj27nfsEsyYa0.roa (hash: kjVH3PIcolbOXzfDdgURWGa/iVxgGSimg2ymBQo9Q1Y=)
                          3: SVls7MId0CZ3pyfvN_BolUbqUJc.crl (hash: 1uun0SVigPm/aEOmn4J7vGaD3pEpKIlsvbqxVsR2ETs=)
                          4: U7NLBjLIe7mftXvsPSwZXkAwwaE.roa (hash: 8sR7xzbSE5cXBiqX03gC/TGFCoIN2L88Z57q6SjbtWI=)
                          5: bGtNDdBH_WkcMa64RzZFy-PBle4.roa (hash: +I92es3myn53IJMXcAqqH0HCkUDgn2kr7/aOubFMtUY=)
                          6: oFUqqzfpz-z60arP7-4bJOUjzkg.roa (hash: b00DPHttrwifcINliBXvR0GCUX5oyGcXZZvJ8ECcEDE=)
                          7: quNtYWBjqvvDoKYNR4UlZqtF5-s.roa (hash: MxAuaNeYKwApf/bmNvm0Do0ftTLNbZaWSwjnaNo2/4M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:b6:a5:b6:74:16:3d:62:9b:6e:e5:2c:53:d5:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49596cecc21dd02677a727ef37f0689546ea5097
        Validity
            Not Before: Mar 25 19:01:39 2026 GMT
            Not After : Mar 26 19:01:39 2026 GMT
        Subject: CN=4c0192ad2e8347513b440e4c4c0e2b32e142fb93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:51:20:7f:71:4f:fb:13:c6:43:43:3d:28:e8:
                    04:61:e3:ba:c3:4d:82:6e:dc:36:33:a3:1a:0c:3c:
                    4b:c5:80:e9:6e:45:52:c2:ae:2c:e2:10:d4:96:e6:
                    4f:13:a5:1d:3b:0c:a7:cb:30:86:68:a9:52:ce:4c:
                    2e:ae:c6:96:f0:bb:d2:da:f4:cf:a2:5b:09:38:60:
                    7d:41:83:b7:44:ae:83:64:15:22:75:25:8f:74:c3:
                    8c:a5:0d:a9:58:a0:f4:da:52:2b:b9:64:cf:31:f0:
                    ec:45:bc:93:58:38:58:ef:65:9f:c2:51:17:03:32:
                    6a:da:3c:27:ed:58:af:58:2f:20:6a:50:8b:c5:38:
                    04:a0:98:a1:fc:b0:e5:64:19:20:f5:cb:21:e6:1a:
                    16:e6:f2:db:79:e1:00:fb:77:71:24:2b:88:f0:cc:
                    f2:d1:32:bc:d2:81:ec:65:4a:f3:f0:ae:ac:f6:f4:
                    41:f5:7c:d3:f7:2a:67:05:e7:ba:9d:db:a6:cd:f0:
                    70:87:e9:35:52:fc:e7:99:80:11:31:4a:14:e4:9f:
                    82:a1:03:c5:07:ef:c1:7e:95:e5:ab:60:03:c4:81:
                    cf:fd:e3:05:f8:7e:1b:35:f1:48:fc:f6:c5:19:8f:
                    16:f5:13:95:bc:ee:d3:06:40:3c:44:c0:c6:a3:0d:
                    dc:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:01:92:AD:2E:83:47:51:3B:44:0E:4C:4C:0E:2B:32:E1:42:FB:93
            X509v3 Authority Key Identifier:
                keyid:49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:2f:3e:7a:39:b3:9a:ac:1a:e3:1b:26:22:b7:c4:dc:aa:a7:
         82:da:74:86:e0:2f:0b:75:fb:1e:dc:7a:11:df:82:bd:d8:29:
         71:d6:d1:10:4b:4b:96:a7:f9:c3:0c:29:04:e1:74:d1:e1:c2:
         c1:54:b8:82:12:0c:03:3d:1a:49:03:a8:9d:c3:aa:38:70:36:
         3d:5b:66:56:1b:9b:5d:f0:0f:5e:cb:1c:30:5b:7c:30:0c:70:
         6f:14:17:3c:8b:01:b1:dd:5c:62:b5:73:cc:c0:31:27:ea:70:
         10:07:f6:99:00:81:93:9b:6d:29:60:27:70:cc:90:37:20:47:
         56:e2:dc:59:1f:ad:91:de:b2:61:3f:9f:ed:2d:5f:41:13:82:
         34:b2:42:71:59:05:96:82:3c:75:85:ed:23:8f:84:26:f9:f0:
         48:03:c4:20:e2:c3:4b:de:cd:95:f2:76:3f:39:74:98:d9:6c:
         e3:f7:10:a9:9d:54:52:1b:77:fa:0f:b5:d1:e6:53:d2:1e:ad:
         c2:8c:a2:83:07:46:cb:f0:87:63:2b:2d:19:01:57:00:26:f2:
         55:77:8e:f4:7c:8c:a3:28:a3:ff:10:12:a4:78:be:ba:5a:d5:
         1f:89:22:53:54:9a:d2:1d:e0:21:ba:11:61:69:07:ba:d6:13:
         31:c1:d6:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX7altnQWPWKbbuUsU9UpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NTk2Y2VjYzIxZGQwMjY3N2E3MjdlZjM3ZjA2ODk1NDZl
YTUwOTcwHhcNMjYwMzI1MTkwMTM5WhcNMjYwMzI2MTkwMTM5WjAzMTEwLwYDVQQD
Eyg0YzAxOTJhZDJlODM0NzUxM2I0NDBlNGM0YzBlMmIzMmUxNDJmYjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FEgf3FP+xPGQ0M9KOgEYeO6w02C
btw2M6MaDDxLxYDpbkVSwq4s4hDUluZPE6UdOwynyzCGaKlSzkwursaW8LvS2vTP
olsJOGB9QYO3RK6DZBUidSWPdMOMpQ2pWKD02lIruWTPMfDsRbyTWDhY72WfwlEX
AzJq2jwn7VivWC8galCLxTgEoJih/LDlZBkg9csh5hoW5vLbeeEA+3dxJCuI8Mzy
0TK80oHsZUrz8K6s9vRB9XzT9ypnBee6ndumzfBwh+k1UvznmYARMUoU5J+CoQPF
B+/BfpXlq2ADxIHP/eMF+H4bNfFI/PbFGY8W9ROVvO7TBkA8RMDGow3c3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEwBkq0ug0dRO0QOTEwOKzLhQvuTMB8GA1UdIwQY
MBaAFElZbOzCHdAmd6cn7zfwaJVG6lCXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1ZsczdNSWQwQ1ozcHlmdk5fQm9sVWJxVUpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lN2JkMDEtNDMyZi00YmY5LTgwYzUt
ODk3ZDAwOTc3ZmYyLzEvU1ZsczdNSWQwQ1ozcHlmdk5fQm9sVWJxVUpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9lN2JkMDEtNDMyZi00YmY5LTgwYzUtODk3ZDAwOTc3ZmYy
LzEvU1ZsczdNSWQwQ1ozcHlmdk5fQm9sVWJxVUpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARS8+ejmz
mqwa4xsmIrfE3Kqngtp0huAvC3X7Htx6Ed+CvdgpcdbREEtLlqf5wwwpBOF00eHC
wVS4ghIMAz0aSQOoncOqOHA2PVtmVhubXfAPXsscMFt8MAxwbxQXPIsBsd1cYrVz
zMAxJ+pwEAf2mQCBk5ttKWAncMyQNyBHVuLcWR+tkd6yYT+f7S1fQROCNLJCcVkF
loI8dYXtI4+EJvnwSAPEIOLDS97NlfJ2Pzl0mNls4/cQqZ1UUht3+g+10eZT0h6t
woyigwdGy/CHYystGQFXACbyVXeO9HyMoyij/xASpHi+ulrVH4kiU1Sa0h3gIboR
YWkHutYTMcHWmA==
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:11:40 2026 by rpki-client