Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft
File:                     1-FVaeIP5K5-bpCKpa045e_X7j8c.mft (raw, json)
Hash identifier:          WJU61BN4RYup1CI8Hp20CCRM+h6AQlntDy1KfaFiPsc=
Subject key identifier:   40:32:93:89:11:A3:2E:39:BD:2F:59:F6:B4:C1:0C:C6:D2:8D:D1:A7
Authority key identifier: F8:55:5A:78:83:F9:2B:9F:9B:A4:22:A9:6B:4E:39:7B:F5:FB:8F:C7
Certificate issuer:       /CN=f8555a7883f92b9f9ba422a96b4e397bf5fb8fc7
Certificate serial:       019D28167264989C444C6F94BEE4425D17AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft
Manifest number:          119B
Signing time:             Thu 26 Mar 2026 03:00:52 +0000
Manifest this update:     Thu 26 Mar 2026 03:00:52 +0000
Manifest next update:     Fri 27 Mar 2026 03:00:52 +0000
Files and hashes:         1: 1-FVaeIP5K5-bpCKpa045e_X7j8c.crl (hash: /lUHxZ85ayugwTTRkPwTN2py+vfxcafZACXxkFVN5+o=)
                          2: KO-QbiA4B8Fqmh4PoUG1b2CWqyo.roa (hash: AQjqAS5i/LVUFXeGIyKdhva6id7Kjy8HsHgnyuWVcqc=)
                          3: LBp-f2wTeEG__GeuFL9S2VPjFS4.roa (hash: jbigl4wtO4I3oLlMsdwWFhj1QBqpQaBQsh/wEl6VUQo=)
                          4: T7-uQqlLNMsiccxdjsoaTK4wseo.roa (hash: +BKfpUhxoHfLf7cPj1R21xoP1tto5+gxC04QZRCZI6c=)
                          5: ap691plquRdyX3vt85LxuWpbm1c.roa (hash: khufkxMKrWAd/D05QdS5OQV/ljvmohRpPsDkx0sZzKs=)
                          6: eWAGfLfEp43y_iN-RtSZfG1D49U.roa (hash: POgI5hw92swzuRADnz2nsMp43qgG4i2QfhiIQqJZJqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:72:64:98:9c:44:4c:6f:94:be:e4:42:5d:17:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8555a7883f92b9f9ba422a96b4e397bf5fb8fc7
        Validity
            Not Before: Mar 26 03:00:52 2026 GMT
            Not After : Mar 27 03:00:52 2026 GMT
        Subject: CN=4032938911a32e39bd2f59f6b4c10cc6d28dd1a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b0:6a:cc:02:ea:23:73:db:46:f4:fa:f7:08:
                    87:6a:da:46:77:99:ad:76:9c:29:74:07:e4:5a:86:
                    71:9b:93:1f:f8:18:f7:fd:77:7f:31:0c:c6:3c:48:
                    63:2a:e0:45:cc:23:47:fd:25:86:51:a7:92:82:f9:
                    89:5d:1c:83:89:3c:01:f9:e9:7e:0d:3d:8f:03:30:
                    d0:60:24:eb:6e:ad:bf:96:fc:9f:36:81:d4:8d:15:
                    f8:3b:43:c0:c6:7e:41:ff:4e:7f:85:89:b3:cf:3e:
                    73:43:2f:cb:53:eb:ed:12:3c:1a:49:77:12:67:6b:
                    03:8c:7d:6d:4b:fb:aa:95:bb:c3:c8:06:cc:db:93:
                    e3:01:34:38:35:ae:17:70:a7:ff:1c:19:8d:5e:69:
                    08:0e:06:44:6b:8e:05:1b:86:a1:e2:03:db:f0:7a:
                    15:5b:1f:07:ca:61:53:fa:19:df:62:a4:57:90:cf:
                    cb:8b:9e:d2:4b:0b:f3:f5:21:1e:1b:24:fd:7e:2c:
                    f0:68:8d:96:b7:b9:21:a5:2c:db:a1:d9:5d:84:58:
                    b1:76:a8:53:73:ef:89:c0:ec:c5:6c:3d:36:33:12:
                    0e:59:7b:96:ab:58:36:5f:db:81:08:69:4e:d6:60:
                    07:e1:2c:0c:61:b6:c4:35:6d:d1:86:40:72:64:6b:
                    ed:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:32:93:89:11:A3:2E:39:BD:2F:59:F6:B4:C1:0C:C6:D2:8D:D1:A7
            X509v3 Authority Key Identifier:
                keyid:F8:55:5A:78:83:F9:2B:9F:9B:A4:22:A9:6B:4E:39:7B:F5:FB:8F:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:d7:e1:74:67:c3:87:e8:bb:14:d6:7d:0b:3e:c9:74:3a:83:
         c8:f0:1e:50:08:f5:92:b1:1e:1b:02:ce:6c:f8:d4:50:2f:d5:
         c0:dc:ba:a1:69:b4:02:81:62:14:f5:71:73:2a:19:93:22:47:
         cf:d8:7e:e3:4e:d1:f6:98:a5:54:66:02:9b:10:c8:2c:6a:10:
         e3:c2:60:a3:31:7b:bd:07:10:c4:88:ad:15:04:9c:ec:19:0b:
         b6:52:b9:67:89:0f:7e:25:3e:54:62:33:f0:62:4d:18:7b:d6:
         a0:e8:e4:20:60:49:cc:1a:a2:53:a6:e9:59:71:44:4c:87:60:
         6c:24:1e:d1:da:20:3f:2d:b3:bc:fa:db:e3:6c:e5:a0:1e:b2:
         12:45:12:8a:ef:6c:da:01:a9:17:6f:16:93:4c:2f:21:22:fc:
         21:b5:b4:d9:11:a4:49:7d:54:37:44:7f:44:e9:9c:89:58:ed:
         c6:ba:f8:e9:17:3d:e3:e2:37:bf:52:dc:c1:24:a8:ad:9c:0d:
         b1:73:6a:54:66:01:43:f3:42:89:05:d2:50:ee:c6:15:7c:a4:
         7b:07:f9:5a:c6:6f:e1:be:92:01:59:3e:19:79:23:26:2d:a4:
         64:ef:50:eb:93:75:1a:50:f1:8e:bd:63:6a:29:0c:b8:09:62:
         fd:50:b8:45
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0oFnJkmJxETG+UvuRCXReqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NTU1YTc4ODNmOTJiOWY5YmE0MjJhOTZiNGUzOTdiZjVm
YjhmYzcwHhcNMjYwMzI2MDMwMDUyWhcNMjYwMzI3MDMwMDUyWjAzMTEwLwYDVQQD
Eyg0MDMyOTM4OTExYTMyZTM5YmQyZjU5ZjZiNGMxMGNjNmQyOGRkMWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLBqzALqI3PbRvT69wiHatpGd5mt
dpwpdAfkWoZxm5Mf+Bj3/Xd/MQzGPEhjKuBFzCNH/SWGUaeSgvmJXRyDiTwB+el+
DT2PAzDQYCTrbq2/lvyfNoHUjRX4O0PAxn5B/05/hYmzzz5zQy/LU+vtEjwaSXcS
Z2sDjH1tS/uqlbvDyAbM25PjATQ4Na4XcKf/HBmNXmkIDgZEa44FG4ah4gPb8HoV
Wx8HymFT+hnfYqRXkM/Li57SSwvz9SEeGyT9fizwaI2Wt7khpSzbodldhFixdqhT
c++JwOzFbD02MxIOWXuWq1g2X9uBCGlO1mAH4SwMYbbENW3RhkByZGvtTQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFEAyk4kRoy45vS9Z9rTBDMbSjdGnMB8GA1UdIwQY
MBaAFPhVWniD+Sufm6QiqWtOOXv1+4/HMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1GVmFlSVA1SzUtYnBDS3BhMDQ1ZV9YN2o4Yy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2IvODI0NDVmLWQxZDctNDZiMC1hZjRm
LTc2NmMwNmU1ZjA3NS8xLzEtRlZhZUlQNUs1LWJwQ0twYTA0NWVfWDdqOGMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzNiLzgyNDQ1Zi1kMWQ3LTQ2YjAtYWY0Zi03NjZjMDZlNWYw
NzUvMS8xLUZWYWVJUDVLNS1icENLcGEwNDVlX1g3ajhjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGNfh
dGfDh+i7FNZ9Cz7JdDqDyPAeUAj1krEeGwLObPjUUC/VwNy6oWm0AoFiFPVxcyoZ
kyJHz9h+407R9pilVGYCmxDILGoQ48JgozF7vQcQxIitFQSc7BkLtlK5Z4kPfiU+
VGIz8GJNGHvWoOjkIGBJzBqiU6bpWXFETIdgbCQe0dogPy2zvPrb42zloB6yEkUS
iu9s2gGpF28Wk0wvISL8IbW02RGkSX1UN0R/ROmciVjtxrr46Rc94+I3v1LcwSSo
rZwNsXNqVGYBQ/NCiQXSUO7GFXykewf5WsZv4b6SAVk+GXkjJi2kZO9Q65N1GlDx
jr1jaikMuAli/VC4RQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:03 2026 by rpki-client