Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
File:                     m_8VJ49T93YcLz0z3ZvneopPvZQ.mft (raw, json)
Hash identifier:          mqXyp5Dp1dMV8XEnvCj6QBUW1kqEu3ZMJ93WaMjM5ZI=
Subject key identifier:   A7:8E:84:63:9D:0C:06:10:1F:4E:FB:F5:17:EF:E7:C4:9F:96:07:08
Authority key identifier: 9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94
Certificate issuer:       /CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
Certificate serial:       019D2884C016740C5BB6128CEF42DADDF2E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
Manifest number:          11C8
Signing time:             Thu 26 Mar 2026 05:01:21 +0000
Manifest this update:     Thu 26 Mar 2026 05:01:21 +0000
Manifest next update:     Fri 27 Mar 2026 05:01:21 +0000
Files and hashes:         1: 1-g6OpGedOnxN63cJ1EmDTL-4hvw.roa (hash: JM6W0dxskOtwH/4wZYEeDey8i9ac93ewUEb24GlUyks=)
                          2: Q4oVtB_GG7eovbLinG-u2kk_sok.roa (hash: cM5qIsneZAmTqIZg9DeB6vafwKefGN204JmC+NSInLk=)
                          3: TRB5S_43lNyOLKzxAGsR3jba-nU.roa (hash: K/IXnKVsdiRn2o1kH+FaE/QlEeszfs0vxtMbvnwDCbQ=)
                          4: m4hSv_mEGl1O7CcJ0lhgjYNl4mM.roa (hash: uKi5CjgcDmOAt0F3mDiM2fjwRKRtze0jB8esHr2tRSk=)
                          5: m_8VJ49T93YcLz0z3ZvneopPvZQ.crl (hash: xHj1LOXNaIF7vIlQM98AePgXRDzdGF+kGJNL2+G32PI=)
                          6: tZ7C1MYt9I9U0h7GnvEIm9NToaE.roa (hash: sb1ZYmGZNktATZIUUN0if0MQ6BfFbZD5jVek7sbME7Q=)
                          7: u-b7hCj6gdd6K9YCWBDHTcbmd6g.roa (hash: qRx5Ajf58qovX1XwWQ0T9y9tHlrDKVNojCTuf45PlRo=)
                          8: v_G295N19bDrQCJDMtlZ-ai88wg.roa (hash: ZZZ/+7GguAvkf95Ay0eDVtwD7Ey8QKEeDZLP7i4i8qA=)
                          9: wTjmQameKdcpA0z8PRkcVGZwuuc.roa (hash: k2WV/2PH4Kau8EV05RXYKBWzXM8y2f7UYSrD2p5Z2q4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:c0:16:74:0c:5b:b6:12:8c:ef:42:da:dd:f2:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
        Validity
            Not Before: Mar 26 05:01:21 2026 GMT
            Not After : Mar 27 05:01:21 2026 GMT
        Subject: CN=a78e84639d0c06101f4efbf517efe7c49f960708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f2:ea:dc:15:13:b8:3f:d1:ed:3a:6f:b5:f1:
                    fc:03:24:28:60:06:d2:b3:14:4d:15:b2:3a:f1:e6:
                    1c:12:94:64:de:43:7d:2d:d5:fd:a8:ad:6e:81:b7:
                    05:5f:a9:72:fa:25:ed:ae:e3:d4:91:d1:14:6f:06:
                    49:81:bc:47:e5:5c:da:77:37:1c:b5:42:8f:c4:89:
                    91:47:0a:a9:c1:b7:85:c0:b4:71:ac:b9:fd:54:a3:
                    71:21:54:f4:be:cd:75:08:08:f8:d4:ea:42:4a:74:
                    e6:b3:3e:1a:bb:b0:e2:ff:48:c7:e0:99:4c:3c:f2:
                    d5:17:ee:bb:91:59:48:51:5f:e2:29:43:3f:fa:69:
                    47:f8:d6:a2:52:cb:44:04:fa:83:a4:93:e6:38:12:
                    ce:57:ff:6d:dc:29:20:e9:d6:3b:17:3e:c4:2c:ea:
                    ea:82:de:a4:a8:c7:6c:84:e3:22:47:db:79:de:16:
                    59:7c:21:95:a4:f1:71:a9:55:d5:f0:a3:de:6a:38:
                    21:1f:a8:dd:34:62:27:62:20:ef:5a:a1:a2:f9:39:
                    cb:c8:06:9b:64:a7:4c:ad:1d:bd:16:c9:8f:2d:2e:
                    39:6b:37:99:40:3d:89:63:0f:f8:f8:1a:16:fb:7f:
                    cd:84:53:ae:96:15:f3:89:ad:91:85:72:7d:50:fd:
                    1a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:8E:84:63:9D:0C:06:10:1F:4E:FB:F5:17:EF:E7:C4:9F:96:07:08
            X509v3 Authority Key Identifier:
                keyid:9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:0c:a0:ce:fa:cf:c7:40:58:6a:f9:d6:26:3e:24:62:df:ff:
         8e:43:38:df:a8:db:ef:4a:05:38:d9:73:78:65:a8:9b:ec:d8:
         a1:93:5b:33:5a:62:2c:b3:0d:a6:a8:6c:a9:48:3f:c7:e5:14:
         ad:13:2a:1d:ee:30:eb:3d:88:a3:5b:60:9a:f4:fd:b5:68:cb:
         76:4d:93:85:aa:8b:24:d8:d7:7f:fb:2f:bd:fe:5b:f0:44:eb:
         4c:25:d1:20:cc:f2:c0:dd:da:e4:4d:4a:18:1d:d2:3f:1f:ff:
         fb:e1:bd:ca:6d:9a:78:a3:1d:93:dc:d8:f7:91:5c:03:cf:26:
         ff:cf:56:b0:cc:c4:be:82:78:1f:e8:c3:20:c6:e7:60:51:b5:
         4b:4d:35:cc:52:0a:02:e0:3b:a6:c3:cb:e6:4c:75:c1:10:a7:
         59:06:e3:92:3d:aa:44:d5:a8:c7:1e:de:70:ad:31:01:b4:c3:
         ac:88:73:7a:61:b3:3c:9e:d2:0e:6d:2c:32:35:2c:e5:fa:58:
         e1:82:af:1c:79:f2:13:91:9d:ce:2f:c5:38:b9:c4:ed:85:81:
         a7:0d:a9:61:c0:41:36:41:73:9b:f6:69:5c:b9:b6:ee:12:c4:
         b5:c5:09:eb:7b:5e:d6:a7:e6:ab:2f:0c:75:a9:45:87:ea:3a:
         a2:eb:50:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohMAWdAxbthKM70La3fLlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZmYxNTI3OGY1M2Y3NzYxYzJmM2QzM2RkOWJlNzdhOGE0
ZmJkOTQwHhcNMjYwMzI2MDUwMTIxWhcNMjYwMzI3MDUwMTIxWjAzMTEwLwYDVQQD
EyhhNzhlODQ2MzlkMGMwNjEwMWY0ZWZiZjUxN2VmZTdjNDlmOTYwNzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPLq3BUTuD/R7TpvtfH8AyQoYAbS
sxRNFbI68eYcEpRk3kN9LdX9qK1ugbcFX6ly+iXtruPUkdEUbwZJgbxH5Vzadzcc
tUKPxImRRwqpwbeFwLRxrLn9VKNxIVT0vs11CAj41OpCSnTmsz4au7Di/0jH4JlM
PPLVF+67kVlIUV/iKUM/+mlH+NaiUstEBPqDpJPmOBLOV/9t3Ckg6dY7Fz7ELOrq
gt6kqMdshOMiR9t53hZZfCGVpPFxqVXV8KPeajghH6jdNGInYiDvWqGi+TnLyAab
ZKdMrR29FsmPLS45azeZQD2JYw/4+BoW+3/NhFOulhXzia2RhXJ9UP0aKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKeOhGOdDAYQH0779Rfv58SflgcIMB8GA1UdIwQY
MBaAFJv/FSePU/d2HC89M92b53qKT72UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbV84Vko0OVQ5M1ljTHowejNadm5lb3BQdlpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9hYTdiMzMtZGVlYi00YWJkLWI4ZDIt
NTY5NzI0OWY1MTI0LzEvbV84Vko0OVQ5M1ljTHowejNadm5lb3BQdlpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9hYTdiMzMtZGVlYi00YWJkLWI4ZDItNTY5NzI0OWY1MTI0
LzEvbV84Vko0OVQ5M1ljTHowejNadm5lb3BQdlpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjAygzvrP
x0BYavnWJj4kYt//jkM436jb70oFONlzeGWom+zYoZNbM1piLLMNpqhsqUg/x+UU
rRMqHe4w6z2Io1tgmvT9tWjLdk2ThaqLJNjXf/svvf5b8ETrTCXRIMzywN3a5E1K
GB3SPx//++G9ym2aeKMdk9zY95FcA88m/89WsMzEvoJ4H+jDIMbnYFG1S001zFIK
AuA7psPL5kx1wRCnWQbjkj2qRNWoxx7ecK0xAbTDrIhzemGzPJ7SDm0sMjUs5fpY
4YKvHHnyE5Gdzi/FOLnE7YWBpw2pYcBBNkFzm/ZpXLm27hLEtcUJ63te1qfmqy8M
dalFh+o6outQ7A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:13:42 2026 by rpki-client