Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
File:                     x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft (raw, json)
Hash identifier:          U7w6c18Y9tcFdRts+/Ez1RNQKyEYOP7iZ6obilT8+Fg=
Subject key identifier:   B6:2E:8D:8C:5A:3D:C6:31:76:92:57:85:37:F2:81:A4:BD:FD:16:92
Authority key identifier: C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E
Certificate issuer:       /CN=c77549551405d9948c662dfe4de24de055daff5e
Certificate serial:       019D25F1827C72C5B76052618118E94A4273
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
Manifest number:          1887
Signing time:             Wed 25 Mar 2026 17:01:17 +0000
Manifest this update:     Wed 25 Mar 2026 17:01:17 +0000
Manifest next update:     Thu 26 Mar 2026 17:01:17 +0000
Files and hashes:         1: voGrppNhCGHuRZLwsuAkj7Qr9qY.roa (hash: PhKSVss4XujDromY1GHIug1qUmjQzQEMDbCWKPHUiJY=)
                          2: x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl (hash: jz3JnNZayVxTtf1tK8sq3ZzkZ8TsqrrAifNVtFQCx+Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 17:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:82:7c:72:c5:b7:60:52:61:81:18:e9:4a:42:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c77549551405d9948c662dfe4de24de055daff5e
        Validity
            Not Before: Mar 25 17:01:17 2026 GMT
            Not After : Mar 26 17:01:17 2026 GMT
        Subject: CN=b62e8d8c5a3dc6317692578537f281a4bdfd1692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f4:6f:33:e3:e3:43:71:40:f3:dc:b0:26:50:
                    a8:1c:2d:8f:eb:1e:c5:1e:b3:b4:c0:a1:87:cd:25:
                    eb:d6:33:87:55:b7:8d:5f:2d:59:32:bb:65:25:90:
                    19:09:55:66:39:85:69:ed:29:65:57:26:cc:0f:d1:
                    b5:13:c5:1e:36:13:f3:33:30:ad:b1:5b:c8:c4:b6:
                    cb:03:bd:93:0c:75:50:45:ad:05:a9:17:32:9a:10:
                    b4:76:12:55:61:29:50:35:5f:4e:03:c7:b7:b4:68:
                    8c:7a:ab:ad:63:41:40:09:e1:a3:e3:cc:28:72:dd:
                    1b:2b:3a:1e:0c:a5:6a:6a:04:74:06:e5:08:ab:f0:
                    fe:67:91:30:4d:e2:ce:04:41:02:22:f5:fa:77:b7:
                    f1:78:93:51:cb:39:9b:39:db:7e:86:eb:56:f7:e6:
                    c2:81:a4:4e:55:53:59:73:64:81:6a:4a:d0:e7:1f:
                    d4:27:e5:7f:9c:10:11:75:32:6e:93:bb:ab:12:08:
                    ba:0f:af:1c:48:32:01:88:2e:5e:0a:30:78:c1:d9:
                    cc:e4:0d:f8:32:51:60:c2:fd:24:39:dd:69:10:1f:
                    d0:07:7f:65:42:1a:dd:55:fa:cf:67:d1:17:ae:9b:
                    6d:c4:5c:0f:8d:0d:6c:5e:72:da:56:77:81:10:ee:
                    dd:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:2E:8D:8C:5A:3D:C6:31:76:92:57:85:37:F2:81:A4:BD:FD:16:92
            X509v3 Authority Key Identifier:
                keyid:C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:19:45:ea:1c:46:21:07:0a:69:07:ab:df:5b:27:fb:80:af:
         c0:09:59:5b:a8:ca:96:df:b3:58:f9:a5:d2:b5:9f:a6:0f:5f:
         99:51:cb:f7:3d:1a:ba:64:4d:58:fe:ea:fd:f8:84:bd:38:1c:
         4d:e4:b2:3c:52:a2:61:c7:32:83:42:6a:72:ff:26:9e:91:86:
         02:b8:aa:18:b7:f5:c2:ab:4b:fc:c2:02:6a:94:70:75:a0:1f:
         18:bb:88:74:b4:81:30:74:aa:af:f2:f9:83:15:b5:6d:28:f8:
         a0:24:94:77:eb:70:f7:8b:1a:ff:e8:f2:79:9f:28:4f:b1:85:
         c0:53:8f:8a:fb:67:86:87:2f:c4:3a:2b:2d:bb:76:97:75:59:
         9c:b2:79:c7:9a:07:8e:56:8d:3a:03:8d:05:da:46:ee:0d:17:
         0d:27:e1:98:b7:77:84:8d:c5:7e:78:38:d7:28:f6:c3:14:5e:
         ce:11:ff:a2:49:dd:0c:30:15:e2:51:0d:7c:7c:8d:d9:9a:cb:
         8a:e3:47:b2:ed:c9:b3:d8:77:94:1e:c0:71:3c:2d:d6:24:2c:
         ad:b9:c6:52:56:d4:57:fd:e6:bb:5b:1c:87:54:c1:05:13:b3:
         8b:ca:4d:bd:eb:0f:f5:80:ec:14:a1:69:a4:40:83:30:95:a6:
         38:08:9a:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8YJ8csW3YFJhgRjpSkJzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NzU0OTU1MTQwNWQ5OTQ4YzY2MmRmZTRkZTI0ZGUwNTVk
YWZmNWUwHhcNMjYwMzI1MTcwMTE3WhcNMjYwMzI2MTcwMTE3WjAzMTEwLwYDVQQD
EyhiNjJlOGQ4YzVhM2RjNjMxNzY5MjU3ODUzN2YyODFhNGJkZmQxNjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPRvM+PjQ3FA89ywJlCoHC2P6x7F
HrO0wKGHzSXr1jOHVbeNXy1ZMrtlJZAZCVVmOYVp7SllVybMD9G1E8UeNhPzMzCt
sVvIxLbLA72TDHVQRa0FqRcymhC0dhJVYSlQNV9OA8e3tGiMequtY0FACeGj48wo
ct0bKzoeDKVqagR0BuUIq/D+Z5EwTeLOBEECIvX6d7fxeJNRyzmbOdt+hutW9+bC
gaROVVNZc2SBakrQ5x/UJ+V/nBARdTJuk7urEgi6D68cSDIBiC5eCjB4wdnM5A34
MlFgwv0kOd1pEB/QB39lQhrdVfrPZ9EXrpttxFwPjQ1sXnLaVneBEO7dvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLYujYxaPcYxdpJXhTfygaS9/RaSMB8GA1UdIwQY
MBaAFMd1SVUUBdmUjGYt/k3iTeBV2v9eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDNWSlZSUUYyWlNNWmkzLVRlSk40RlhhXzE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC81YTQzNDEtYmM1Zi00MjQ2LTkyZWEt
MWJmNzVmNzVmYTg3LzEveDNWSlZSUUYyWlNNWmkzLVRlSk40RlhhXzE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC81YTQzNDEtYmM1Zi00MjQ2LTkyZWEtMWJmNzVmNzVmYTg3
LzEveDNWSlZSUUYyWlNNWmkzLVRlSk40RlhhXzE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVBlF6hxG
IQcKaQer31sn+4CvwAlZW6jKlt+zWPml0rWfpg9fmVHL9z0aumRNWP7q/fiEvTgc
TeSyPFKiYccyg0Jqcv8mnpGGAriqGLf1wqtL/MICapRwdaAfGLuIdLSBMHSqr/L5
gxW1bSj4oCSUd+tw94sa/+jyeZ8oT7GFwFOPivtnhocvxDorLbt2l3VZnLJ5x5oH
jlaNOgONBdpG7g0XDSfhmLd3hI3Ffng41yj2wxRezhH/okndDDAV4lENfHyN2ZrL
iuNHsu3Js9h3lB7AcTwt1iQsrbnGUlbUV/3mu1sch1TBBROzi8pNvesP9YDsFKFp
pECDMJWmOAiabQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:00:36 2026 by rpki-client