Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft
File:                     mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft (raw, json)
Hash identifier:          FNLeiabh2wkwe1CK8GpRg47k57TDd48J4TfLcrQQif4=
Subject key identifier:   F3:48:BB:46:D4:97:BB:75:37:C1:66:8E:6F:2D:AA:01:6E:D0:33:4A
Authority key identifier: 9A:38:0C:55:C4:61:17:F9:D0:F9:F8:9F:88:5F:D8:AC:58:4C:72:E7
Certificate issuer:       /CN=9a380c55c46117f9d0f9f89f885fd8ac584c72e7
Certificate serial:       019D2B4E2EACA18F5568241DE8281BDC0159
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft
Manifest number:          07AD
Signing time:             Thu 26 Mar 2026 18:00:37 +0000
Manifest this update:     Thu 26 Mar 2026 18:00:37 +0000
Manifest next update:     Fri 27 Mar 2026 18:00:37 +0000
Files and hashes:         1: hoKwY0QvUnBi-tDDbTH_cLv23NY.roa (hash: fFAQMbRSBb2iS8m9HUDJs1yeCJEv1rp7JgjV+mMT+oE=)
                          2: ihYgr-rjOEu_0aFSN5ArKwebXhw.roa (hash: V6X/NJtxRRU2A4S6y2uawtLDYFOhttTEH+mmWCQD8A4=)
                          3: mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl (hash: +npq7U01mM4xQQ67CGd5zD7+hJSkWqrEYflioSgidIk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:4e:2e:ac:a1:8f:55:68:24:1d:e8:28:1b:dc:01:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a380c55c46117f9d0f9f89f885fd8ac584c72e7
        Validity
            Not Before: Mar 26 18:00:37 2026 GMT
            Not After : Mar 27 18:00:37 2026 GMT
        Subject: CN=f348bb46d497bb7537c1668e6f2daa016ed0334a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:30:ba:2e:5b:21:2b:0e:c9:9b:58:49:60:d8:
                    b4:b4:03:bf:f0:bc:9b:0f:32:ae:b8:a5:95:80:ab:
                    72:8d:f4:ce:bb:cc:7e:42:cd:4f:ca:e3:72:6a:4c:
                    21:ef:0c:cf:09:7e:46:80:ba:c8:02:44:86:9b:72:
                    08:50:1d:80:c3:43:a2:3f:6a:56:87:07:1f:63:d1:
                    8c:a7:20:f1:ae:04:af:08:2e:c9:9b:6d:38:a1:0f:
                    74:c7:20:e3:25:ff:42:6d:7d:cd:e3:1b:b0:d1:79:
                    85:38:7e:63:f9:17:b0:bc:fc:94:39:f2:87:ee:b8:
                    6e:c3:46:c6:ad:52:e2:6b:9e:17:61:f4:af:6e:40:
                    14:14:dd:6b:b4:a9:42:da:98:0b:d4:8a:ce:57:0e:
                    7d:c7:e5:9f:78:cf:7c:2d:86:2b:a3:0c:43:41:bd:
                    15:8e:e6:0b:d8:bd:dc:b9:68:15:a6:ca:46:fc:6a:
                    11:bc:21:76:b7:e1:c7:9a:ea:a0:41:8f:7b:8d:a9:
                    22:bf:55:9b:a8:71:70:f1:a0:bd:a9:e6:72:76:6f:
                    67:83:cd:e4:aa:36:a4:c4:20:63:85:78:3c:09:51:
                    ee:ee:bd:ca:49:30:55:43:54:b7:a4:a9:20:2e:06:
                    f3:13:bc:72:46:e9:91:5f:fd:70:51:06:ac:f3:cc:
                    b1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:48:BB:46:D4:97:BB:75:37:C1:66:8E:6F:2D:AA:01:6E:D0:33:4A
            X509v3 Authority Key Identifier:
                keyid:9A:38:0C:55:C4:61:17:F9:D0:F9:F8:9F:88:5F:D8:AC:58:4C:72:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:25:f1:49:27:8e:e8:08:1f:dc:5f:26:a3:00:f1:b0:b8:e6:
         48:7f:79:16:6b:1b:eb:ac:89:a4:ad:82:00:2c:fe:98:77:23:
         f6:0f:40:99:a6:e0:5d:e6:5d:75:f5:ce:a6:1f:f9:ab:87:36:
         d1:be:68:d1:d3:54:98:07:0f:14:1e:b4:50:eb:cf:a7:5c:2a:
         66:c9:b9:c5:71:df:3b:7d:72:44:a3:aa:e7:9f:93:2a:d0:09:
         fc:6a:f7:f2:f1:86:53:ea:14:96:94:44:b7:d8:07:94:7b:96:
         13:12:9f:ee:8e:7d:eb:ee:e4:27:d6:14:8b:ce:a1:cc:03:8d:
         4d:8e:9d:85:50:b1:ac:96:fc:88:74:8f:15:2d:e4:d1:21:c6:
         88:d6:a2:8f:98:53:01:90:2f:bf:db:bb:e8:75:8f:6f:e3:02:
         f8:85:05:3b:02:ee:99:ec:66:c8:2a:5f:25:e8:ee:b8:77:5f:
         13:61:b0:d8:6f:61:53:d8:e3:ce:11:0a:0a:5a:27:64:97:c2:
         10:c1:26:f3:21:34:5a:de:69:84:b0:f6:8b:f1:18:9a:b7:93:
         42:f5:1b:c7:c0:9a:21:e4:43:1e:ef:2d:7a:b7:e4:b8:c4:bd:
         e9:e6:f2:81:a4:4a:da:d1:68:13:46:2e:39:71:74:8e:b6:9d:
         12:a9:61:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rTi6soY9VaCQd6Cgb3AFZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMzgwYzU1YzQ2MTE3ZjlkMGY5Zjg5Zjg4NWZkOGFjNTg0
YzcyZTcwHhcNMjYwMzI2MTgwMDM3WhcNMjYwMzI3MTgwMDM3WjAzMTEwLwYDVQQD
EyhmMzQ4YmI0NmQ0OTdiYjc1MzdjMTY2OGU2ZjJkYWEwMTZlZDAzMzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujC6LlshKw7Jm1hJYNi0tAO/8Lyb
DzKuuKWVgKtyjfTOu8x+Qs1PyuNyakwh7wzPCX5GgLrIAkSGm3IIUB2Aw0OiP2pW
hwcfY9GMpyDxrgSvCC7Jm204oQ90xyDjJf9CbX3N4xuw0XmFOH5j+RewvPyUOfKH
7rhuw0bGrVLia54XYfSvbkAUFN1rtKlC2pgL1IrOVw59x+WfeM98LYYrowxDQb0V
juYL2L3cuWgVpspG/GoRvCF2t+HHmuqgQY97jakiv1WbqHFw8aC9qeZydm9ng83k
qjakxCBjhXg8CVHu7r3KSTBVQ1S3pKkgLgbzE7xyRumRX/1wUQas88yxfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPNIu0bUl7t1N8Fmjm8tqgFu0DNKMB8GA1UdIwQY
MBaAFJo4DFXEYRf50Pn4n4hf2KxYTHLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWpnTVZjUmhGX25RLWZpZmlGX1lyRmhNY3VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8wZjI2ODItOTg3OC00MTZiLTk2NWMt
NDBhYWM2Mzk2Nzc3LzEvbWpnTVZjUmhGX25RLWZpZmlGX1lyRmhNY3VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8wZjI2ODItOTg3OC00MTZiLTk2NWMtNDBhYWM2Mzk2Nzc3
LzEvbWpnTVZjUmhGX25RLWZpZmlGX1lyRmhNY3VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADCXxSSeO
6Agf3F8mowDxsLjmSH95Fmsb66yJpK2CACz+mHcj9g9AmabgXeZddfXOph/5q4c2
0b5o0dNUmAcPFB60UOvPp1wqZsm5xXHfO31yRKOq55+TKtAJ/Gr38vGGU+oUlpRE
t9gHlHuWExKf7o596+7kJ9YUi86hzAONTY6dhVCxrJb8iHSPFS3k0SHGiNaij5hT
AZAvv9u76HWPb+MC+IUFOwLumexmyCpfJejuuHdfE2Gw2G9hU9jjzhEKClonZJfC
EMEm8yE0Wt5phLD2i/EYmreTQvUbx8CaIeRDHu8terfkuMS96ebygaRK2tFoE0Yu
OXF0jradEqlhHQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:20:48 2026 by rpki-client