Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
File:                     IT4dUNUiiL7oDupDVXcBhxJAm74.mft (raw, json)
Hash identifier:          8pljYqhQzHPfMKQmdnMUtJf7CEVTpK30Ed/Dwi/d+iY=
Subject key identifier:   F3:15:1D:F2:FA:11:92:13:A1:38:AB:04:5F:E7:BF:62:39:EC:FF:A9
Authority key identifier: 21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
Certificate issuer:       /CN=213e1d50d52288bee80eea435577018712409bbe
Certificate serial:       019D27A8BE65CC40FC7236ED2FB1F695C769
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
Manifest number:          13D2
Signing time:             Thu 26 Mar 2026 01:01:03 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:03 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:03 +0000
Files and hashes:         1: 7YpkD0KfUd6GvtssKEAM5COaSjg.roa (hash: WV0BukIXTVr1fBZ0Z/X4lkuf8IyCGzCcom5E1ZYckgc=)
                          2: IT4dUNUiiL7oDupDVXcBhxJAm74.crl (hash: K7XQ2pfibvcCbJc5Lb2GnXzE0LlSTuirBypbRKPdbE8=)
                          3: NJVMWOrligqTcr-rcvI2msW0lWg.roa (hash: h/rbFp7XU21SARi1YVpy4hQ7ylKq7LqNyiG5q+Csv/s=)
                          4: PZ3DvBnBZEzRJV1pn3nJOWDaINo.roa (hash: kJlVCfKZcI1/z1HhlgFzXn1hqpVcX/my4yK+JhAitIM=)
                          5: RWueY0qSJBqdnyfoUjIKJBQ4tBM.roa (hash: bpFMaHQ2+HH7JzdJGHBSYoDlCYd8W8QG7hNLlWzI4Y4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:be:65:cc:40:fc:72:36:ed:2f:b1:f6:95:c7:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=213e1d50d52288bee80eea435577018712409bbe
        Validity
            Not Before: Mar 26 01:01:03 2026 GMT
            Not After : Mar 27 01:01:03 2026 GMT
        Subject: CN=f3151df2fa119213a138ab045fe7bf6239ecffa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:cf:8b:83:48:70:d6:34:f9:1b:80:df:26:ef:
                    97:f8:5a:da:6e:32:3a:8a:99:01:a1:8d:31:4b:8c:
                    90:56:4e:f3:a7:c6:6e:ff:44:88:43:e5:79:60:eb:
                    02:66:56:0e:33:03:2c:23:95:bd:fe:2d:cd:04:73:
                    bf:da:ac:39:38:bd:5d:c3:d8:1b:91:d3:d9:25:fb:
                    12:29:3e:c8:05:38:4a:ab:db:a6:7e:a9:f8:22:6a:
                    d5:eb:26:0a:ba:2a:68:ab:26:d6:49:5f:00:7e:52:
                    6f:eb:02:93:40:00:9b:0c:46:bd:bc:f9:34:b5:0a:
                    59:41:63:13:67:05:d3:7f:ed:10:6e:5a:9b:4e:fb:
                    31:21:04:52:8c:82:03:98:83:7a:21:92:fa:08:31:
                    6b:b1:c7:4a:a4:b9:a2:09:5e:8f:a4:1e:c1:d0:08:
                    03:0d:60:2c:63:cf:dd:dc:86:4c:bd:40:7c:e7:8d:
                    9d:b2:63:14:72:9f:b9:7b:02:58:54:2d:a9:1a:40:
                    27:8f:74:4b:bb:46:d0:11:17:03:39:0a:7b:a1:a5:
                    67:b8:b9:c5:22:7c:67:e1:7e:5b:98:be:09:2d:96:
                    03:34:41:45:3c:0e:7a:59:18:55:37:cb:5f:da:24:
                    4d:06:89:41:83:df:7c:ef:ac:23:c2:87:35:3c:46:
                    1a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:15:1D:F2:FA:11:92:13:A1:38:AB:04:5F:E7:BF:62:39:EC:FF:A9
            X509v3 Authority Key Identifier:
                keyid:21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:9d:39:ed:23:3f:1a:09:1e:d2:84:08:a1:7f:53:8d:26:2c:
         09:f7:4e:4b:ab:3c:51:ee:7e:4d:83:bd:79:30:ec:01:52:ee:
         41:48:ce:37:3b:ae:a8:60:93:b1:7b:09:fb:06:b8:c3:9f:95:
         8c:c6:61:d4:9a:41:3b:a0:1b:b1:51:7f:74:55:82:f9:84:e1:
         b0:4f:04:29:e1:3f:7b:79:be:94:2f:e8:ba:5d:c3:b0:59:0a:
         51:85:34:46:e7:2a:9a:02:f7:7f:b0:6f:08:69:2d:35:66:6a:
         85:6c:80:ee:73:6f:af:d6:b8:7c:d9:3e:c6:2b:dd:b8:74:50:
         e9:25:0d:03:b5:f4:33:59:55:89:a0:86:de:f3:c0:34:79:57:
         1c:23:60:de:af:30:71:1c:cf:bc:2c:6b:84:b8:f5:d2:83:28:
         d0:fe:8e:f4:cc:1b:6f:30:65:3a:54:49:61:db:5a:58:fa:4c:
         2d:4b:cb:67:df:f0:56:31:6d:c7:f1:29:9d:2a:fd:50:90:ae:
         0d:84:79:9a:23:a8:48:99:ec:68:f5:29:cb:ae:d3:52:d5:27:
         47:d4:29:f3:12:a5:e8:9a:8b:ea:0d:b5:07:d3:31:e8:53:41:
         f2:60:ed:94:45:5a:f6:29:d2:f4:8a:d4:9f:93:47:56:38:cd:
         2e:b1:77:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqL5lzED8cjbtL7H2lcdpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxM2UxZDUwZDUyMjg4YmVlODBlZWE0MzU1NzcwMTg3MTI0
MDliYmUwHhcNMjYwMzI2MDEwMTAzWhcNMjYwMzI3MDEwMTAzWjAzMTEwLwYDVQQD
EyhmMzE1MWRmMmZhMTE5MjEzYTEzOGFiMDQ1ZmU3YmY2MjM5ZWNmZmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhM+Lg0hw1jT5G4DfJu+X+FrabjI6
ipkBoY0xS4yQVk7zp8Zu/0SIQ+V5YOsCZlYOMwMsI5W9/i3NBHO/2qw5OL1dw9gb
kdPZJfsSKT7IBThKq9umfqn4ImrV6yYKuipoqybWSV8AflJv6wKTQACbDEa9vPk0
tQpZQWMTZwXTf+0QblqbTvsxIQRSjIIDmIN6IZL6CDFrscdKpLmiCV6PpB7B0AgD
DWAsY8/d3IZMvUB8542dsmMUcp+5ewJYVC2pGkAnj3RLu0bQERcDOQp7oaVnuLnF
Inxn4X5bmL4JLZYDNEFFPA56WRhVN8tf2iRNBolBg99876wjwoc1PEYalQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPMVHfL6EZIToTirBF/nv2I57P+pMB8GA1UdIwQY
MBaAFCE+HVDVIoi+6A7qQ1V3AYcSQJu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVQ0ZFVOVWlpTDdvRHVwRFZYY0JoeEpBbTc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yYTFjZTktZmI0Yy00MWVlLTlmZjYt
MzE2ZWYyNjFmNGE1LzEvSVQ0ZFVOVWlpTDdvRHVwRFZYY0JoeEpBbTc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8yYTFjZTktZmI0Yy00MWVlLTlmZjYtMzE2ZWYyNjFmNGE1
LzEvSVQ0ZFVOVWlpTDdvRHVwRFZYY0JoeEpBbTc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm5057SM/
Ggke0oQIoX9TjSYsCfdOS6s8Ue5+TYO9eTDsAVLuQUjONzuuqGCTsXsJ+wa4w5+V
jMZh1JpBO6AbsVF/dFWC+YThsE8EKeE/e3m+lC/oul3DsFkKUYU0RucqmgL3f7Bv
CGktNWZqhWyA7nNvr9a4fNk+xivduHRQ6SUNA7X0M1lViaCG3vPANHlXHCNg3q8w
cRzPvCxrhLj10oMo0P6O9MwbbzBlOlRJYdtaWPpMLUvLZ9/wVjFtx/EpnSr9UJCu
DYR5miOoSJnsaPUpy67TUtUnR9Qp8xKl6JqL6g21B9Mx6FNB8mDtlEVa9inS9IrU
n5NHVjjNLrF3RQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:06:17 2026 by rpki-client