Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
File:                     1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft (raw, json)
Hash identifier:          O13h1rg06qkePSxdY2Jq0f5alzbQl6jHubPNZYObEYA=
Subject key identifier:   04:FE:93:F9:CF:71:80:2E:94:5C:0B:08:1B:4B:11:5C:97:AE:4C:0D
Authority key identifier: D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
Certificate issuer:       /CN=d50697943676399ac5cac6a3e476545af0df49dd
Certificate serial:       019D2884807CECDA48090D42A57586C3FAEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
Manifest number:          0ACF
Signing time:             Thu 26 Mar 2026 05:01:05 +0000
Manifest this update:     Thu 26 Mar 2026 05:01:05 +0000
Manifest next update:     Fri 27 Mar 2026 05:01:05 +0000
Files and hashes:         1: 1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl (hash: U6Swfn2bxbwRBAyiiZXZoyy8Udg/53ivjvbHdbj7SYg=)
                          2: Rb6ICVosTC_zaZ16edh9MPPlC-4.roa (hash: f7bv124K8RG4yyZpz3BCEJydd5vMDmuet5IH5Sqpc1Q=)
                          3: X9Dk1AunWGE1Dosy-zP1Hnz0r7o.roa (hash: /pQF82MMJDZaxsI41JYaoLCQk3D/NV9NF4tHkKVR/m4=)
                          4: iM_ZBvtG32QBlHfVIn2ttPitF3A.roa (hash: n0U6ZQ9IjEu52Acx8IHWzTTmN0Tm9iyKYJwGHBgAhus=)
                          5: y81jmZh2IG1vc4T2rX8QCQEOL9E.roa (hash: Y1jjyD/MrRS3ujVJRgR28FUQy55OTENwus5vMZGjmSg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 05:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:80:7c:ec:da:48:09:0d:42:a5:75:86:c3:fa:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d50697943676399ac5cac6a3e476545af0df49dd
        Validity
            Not Before: Mar 26 05:01:05 2026 GMT
            Not After : Mar 27 05:01:05 2026 GMT
        Subject: CN=04fe93f9cf71802e945c0b081b4b115c97ae4c0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:20:7f:f5:fd:7b:f4:1e:c7:63:53:b1:b8:32:
                    1a:22:0e:e7:6d:ce:e7:54:80:b7:96:f2:7b:4d:ab:
                    80:ef:d3:73:ff:5f:14:f3:2c:30:70:05:ea:25:2b:
                    f1:8c:9a:4b:35:8f:e1:96:a6:96:68:8f:cd:c2:e1:
                    82:c9:06:da:90:e0:c9:17:85:00:8e:c0:98:4e:17:
                    44:8d:e6:1d:c2:25:3a:3a:1f:77:4c:78:22:80:00:
                    ce:77:90:fd:33:3e:37:f4:c5:66:17:71:cf:50:49:
                    5f:59:d0:29:44:cb:d3:6a:92:23:b0:98:55:68:6c:
                    e2:29:e9:1f:b1:2c:cd:f1:67:fe:da:f9:5a:83:d2:
                    5b:da:a8:f2:49:a0:45:45:36:44:76:79:4c:b5:b5:
                    1d:51:ea:b7:9e:7a:43:2f:d4:02:95:f4:69:21:b1:
                    01:91:bb:ef:85:be:3c:27:f0:38:91:6d:d8:25:a1:
                    cb:a8:d0:8c:8b:6c:e8:bd:66:8e:29:7b:d4:65:ea:
                    68:88:8e:cc:e0:df:3b:ca:ce:4d:79:d5:75:17:63:
                    ce:30:df:5b:62:33:4a:b9:b9:2a:47:25:4e:1b:43:
                    04:5c:47:84:d4:f6:f9:e5:4a:21:b4:03:1c:cc:e1:
                    75:69:ba:cc:a8:a0:17:e4:69:ed:4b:22:4c:16:1d:
                    11:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:FE:93:F9:CF:71:80:2E:94:5C:0B:08:1B:4B:11:5C:97:AE:4C:0D
            X509v3 Authority Key Identifier:
                keyid:D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:f8:f1:59:ee:00:8f:75:99:02:dc:b6:2b:a2:c6:55:4f:d9:
         5c:e4:d4:65:71:28:38:2b:f8:75:b0:45:30:5f:79:e1:4a:7e:
         db:51:2e:eb:ef:16:e5:2b:0c:c5:c6:ce:8e:ba:8a:48:97:8b:
         3e:94:45:2b:b8:91:1d:2a:c9:d8:37:2e:bc:69:16:bc:6e:05:
         14:c2:60:36:db:19:04:6b:97:f7:25:72:57:59:76:4d:13:ad:
         80:9b:e2:d8:34:53:a1:fe:d0:53:fb:42:36:44:53:14:6d:2a:
         a2:a7:c1:b8:00:92:c0:a7:4f:3f:b7:71:66:20:c8:d5:bf:b3:
         b3:7f:68:e0:06:61:c7:b6:3e:f1:ce:c5:f2:6e:d6:d6:37:fc:
         91:14:2e:33:ac:82:e5:6e:6e:0d:70:98:44:d9:79:77:d8:be:
         e5:02:a4:cc:14:43:8c:1d:ea:48:57:08:ea:2e:09:3d:f8:93:
         ae:38:39:e1:65:57:16:88:5b:0d:ce:93:88:85:0b:c7:3e:0f:
         10:83:be:a1:35:e5:40:f3:22:46:d1:75:7b:e1:cc:d7:7a:f7:
         34:7c:12:a2:7b:c8:07:da:79:ca:4c:bb:3d:69:2d:00:47:2a:
         5d:28:13:13:d4:93:6a:79:45:bf:bb:9d:5e:c7:8a:75:56:e5:
         8c:b2:15:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohIB87NpICQ1CpXWGw/rrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MDY5Nzk0MzY3NjM5OWFjNWNhYzZhM2U0NzY1NDVhZjBk
ZjQ5ZGQwHhcNMjYwMzI2MDUwMTA1WhcNMjYwMzI3MDUwMTA1WjAzMTEwLwYDVQQD
EygwNGZlOTNmOWNmNzE4MDJlOTQ1YzBiMDgxYjRiMTE1Yzk3YWU0YzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyB/9f179B7HY1OxuDIaIg7nbc7n
VIC3lvJ7TauA79Nz/18U8ywwcAXqJSvxjJpLNY/hlqaWaI/NwuGCyQbakODJF4UA
jsCYThdEjeYdwiU6Oh93THgigADOd5D9Mz439MVmF3HPUElfWdApRMvTapIjsJhV
aGziKekfsSzN8Wf+2vlag9Jb2qjySaBFRTZEdnlMtbUdUeq3nnpDL9QClfRpIbEB
kbvvhb48J/A4kW3YJaHLqNCMi2zovWaOKXvUZepoiI7M4N87ys5NedV1F2POMN9b
YjNKubkqRyVOG0MEXEeE1Pb55UohtAMczOF1abrMqKAX5GntSyJMFh0RiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAT+k/nPcYAulFwLCBtLEVyXrkwNMB8GA1UdIwQY
MBaAFNUGl5Q2djmaxcrGo+R2VFrw30ndMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVFhWGxEWjJPWnJGeXNhajVIWlVXdkRmU2QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS81ZjZhZmYtMTNiYi00ZGI4LTk1N2Yt
OGQyM2FjNWNiNTAyLzEvMVFhWGxEWjJPWnJGeXNhajVIWlVXdkRmU2QwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS81ZjZhZmYtMTNiYi00ZGI4LTk1N2YtOGQyM2FjNWNiNTAy
LzEvMVFhWGxEWjJPWnJGeXNhajVIWlVXdkRmU2QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXfjxWe4A
j3WZAty2K6LGVU/ZXOTUZXEoOCv4dbBFMF954Up+21Eu6+8W5SsMxcbOjrqKSJeL
PpRFK7iRHSrJ2DcuvGkWvG4FFMJgNtsZBGuX9yVyV1l2TROtgJvi2DRTof7QU/tC
NkRTFG0qoqfBuACSwKdPP7dxZiDI1b+zs39o4AZhx7Y+8c7F8m7W1jf8kRQuM6yC
5W5uDXCYRNl5d9i+5QKkzBRDjB3qSFcI6i4JPfiTrjg54WVXFohbDc6TiIULxz4P
EIO+oTXlQPMiRtF1e+HM13r3NHwSonvIB9p5yky7PWktAEcqXSgTE9STanlFv7ud
XseKdVbljLIV4Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:54:16 2026 by rpki-client