Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft
File:                     gU7b0ZY0y7kaDS2v11nUyafne3o.mft (raw, json)
Hash identifier:          eNUSNrL7UPYlbu1eaSoyF+R8VeahxkPKYc/OlfaOfNk=
Subject key identifier:   86:C9:BB:DE:B1:46:A2:72:63:EA:55:59:27:6F:5F:1F:95:4D:C8:36
Authority key identifier: 81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A
Certificate issuer:       /CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a
Certificate serial:       019D25837FEF08AB1C91821AA00F4D0BE06C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft
Manifest number:          1888
Signing time:             Wed 25 Mar 2026 15:01:08 +0000
Manifest this update:     Wed 25 Mar 2026 15:01:08 +0000
Manifest next update:     Thu 26 Mar 2026 15:01:08 +0000
Files and hashes:         1: 2mdLM4QMSFolc5LIsVCE-5xpuxw.roa (hash: Pb6j/jV8p9sMo1nrwtTOTYAV2/aTJmLOHn6ZswOsyqw=)
                          2: dTiJsEq_JJ5524hOgqQnN8Ddhhg.roa (hash: C8qRzW17uM9hsxbqGg5gMXnbyDi7MEbAVWHt31dT0Ag=)
                          3: gU7b0ZY0y7kaDS2v11nUyafne3o.crl (hash: 9kft6g3zzRGm8IZbxRdqxamj41tiuThgx7fPTgldp0o=)
                          4: kPXbHwmFeaUgl0gADFGcVtXfM54.roa (hash: PFLTi3V9mE8UoiZOrhozT0x6k7lKbzmX0yMq70JlctI=)
                          5: zJqeRCb5j4Dd57Zj7b1drSwEVOY.roa (hash: kMSmGuO+kRwRxKV3HZvVShc5KQnbIWPqxWeSNvdxgoM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:83:7f:ef:08:ab:1c:91:82:1a:a0:0f:4d:0b:e0:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a
        Validity
            Not Before: Mar 25 15:01:08 2026 GMT
            Not After : Mar 26 15:01:08 2026 GMT
        Subject: CN=86c9bbdeb146a27263ea5559276f5f1f954dc836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:f1:8c:a2:59:be:44:44:f5:d3:ad:4e:76:27:
                    32:cd:9b:d9:7a:09:f7:32:50:95:ab:73:91:dd:72:
                    12:09:84:a6:a8:7e:8f:a3:ca:af:7c:7a:90:c1:02:
                    33:0d:33:7b:9e:f3:e2:85:2b:34:f1:f4:5d:e0:2e:
                    5f:16:40:54:a0:e1:54:d5:1e:2d:71:97:ff:19:4d:
                    82:13:7e:a5:b5:16:b0:45:cc:0b:38:da:a3:06:08:
                    46:71:46:dd:9f:66:dc:ae:7e:cb:05:36:19:90:bb:
                    af:80:ba:1c:24:5f:cc:a7:34:71:84:9e:eb:f1:96:
                    16:ac:6a:a6:e2:ec:b3:6a:75:43:35:49:90:bd:2c:
                    fd:b9:bb:36:36:1a:ed:0c:99:61:a5:2c:9a:e9:05:
                    4b:42:b6:96:00:49:79:e3:b4:f7:9b:1a:9a:91:2a:
                    7f:ff:a2:83:4e:fb:c7:84:e0:2a:af:4e:e8:2c:5b:
                    71:c7:24:94:ac:11:2e:73:f9:2c:f9:56:3b:61:df:
                    67:50:e0:ec:03:cb:e1:0e:5b:f9:a7:3e:6b:5f:27:
                    87:da:04:7e:b6:0d:ad:69:65:10:4b:dd:58:27:76:
                    80:a7:44:3d:58:f4:c3:2c:eb:70:63:6f:bb:f2:3e:
                    9c:ae:a0:9b:e9:96:be:94:0f:4c:87:ad:2a:6c:dd:
                    60:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:C9:BB:DE:B1:46:A2:72:63:EA:55:59:27:6F:5F:1F:95:4D:C8:36
            X509v3 Authority Key Identifier:
                keyid:81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:82:79:b2:03:18:31:fb:87:b6:5c:c4:37:b6:88:cc:65:f5:
         0c:17:d8:f1:05:60:13:10:e6:7b:ea:9f:94:f1:7e:07:e7:87:
         d2:0f:2d:1c:8d:cf:75:64:d1:db:52:52:1b:d0:88:ef:d1:6d:
         46:bb:38:24:33:d7:9c:6e:2b:37:ba:a4:59:45:c8:39:d0:05:
         59:be:d4:b0:03:d8:e1:fb:62:34:3b:17:3d:fb:8b:68:3b:69:
         dd:fb:52:54:8c:04:df:72:4a:b5:1c:1b:61:37:42:af:6b:d6:
         19:06:08:31:86:f2:7f:4d:09:21:81:72:8c:f0:13:1e:c9:2b:
         89:26:57:a1:50:27:3f:50:7d:7c:13:d0:d3:0c:e0:f2:8c:d3:
         66:d5:ed:ab:b5:5d:d6:19:02:6c:04:53:ca:07:1c:5c:46:17:
         1a:40:6a:61:82:e9:57:17:1b:e4:c2:20:56:c6:0c:f0:d6:a6:
         d1:14:07:7c:4f:51:7e:6b:01:2d:ce:13:7e:f4:f7:c1:44:74:
         da:69:2c:ee:d2:b7:09:80:fa:7b:e5:f3:2a:7f:38:45:0d:55:
         31:5b:79:a2:36:1e:dd:17:e8:a1:0b:f9:b2:e6:f9:34:57:8a:
         df:67:a5:d4:d2:6a:d3:06:24:38:8b:3e:7b:f4:a5:81:68:17:
         56:e9:6b:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lg3/vCKsckYIaoA9NC+BsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNGVkYmQxOTYzNGNiYjkxYTBkMmRhZmQ3NTlkNGM5YTdl
NzdiN2EwHhcNMjYwMzI1MTUwMTA4WhcNMjYwMzI2MTUwMTA4WjAzMTEwLwYDVQQD
Eyg4NmM5YmJkZWIxNDZhMjcyNjNlYTU1NTkyNzZmNWYxZjk1NGRjODM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6vGMolm+RET1061OdicyzZvZegn3
MlCVq3OR3XISCYSmqH6Po8qvfHqQwQIzDTN7nvPihSs08fRd4C5fFkBUoOFU1R4t
cZf/GU2CE36ltRawRcwLONqjBghGcUbdn2bcrn7LBTYZkLuvgLocJF/MpzRxhJ7r
8ZYWrGqm4uyzanVDNUmQvSz9ubs2NhrtDJlhpSya6QVLQraWAEl547T3mxqakSp/
/6KDTvvHhOAqr07oLFtxxySUrBEuc/ks+VY7Yd9nUODsA8vhDlv5pz5rXyeH2gR+
tg2taWUQS91YJ3aAp0Q9WPTDLOtwY2+78j6crqCb6Za+lA9Mh60qbN1gbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbJu96xRqJyY+pVWSdvXx+VTcg2MB8GA1UdIwQY
MBaAFIFO29GWNMu5Gg0tr9dZ1Mmn53t6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1U3YjBaWTB5N2thRFMydjExblV5YWZuZTNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9lODJkZTktMjVmNC00NjZlLTljMGMt
YzA4OTk3YTdhMDhmLzEvZ1U3YjBaWTB5N2thRFMydjExblV5YWZuZTNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9lODJkZTktMjVmNC00NjZlLTljMGMtYzA4OTk3YTdhMDhm
LzEvZ1U3YjBaWTB5N2thRFMydjExblV5YWZuZTNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG4J5sgMY
MfuHtlzEN7aIzGX1DBfY8QVgExDme+qflPF+B+eH0g8tHI3PdWTR21JSG9CI79Ft
Rrs4JDPXnG4rN7qkWUXIOdAFWb7UsAPY4ftiNDsXPfuLaDtp3ftSVIwE33JKtRwb
YTdCr2vWGQYIMYbyf00JIYFyjPATHskriSZXoVAnP1B9fBPQ0wzg8ozTZtXtq7Vd
1hkCbARTygccXEYXGkBqYYLpVxcb5MIgVsYM8Nam0RQHfE9RfmsBLc4TfvT3wUR0
2mks7tK3CYD6e+XzKn84RQ1VMVt5ojYe3RfooQv5sub5NFeK32el1NJq0wYkOIs+
e/SlgWgXVulrMQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:54:30 2026 by rpki-client