Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft
File:                     A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft (raw, json)
Hash identifier:          nlzHwFshwGXC+05cWyDXUJdmwBu4+STVPuw10fmKl80=
Subject key identifier:   75:5C:CF:CB:82:D0:6D:8D:E7:9B:52:36:D4:B8:4A:BC:B6:D2:62:61
Authority key identifier: 03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83
Certificate issuer:       /CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683
Certificate serial:       019D2583FA4758422A11DE9F8A4E5F3CE73E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft
Manifest number:          12CE
Signing time:             Wed 25 Mar 2026 15:01:39 +0000
Manifest this update:     Wed 25 Mar 2026 15:01:39 +0000
Manifest next update:     Thu 26 Mar 2026 15:01:39 +0000
Files and hashes:         1: 0p95IngmkZetH0gXJAOs3SDAY0E.roa (hash: LNPnqbLWCMHvDTcExFmSigDZZyvSElARaSkh4q6WPOA=)
                          2: A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl (hash: 1XUvJlY9T6ezgWoPi8ptVKcOu/U3dc4BELQD+GnT59w=)
                          3: Kmej-qj8fPfHORtg4SVaVONzC0U.roa (hash: 6jPhrS5Z1S4tcgzddswtFrBAws8weds+gbgTtA+mUrw=)
                          4: QpnXyX_umcsmqvreaTpX1ie0BoE.roa (hash: QyePGZ/3nR4Ec0qcv35y65LN0I6BsNvKBqNN8cDu/NU=)
                          5: YwRJ2tVF3VFoI8oBKxmxmrlWvzU.roa (hash: e5XlfGq0oDoZyjw7Mj6ppUzfy4+mxsWTLSJb/MkUC8s=)
                          6: fG4rAo9hnNmK3VLhmWi71rIfAd8.roa (hash: gGzEO/u7SMQDSlMk5ffb5FzkNVdHLmHQvEqqwyoxESc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:83:fa:47:58:42:2a:11:de:9f:8a:4e:5f:3c:e7:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683
        Validity
            Not Before: Mar 25 15:01:39 2026 GMT
            Not After : Mar 26 15:01:39 2026 GMT
        Subject: CN=755ccfcb82d06d8de79b5236d4b84abcb6d26261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7e:70:51:7e:dc:58:a7:c6:10:1b:3b:39:a7:
                    4f:66:65:96:b8:ef:e9:34:e9:5b:04:d9:41:ad:4c:
                    6b:48:ab:6a:54:87:4c:8f:34:ff:ca:c2:14:f8:28:
                    c5:3f:32:e5:3c:08:1b:70:6e:58:27:e6:45:5a:52:
                    d6:4a:70:f8:9a:f3:bd:b0:45:02:a2:fc:93:9e:63:
                    a1:96:02:5b:5d:b8:c8:f4:d2:d9:d4:7c:7c:26:76:
                    76:a2:4e:85:a4:c3:72:35:41:aa:85:24:2a:d5:65:
                    d1:0e:7b:a9:5b:5b:ae:79:26:b3:e2:19:a0:32:d1:
                    f1:9b:8f:f3:0c:60:50:2a:9a:cb:b0:4f:2a:20:54:
                    90:85:cd:6b:3e:4a:79:c0:23:d6:8b:05:02:ac:c9:
                    49:b6:93:9e:eb:ba:3d:fd:93:ef:69:22:d7:da:d8:
                    98:0e:c2:fb:67:27:a6:05:ff:5f:ad:87:1f:0e:de:
                    68:bc:ef:ce:2a:ed:e7:06:b8:4e:d2:9e:4a:45:bc:
                    4b:4c:17:57:db:07:3b:58:eb:8f:86:e0:9c:4a:9b:
                    47:d1:66:63:6f:8d:df:87:99:b9:d2:95:47:51:00:
                    b9:b8:68:30:86:fc:d4:ba:9e:5c:43:62:75:0c:18:
                    9d:4f:08:fc:25:d5:24:49:91:5e:c3:58:3b:d3:24:
                    05:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:5C:CF:CB:82:D0:6D:8D:E7:9B:52:36:D4:B8:4A:BC:B6:D2:62:61
            X509v3 Authority Key Identifier:
                keyid:03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:48:20:c2:41:4f:70:3b:80:d0:b7:d5:5c:7c:21:2b:41:28:
         7f:51:c4:2b:0a:8b:9a:20:88:a8:96:27:cf:3c:ad:c5:bc:ad:
         7e:ef:1b:f1:d1:54:e5:f0:51:4c:1b:d5:18:33:e2:e2:2d:17:
         03:3b:bf:3b:8d:c8:1d:73:06:1b:99:88:bb:6c:c0:16:73:33:
         f6:a2:59:69:06:50:88:8a:d0:77:e5:f3:8e:ad:80:6d:24:d2:
         c7:eb:ee:fc:e4:dd:fd:29:08:d9:97:d0:6f:d5:b8:3a:84:ff:
         0a:d9:69:2d:a4:09:4c:62:e3:cf:c9:ff:af:20:8c:4b:27:1a:
         b1:4f:0b:ae:2d:45:1e:47:7f:3a:dd:e0:b5:82:bd:7e:be:06:
         54:58:a8:4a:6d:47:c4:a2:ff:da:ce:52:05:d2:b2:a4:91:4c:
         8a:7c:ca:f2:a9:e1:03:9a:c3:79:68:90:a7:bc:62:70:ab:51:
         4c:0f:be:15:05:f1:07:26:d6:8b:38:2d:c7:be:af:4c:af:e7:
         e9:32:41:f5:cd:ba:ee:9b:df:72:99:81:44:62:2b:45:59:5b:
         5c:0b:57:6c:29:ae:90:4b:7e:e2:dd:9a:d0:92:c5:a5:02:ab:
         54:35:1e:86:b1:e8:b9:a6:5d:9a:12:9d:88:37:da:ca:63:8a:
         bd:8b:d3:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lg/pHWEIqEd6fik5fPOc+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZjdlN2NmODE3NmUzMDI3NjRkNDgyOTlmYzIyYTliZGM2
YmE2ODMwHhcNMjYwMzI1MTUwMTM5WhcNMjYwMzI2MTUwMTM5WjAzMTEwLwYDVQQD
Eyg3NTVjY2ZjYjgyZDA2ZDhkZTc5YjUyMzZkNGI4NGFiY2I2ZDI2MjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArn5wUX7cWKfGEBs7OadPZmWWuO/p
NOlbBNlBrUxrSKtqVIdMjzT/ysIU+CjFPzLlPAgbcG5YJ+ZFWlLWSnD4mvO9sEUC
ovyTnmOhlgJbXbjI9NLZ1Hx8JnZ2ok6FpMNyNUGqhSQq1WXRDnupW1uueSaz4hmg
MtHxm4/zDGBQKprLsE8qIFSQhc1rPkp5wCPWiwUCrMlJtpOe67o9/ZPvaSLX2tiY
DsL7ZyemBf9frYcfDt5ovO/OKu3nBrhO0p5KRbxLTBdX2wc7WOuPhuCcSptH0WZj
b43fh5m50pVHUQC5uGgwhvzUup5cQ2J1DBidTwj8JdUkSZFew1g70yQFwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHVcz8uC0G2N55tSNtS4Sry20mJhMB8GA1UdIwQY
MBaAFAP358+BduMCdk1IKZ/CKpvca6aDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQV9mbno0RjI0d0oyVFVncG44SXFtOXhycG9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9hZTQ1NDctMmNhMi00Y2JkLWExYjUt
M2NmM2I0NjNhODZhLzEvQV9mbno0RjI0d0oyVFVncG44SXFtOXhycG9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9hZTQ1NDctMmNhMi00Y2JkLWExYjUtM2NmM2I0NjNhODZh
LzEvQV9mbno0RjI0d0oyVFVncG44SXFtOXhycG9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM0ggwkFP
cDuA0LfVXHwhK0Eof1HEKwqLmiCIqJYnzzytxbytfu8b8dFU5fBRTBvVGDPi4i0X
Azu/O43IHXMGG5mIu2zAFnMz9qJZaQZQiIrQd+Xzjq2AbSTSx+vu/OTd/SkI2ZfQ
b9W4OoT/CtlpLaQJTGLjz8n/ryCMSycasU8Lri1FHkd/Ot3gtYK9fr4GVFioSm1H
xKL/2s5SBdKypJFMinzK8qnhA5rDeWiQp7xicKtRTA++FQXxBybWizgtx76vTK/n
6TJB9c267pvfcpmBRGIrRVlbXAtXbCmukEt+4t2a0JLFpQKrVDUehrHouaZdmhKd
iDfaymOKvYvTvw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:28:30 2026 by rpki-client