Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c30dce-156a-4af0-bb38-a1cc1f7c897f/1/_CIELXaLE__agpyz8dfSzz--ihU.mft
File:                     _CIELXaLE__agpyz8dfSzz--ihU.mft (raw, json)
Hash identifier:          CqboIlRM/yJkUFm+ad/u63toyUCnyIt66YyYexqaikk=
Subject key identifier:   31:1E:D0:AD:BD:C7:54:D8:F4:91:6B:F1:13:12:02:3F:FB:D8:B6:D8
Authority key identifier: FC:22:04:2D:76:8B:13:FF:DA:82:9C:B3:F1:D7:D2:CF:3F:BE:8A:15
Certificate issuer:       /CN=fc22042d768b13ffda829cb3f1d7d2cf3fbe8a15
Certificate serial:       019D2772E148CD9086B36B280232F9C25BB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_CIELXaLE__agpyz8dfSzz--ihU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/c30dce-156a-4af0-bb38-a1cc1f7c897f/1/_CIELXaLE__agpyz8dfSzz--ihU.mft
Manifest number:          0150
Signing time:             Thu 26 Mar 2026 00:02:13 +0000
Manifest this update:     Thu 26 Mar 2026 00:02:13 +0000
Manifest next update:     Fri 27 Mar 2026 00:02:13 +0000
Files and hashes:         1: 4A6CcXXrSbIURymlP_OiEuUadzE.roa (hash: XB/aS0f5fLagh24RTymZ9tRIq1RWpYe8OmUQeqUA544=)
                          2: _CIELXaLE__agpyz8dfSzz--ihU.crl (hash: UIi8PmzGvh2P7yEhZZc08gQ0D0HkVXF1eQ8KS80+k0Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/c30dce-156a-4af0-bb38-a1cc1f7c897f/1/_CIELXaLE__agpyz8dfSzz--ihU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/c30dce-156a-4af0-bb38-a1cc1f7c897f/1/_CIELXaLE__agpyz8dfSzz--ihU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_CIELXaLE__agpyz8dfSzz--ihU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:e1:48:cd:90:86:b3:6b:28:02:32:f9:c2:5b:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc22042d768b13ffda829cb3f1d7d2cf3fbe8a15
        Validity
            Not Before: Mar 26 00:02:13 2026 GMT
            Not After : Mar 27 00:02:13 2026 GMT
        Subject: CN=311ed0adbdc754d8f4916bf11312023ffbd8b6d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:89:4a:9a:48:af:3a:c3:d9:50:6c:97:e4:e7:
                    a5:48:c2:f5:a0:6d:ff:78:06:ea:6e:e9:4a:3e:dc:
                    c9:79:ab:b2:e5:48:8b:5b:4e:99:a1:fd:19:d2:cb:
                    95:d7:cd:e1:48:f5:5d:81:5b:82:34:ff:51:82:64:
                    f9:6c:e7:9d:82:41:90:63:3d:b4:5d:39:ec:e7:61:
                    c1:03:57:11:e9:8f:c1:de:5f:60:b4:cc:ee:ce:b0:
                    1a:2a:96:40:68:1c:82:a7:3b:64:e0:00:88:ac:c7:
                    37:38:48:ef:b7:f5:43:54:1f:bd:20:f0:aa:75:f9:
                    ad:d9:ae:15:a9:09:2e:50:da:d2:91:f6:f9:9f:b0:
                    8b:3c:8e:9e:64:ac:06:f2:b4:9d:ff:24:bd:86:70:
                    13:08:87:ff:e3:b4:db:ce:34:4c:02:b6:a7:bb:df:
                    1d:54:13:9c:79:e0:6c:4e:da:68:18:7d:b9:3d:79:
                    fc:8d:3b:28:87:1c:69:a0:49:84:43:51:e2:64:ea:
                    1e:9b:00:27:63:1a:d3:78:35:1e:88:ee:c8:78:34:
                    b8:d7:f6:a7:9f:39:2d:51:8f:ac:7e:c2:01:ed:9d:
                    a7:79:59:a1:d5:ae:47:23:30:a8:b0:a7:ee:9c:ab:
                    af:4d:74:25:e7:43:2c:27:b7:10:27:7a:b3:43:9c:
                    52:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:1E:D0:AD:BD:C7:54:D8:F4:91:6B:F1:13:12:02:3F:FB:D8:B6:D8
            X509v3 Authority Key Identifier:
                keyid:FC:22:04:2D:76:8B:13:FF:DA:82:9C:B3:F1:D7:D2:CF:3F:BE:8A:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CIELXaLE__agpyz8dfSzz--ihU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c30dce-156a-4af0-bb38-a1cc1f7c897f/1/_CIELXaLE__agpyz8dfSzz--ihU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c30dce-156a-4af0-bb38-a1cc1f7c897f/1/_CIELXaLE__agpyz8dfSzz--ihU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:28:18:08:9b:28:6c:a4:1e:8f:3b:93:a2:7e:e2:b3:55:13:
         5d:51:2a:98:d5:1c:bf:1e:4d:cb:89:43:e2:d4:f1:36:b1:15:
         a4:1e:99:f9:ee:4c:5d:d2:16:42:27:c7:21:e6:88:71:46:30:
         51:f7:fe:a5:8d:19:7c:50:16:e2:18:05:d5:e8:32:3a:40:c8:
         5e:e9:2e:87:65:7a:a4:84:b7:6f:ce:13:d5:00:7f:99:21:ac:
         a8:8a:e0:34:ed:6b:dd:cc:69:81:97:c3:48:48:c5:86:03:64:
         c5:60:ca:e4:94:37:1f:45:77:d4:a5:7f:38:9f:b4:6f:67:7f:
         e6:87:87:2e:20:45:13:f2:25:43:f1:5d:34:c9:3b:44:75:1c:
         97:74:8d:10:a3:41:bf:d2:41:36:53:9e:94:d2:21:d6:29:24:
         6c:df:6e:9c:4a:d2:85:e8:24:a2:fd:28:05:79:67:9e:eb:d7:
         e2:a0:40:64:38:83:a3:1b:b7:7e:d0:2b:82:28:77:36:af:7e:
         4e:20:4f:19:dd:01:41:a5:98:0a:25:e4:7c:76:00:fe:72:10:
         6f:26:3f:61:98:dc:c9:4f:1c:0c:f2:7d:ab:a9:7d:88:12:0c:
         88:9d:b3:57:dc:ce:9e:55:23:73:2a:ac:28:15:46:55:49:5c:
         f7:1e:04:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncuFIzZCGs2soAjL5wlu2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMjIwNDJkNzY4YjEzZmZkYTgyOWNiM2YxZDdkMmNmM2Zi
ZThhMTUwHhcNMjYwMzI2MDAwMjEzWhcNMjYwMzI3MDAwMjEzWjAzMTEwLwYDVQQD
EygzMTFlZDBhZGJkYzc1NGQ4ZjQ5MTZiZjExMzEyMDIzZmZiZDhiNmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IlKmkivOsPZUGyX5OelSML1oG3/
eAbqbulKPtzJeauy5UiLW06Zof0Z0suV183hSPVdgVuCNP9RgmT5bOedgkGQYz20
XTns52HBA1cR6Y/B3l9gtMzuzrAaKpZAaByCpztk4ACIrMc3OEjvt/VDVB+9IPCq
dfmt2a4VqQkuUNrSkfb5n7CLPI6eZKwG8rSd/yS9hnATCIf/47TbzjRMAranu98d
VBOceeBsTtpoGH25PXn8jTsohxxpoEmEQ1HiZOoemwAnYxrTeDUeiO7IeDS41/an
nzktUY+sfsIB7Z2neVmh1a5HIzCosKfunKuvTXQl50MsJ7cQJ3qzQ5xSgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDEe0K29x1TY9JFr8RMSAj/72LbYMB8GA1UdIwQY
MBaAFPwiBC12ixP/2oKcs/HX0s8/vooVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0NJRUxYYUxFX19hZ3B5ejhkZlN6ei0taWhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9jMzBkY2UtMTU2YS00YWYwLWJiMzgt
YTFjYzFmN2M4OTdmLzEvX0NJRUxYYUxFX19hZ3B5ejhkZlN6ei0taWhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9jMzBkY2UtMTU2YS00YWYwLWJiMzgtYTFjYzFmN2M4OTdm
LzEvX0NJRUxYYUxFX19hZ3B5ejhkZlN6ei0taWhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATygYCJso
bKQejzuTon7is1UTXVEqmNUcvx5Ny4lD4tTxNrEVpB6Z+e5MXdIWQifHIeaIcUYw
Uff+pY0ZfFAW4hgF1egyOkDIXukuh2V6pIS3b84T1QB/mSGsqIrgNO1r3cxpgZfD
SEjFhgNkxWDK5JQ3H0V31KV/OJ+0b2d/5oeHLiBFE/IlQ/FdNMk7RHUcl3SNEKNB
v9JBNlOelNIh1ikkbN9unErShegkov0oBXlnnuvX4qBAZDiDoxu3ftArgih3Nq9+
TiBPGd0BQaWYCiXkfHYA/nIQbyY/YZjcyU8cDPJ9q6l9iBIMiJ2zV9zOnlUjcyqs
KBVGVUlc9x4EeA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:42:29 2026 by rpki-client