Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
File:                     x5g7OpdY_L54cz2RVa7SZsiCojw.mft (raw, json)
Hash identifier:          Z5vHC8uTnMOSrf/MUyKm38//9lzJGRJxx1b41ac4r3g=
Subject key identifier:   58:3D:6B:1C:24:04:12:69:6C:D4:CC:F4:F0:27:EC:9D:34:91:67:AB
Authority key identifier: C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C
Certificate issuer:       /CN=c7983b3a9758fcbe78733d9155aed266c882a23c
Certificate serial:       019D2771DA6CC61EDFD64554ABE15FE7C774
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
Manifest number:          1599
Signing time:             Thu 26 Mar 2026 00:01:06 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:06 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:06 +0000
Files and hashes:         1: INecSgDNWHvp6sU-WpJihfiFh4s.roa (hash: PMEEstkE23N+oMl4zNZYpTJcYs3rPhZEK/XuV630Gno=)
                          2: f25A04rpXtD2_br_jQIVVfQ8etM.roa (hash: iSZljQkRURevE7K28zcSzw6RdndhY9rvXLjgdmSdTqY=)
                          3: ggUa6LfIuLLVR5P1Qr24VmoyZso.roa (hash: rdmuXEokTMYqrj4xUmy2EZVO5gA++Wv14CxkDlRPOSQ=)
                          4: gnB4DwAgCjyQcWFzJEdE7GWr73o.roa (hash: HW/BGej/dJUcVDYCwLRVJHa3/FSej9vAGH4VzbSF+To=)
                          5: tmpjXkdMeErzXzSF-Knv6lEK4MM.roa (hash: 59w580G8bYKyMW9mWYISKVPkaSir7aOf2hHeB7WsN6s=)
                          6: w_ptOPR66g-2hUDEWzrs74clcAE.roa (hash: 6vuuqzAxRKqIgwnNrTyFV+eVf/OZTeXgi5JQBVeXXCI=)
                          7: x5g7OpdY_L54cz2RVa7SZsiCojw.crl (hash: K7qtCaFNPzUMQ/Yr8ju9OKcDUY1p4/AuFkDWoeLhISY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:71:da:6c:c6:1e:df:d6:45:54:ab:e1:5f:e7:c7:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7983b3a9758fcbe78733d9155aed266c882a23c
        Validity
            Not Before: Mar 26 00:01:06 2026 GMT
            Not After : Mar 27 00:01:06 2026 GMT
        Subject: CN=583d6b1c240412696cd4ccf4f027ec9d349167ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7f:e4:f5:ee:c6:ae:0b:33:90:b2:bb:0e:6c:
                    f6:26:de:95:01:a7:33:63:b2:cf:c4:0b:eb:58:b2:
                    1c:cc:9c:9b:03:20:0e:c1:ea:76:bc:96:c8:6b:e7:
                    dc:a5:22:40:56:48:a3:19:ab:1f:f0:f9:cc:65:d1:
                    cc:58:d6:4f:7b:99:b1:48:a5:ae:95:ee:c3:08:81:
                    b1:87:d1:d6:97:5b:51:48:ad:33:fe:2a:67:23:f1:
                    84:da:9e:ba:e2:7a:b3:01:8b:ee:6a:32:37:e4:7c:
                    44:ab:9a:00:89:9e:79:34:46:33:95:2f:fa:6d:5c:
                    8c:b5:52:6a:95:5a:8f:d3:64:df:af:0e:25:7e:6f:
                    6c:d0:22:e8:19:e9:be:a7:d9:16:41:47:ca:15:98:
                    43:1a:1d:a4:88:64:5b:e8:c5:a1:43:c7:a8:9f:e2:
                    f9:2e:b7:bc:6f:29:69:c2:05:34:52:92:33:ec:8b:
                    d6:ce:44:72:63:7a:cc:37:3c:0e:70:52:ca:17:05:
                    43:f2:d3:0d:38:a9:5f:98:c3:ae:07:0c:08:0e:33:
                    31:2e:8d:57:26:a4:91:9b:f6:86:11:0c:83:ab:24:
                    d6:f3:43:97:68:4f:e4:14:20:e5:b7:3d:42:9c:f7:
                    41:de:6d:b4:ac:a0:4d:ac:55:cc:b9:bb:9c:62:fb:
                    ba:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:3D:6B:1C:24:04:12:69:6C:D4:CC:F4:F0:27:EC:9D:34:91:67:AB
            X509v3 Authority Key Identifier:
                keyid:C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:d2:05:47:5c:57:2d:2d:56:5b:f5:ed:94:4a:6c:9a:0d:18:
         ab:aa:fd:32:ef:7c:bb:39:29:66:21:d7:0c:d9:dc:21:a8:80:
         2d:c6:2a:40:f8:15:3f:69:2d:8e:85:92:1b:97:8c:78:7d:cf:
         03:f4:74:46:4d:4f:2e:73:e7:05:36:c7:09:b8:0e:cf:70:57:
         34:4a:eb:83:40:05:f7:8e:2c:5a:15:ce:e9:76:5b:4a:fd:15:
         75:c3:51:3f:81:dd:2f:95:77:c4:f3:91:8a:00:85:1a:55:42:
         6a:7b:b4:44:5d:38:d0:75:cf:8c:68:e0:33:94:ae:2e:b8:e1:
         50:f1:03:21:55:0e:49:6e:50:e2:ba:18:dc:06:f7:23:5c:94:
         c6:5f:29:49:3c:7f:75:dc:86:5b:3a:0c:56:47:65:1d:67:94:
         ce:0d:12:bb:b1:45:81:e3:76:76:f8:d4:33:31:3c:25:12:8c:
         67:5f:60:9a:81:f5:44:65:9f:92:03:ec:9d:6a:5d:ac:8a:85:
         6f:cf:ec:67:21:7b:02:13:a8:4d:10:0d:46:0c:e3:f6:0d:f7:
         d5:fa:5a:5c:82:2a:df:03:bb:c1:83:1b:87:30:c6:17:8b:1e:
         9e:1a:03:b2:60:59:d9:7c:2a:4a:1e:cb:0b:6d:fa:d8:db:e9:
         fc:13:b6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:49:49 2026 by rpki-client