Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
File:                     1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft (raw, json)
Hash identifier:          j1t4K3C7i1bg8m54Z4pO03BqmfsTP6Aj+ejNDpJ84us=
Subject key identifier:   52:F7:EA:E7:8C:40:C4:76:44:CE:B7:8F:16:A5:54:FA:A0:B1:76:7B
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Certificate issuer:       /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial:       019D251AB05CF7AC0966C2CF595A565EFB97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
Manifest number:          18CB
Signing time:             Wed 25 Mar 2026 13:06:39 +0000
Manifest this update:     Wed 25 Mar 2026 13:06:39 +0000
Manifest next update:     Thu 26 Mar 2026 13:06:39 +0000
Files and hashes:         1: 1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl (hash: hOTfrpMkNLVtbPn+YfxPMrjrCFrgzUBgykYM2xHlDUs=)
                          2: 1-n7EdeFX20C6cFMyJ6Y5HWVMQU4.roa (hash: suKN0U6xP/FTkPKNJxFCA4VBUPU7v0a/LfB27Kibl1k=)
                          3: 5Ai_sIZQJB8aFtzqYvSr9B7GuOU.roa (hash: 6wnMllVhpaDtM68Ah+lycy0EGi1lfhyp8UE1fOfc3rk=)
                          4: 5Ha6MbyvDRVWuZ4qUrOsdBkSIFs.roa (hash: UIor+BCs9mrPP+0b8Lrn7HV4ATlK3jTAi1j4A256yaM=)
                          5: 6nafakW_FoiGF0x1s1VoLFJqiuw.roa (hash: tSlSVShZ1Ws+SLODMKOJpPu4G+R5CcazLAH7YNSqZ2c=)
                          6: 7Dwg5wFGQqErSuNtav6wSEytWn0.roa (hash: KeyWkMo6tHKMd0UPR13FjorhMTn+dRjqc0BqAQPkOvs=)
                          7: 8KG06O_ShOw-fAgF9hGpdzf3xEY.roa (hash: DVd/NvS4nhNxcSUkNJDTh5SmK4Clg69CxGJbu7seCkM=)
                          8: 9wtyd_oclLUMViGWblNWlEAAOPQ.roa (hash: K2AWf+HALDuM6Uz23jlAWhflFeUexuIRM5RCtHWCEPc=)
                          9: C0VnbFyJGyh-3dXIXN-FVbbzva4.roa (hash: nupbKfiMh1Vbm5eU6VpPOjsRTYtweNUnX1ebsHaK4hQ=)
                          10: CT3vMjevN0fYRTlNcJsck0hB60Y.roa (hash: 85AL/YEBSQNN6+KYNgUrlSLsBbfZxOy5uaLrLJGec+M=)
                          11: GnQ9nonV43lnZNoCG-ecdWqOLDk.roa (hash: 5lmMKt+idSdfaSrOW6fzEjOhALbxhOPcgnKdUuSF0JY=)
                          12: HtH0MnipsTVE3F-9FNtiu_2LNwQ.roa (hash: BGn13AFdqwObLZ5mjHyJ0u9f6CC1n+u2Nsk2L6TLrao=)
                          13: MaRo3qPa_AXa-98seLnNkzlSlLM.roa (hash: ji8JHlcGAHWKEBT5OFXPF3gvRuoRQByWZBo69DobjWw=)
                          14: W-cWYMFcdHDS1yv5jkAVjyp5ho4.asa (hash: QdAC+W0wfurd2BssKpz9U5P9YKTKUM6ZjHzLGg+JdOA=)
                          15: cQJLykBOqMGgV5KV9rcPZr-_U1Y.roa (hash: aOQV+i/NapnfOnLvAQ3Zr9czxxA22kZuub947U3fZRw=)
                          16: cRp-cVmkypbBe3-5hQ3MERFfdvI.roa (hash: af21yk690TVm1yoO9i+WiH3Y6Q+lKgW5WAHD9V6wAgo=)
                          17: fyxZLGtBW9e59RZ3aEwSKlhWT4w.roa (hash: itxLmMXkodUFbwqD5SmQmqHBd8MyF3lpLKdM1WEIZu0=)
                          18: ipuMNUIFJfwrG69f0t1BcA9T-lo.roa (hash: E/49CgkatlS4HbWzI9f4jj29KOBht+FWKi5pYDsrCiU=)
                          19: oOmWYS79EfLZM1YUVX02Dm8sbCI.roa (hash: UMtyOefWK95ZFcwkFudLsDtrliJckAkSIFBXdWfp+zQ=)
                          20: odS4gJ1H-haIP2hfRvP__EIClnA.roa (hash: frbBPZZ05GoX1i3mLnaN+IdXbfyMrpl7+ZrlTRvKVwQ=)
                          21: pHgh0geILg2H9c8tNXl-coocbok.roa (hash: MiAWsYu39mO81MmSrazkuF8uttZJWXsnb0YqEMhZmqc=)
                          22: xLvL2DDHdDsFuu0LWe_ArfxkZOU.roa (hash: jEvpZaWRUr0vww6k+sw/ZzVTbY8rHX3wan18IH9TsyY=)
                          23: yUTvxSoxh0P1X3qi3W3GEmQmupg.roa (hash: YggGVCBvHEr/or8wxjiqlTzxSxsrR2x9hxdT1duIBFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 13:06:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:1a:b0:5c:f7:ac:09:66:c2:cf:59:5a:56:5e:fb:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
        Validity
            Not Before: Mar 25 13:06:39 2026 GMT
            Not After : Mar 26 13:06:39 2026 GMT
        Subject: CN=52f7eae78c40c47644ceb78f16a554faa0b1767b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:81:25:80:e0:6e:0f:fc:ce:4c:6d:15:33:2d:
                    77:ad:dc:fb:3e:97:bb:cd:85:c1:70:2c:30:f4:30:
                    9c:35:e0:3d:9a:0a:c3:1e:25:35:27:bd:85:a8:8d:
                    0a:ad:d3:9b:be:23:00:e2:bf:ae:83:d5:92:c0:36:
                    25:2f:6c:42:42:a7:02:f1:42:20:31:f0:ad:58:65:
                    3e:2d:25:76:a0:07:14:61:6d:94:b7:04:60:57:47:
                    bc:e9:29:b5:e4:34:44:56:54:16:70:10:77:1f:72:
                    1d:93:8d:42:16:1a:da:18:02:d8:e3:3e:0d:89:15:
                    4c:d9:59:be:45:90:27:60:02:73:cb:83:ed:74:4f:
                    ef:4c:eb:17:d7:77:83:d6:b4:bb:39:25:9b:28:f8:
                    20:67:17:2d:6a:5e:41:08:31:4c:00:52:92:81:b1:
                    41:b4:dd:fd:28:04:36:00:1c:ea:a1:77:bf:ee:9b:
                    54:c4:e3:98:27:59:42:a1:d6:16:af:8e:35:74:cf:
                    67:64:1a:30:30:d5:e4:ca:b3:b8:43:08:74:61:cf:
                    95:b4:79:24:37:60:69:ff:84:8b:53:29:99:dc:10:
                    10:25:c7:42:1b:7f:f8:b2:48:09:80:dd:71:10:8c:
                    48:6b:b5:63:b3:6f:22:66:4c:0e:ad:3c:41:06:6b:
                    d4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F7:EA:E7:8C:40:C4:76:44:CE:B7:8F:16:A5:54:FA:A0:B1:76:7B
            X509v3 Authority Key Identifier:
                keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:c1:eb:a7:1f:fe:2e:91:ef:3a:06:df:d7:8d:8c:23:2e:c9:
         41:d2:22:18:3f:f0:66:b5:2f:5e:db:eb:d7:6a:78:a3:91:e7:
         2b:33:8c:e6:66:e9:15:1e:b8:2e:0e:cd:03:1f:c2:0e:92:ee:
         68:c6:82:98:f1:cc:a0:d5:fe:5c:69:22:09:64:42:76:fa:fe:
         49:73:f5:09:17:ae:04:72:4d:2a:b1:94:80:00:b3:e3:a2:1e:
         78:c7:2c:85:e7:f8:11:f7:f3:81:9e:66:06:16:cd:e1:49:9f:
         41:94:6d:d7:36:5b:44:c2:9f:e8:20:35:a6:64:fc:52:b3:5e:
         03:1a:96:1f:0e:ff:0c:b0:f9:b0:f7:2e:6c:c3:85:95:0a:c9:
         65:45:50:01:c4:cd:37:d4:14:84:fd:d7:0b:4d:1c:c2:d8:08:
         0b:7f:18:8f:a0:3d:e3:c6:6d:86:83:6f:92:52:82:b4:b4:90:
         1c:73:2a:24:06:0e:65:a4:5f:9a:ee:d3:d4:7d:f6:4b:6e:9c:
         f5:28:9f:f7:0b:cd:38:82:62:e0:1a:b5:e6:3b:f7:60:e5:6a:
         0b:1b:93:d3:5b:e9:91:0e:c8:a4:b3:83:f8:fe:b4:84:ba:0a:
         ab:9b:18:b9:11:df:62:97:55:3c:0b:a3:d3:40:d7:33:f7:e7:
         45:d5:2e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:29:38 2026 by rpki-client