Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
File:                     10zp2eGKKooGy02bCLWc12siEYQ.mft (raw, json)
Hash identifier:          9ryfPSURYiYOWo+KIIY+Se5k4Phq4hIhTaFscjOL9oI=
Subject key identifier:   63:50:0D:73:33:2E:8C:DA:75:14:5B:7F:06:3F:FB:2F:E7:4D:71:4E
Authority key identifier: D7:4C:E9:D9:E1:8A:2A:8A:06:CB:4D:9B:08:B5:9C:D7:6B:22:11:84
Certificate issuer:       /CN=d74ce9d9e18a2a8a06cb4d9b08b59cd76b221184
Certificate serial:       019D26CD37E7573D61A63A23A39F739A343E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
Manifest number:          1886
Signing time:             Wed 25 Mar 2026 21:01:16 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:16 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:16 +0000
Files and hashes:         1: 10zp2eGKKooGy02bCLWc12siEYQ.crl (hash: KxaaYVpo2+BG4pf24TJUgjMuMnLsli3GpkYCV8Zw9GY=)
                          2: bxelCDFcvnlj3q_RHWvXRa9LBvo.roa (hash: 3ikPYI75wofgR7u+U2mor2EPydTGzEdXUY4L1ZgdpHY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cd:37:e7:57:3d:61:a6:3a:23:a3:9f:73:9a:34:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d74ce9d9e18a2a8a06cb4d9b08b59cd76b221184
        Validity
            Not Before: Mar 25 21:01:16 2026 GMT
            Not After : Mar 26 21:01:16 2026 GMT
        Subject: CN=63500d73332e8cda75145b7f063ffb2fe74d714e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7f:d8:05:7e:65:3d:d8:c4:ca:98:39:f2:d8:
                    9b:7e:a0:30:1d:bf:66:bb:0d:b5:04:c9:48:3d:41:
                    a8:3a:2d:84:35:0e:49:3f:f5:89:d2:7c:51:4d:8d:
                    03:e7:00:5c:bf:e8:ea:d3:10:0f:16:20:7c:e3:00:
                    26:e1:a5:28:3a:39:5a:63:97:30:ad:19:18:c3:75:
                    c2:be:5e:dc:35:94:5a:bb:b1:0f:0e:89:63:9a:57:
                    fe:e8:ac:b6:49:23:22:c7:e7:45:10:78:d0:7d:13:
                    1e:1f:cc:87:41:86:1c:c0:1e:22:57:fb:a0:d2:fa:
                    08:31:e0:d9:b6:4e:02:a7:9e:a6:84:4e:35:bb:6d:
                    dd:6b:f1:3e:e9:8a:fb:91:b0:16:83:5b:3b:1c:64:
                    9b:50:63:1b:76:3c:83:8d:1b:5b:9b:4b:78:c4:1c:
                    67:c7:46:07:fa:fb:4d:f2:2f:d0:ea:e5:89:0f:aa:
                    28:9e:03:33:61:ba:1e:57:a1:62:d7:de:04:fe:16:
                    58:15:aa:71:db:1e:f3:bd:37:21:20:c7:b6:e3:07:
                    ba:a1:ca:17:e1:45:c9:92:08:3e:87:47:70:23:73:
                    e8:7c:a5:8d:12:d4:a9:16:c2:5c:ae:7a:51:a2:84:
                    e4:88:03:33:66:ff:2d:85:0b:3c:48:1b:d9:8e:28:
                    c9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:50:0D:73:33:2E:8C:DA:75:14:5B:7F:06:3F:FB:2F:E7:4D:71:4E
            X509v3 Authority Key Identifier:
                keyid:D7:4C:E9:D9:E1:8A:2A:8A:06:CB:4D:9B:08:B5:9C:D7:6B:22:11:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:8a:1c:7c:6f:87:25:0f:d6:42:0b:69:21:f7:36:e4:c3:3f:
         b9:e4:f8:0e:73:98:64:a8:6e:e1:57:14:a2:a2:c5:f7:20:5f:
         ec:81:f2:61:c6:79:a9:ab:a3:b1:d4:61:a3:41:07:8d:8a:42:
         0d:24:94:44:98:15:78:dd:04:45:d8:fe:6c:9e:ec:60:41:43:
         55:1a:e6:6b:a8:fd:fe:63:33:2d:67:c6:4c:d4:bf:9a:90:16:
         60:79:ea:cc:d3:97:ed:03:64:19:96:4a:65:00:86:83:c5:72:
         70:83:79:db:e1:0d:4e:7c:e4:e7:60:dd:cf:17:23:5e:57:a9:
         57:e1:49:38:d3:aa:9b:f6:e8:89:75:28:ef:16:f9:d5:5c:41:
         12:35:88:d2:6f:6d:0f:f5:3e:14:41:df:65:34:de:f8:9d:24:
         4e:1e:61:7f:8d:64:99:24:8b:2a:09:09:34:c8:5e:53:97:25:
         3e:1f:29:15:f4:a6:81:33:67:da:01:04:b2:ca:74:fc:ba:8c:
         4a:f7:c0:9e:0b:7e:10:d6:40:c5:47:03:fc:83:64:d5:a0:e4:
         91:86:ac:41:25:d5:f2:ea:7c:18:43:01:68:90:c7:f0:5c:3f:
         44:8f:2c:45:5b:3e:64:33:cc:24:0e:4b:95:4e:ab:f1:cb:65:
         73:d9:c5:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzTfnVz1hpjojo59zmjQ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NGNlOWQ5ZTE4YTJhOGEwNmNiNGQ5YjA4YjU5Y2Q3NmIy
MjExODQwHhcNMjYwMzI1MjEwMTE2WhcNMjYwMzI2MjEwMTE2WjAzMTEwLwYDVQQD
Eyg2MzUwMGQ3MzMzMmU4Y2RhNzUxNDViN2YwNjNmZmIyZmU3NGQ3MTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkH/YBX5lPdjEypg58tibfqAwHb9m
uw21BMlIPUGoOi2ENQ5JP/WJ0nxRTY0D5wBcv+jq0xAPFiB84wAm4aUoOjlaY5cw
rRkYw3XCvl7cNZRau7EPDoljmlf+6Ky2SSMix+dFEHjQfRMeH8yHQYYcwB4iV/ug
0voIMeDZtk4Cp56mhE41u23da/E+6Yr7kbAWg1s7HGSbUGMbdjyDjRtbm0t4xBxn
x0YH+vtN8i/Q6uWJD6oongMzYboeV6Fi194E/hZYFapx2x7zvTchIMe24we6ocoX
4UXJkgg+h0dwI3PofKWNEtSpFsJcrnpRooTkiAMzZv8thQs8SBvZjijJ3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNQDXMzLozadRRbfwY/+y/nTXFOMB8GA1UdIwQY
MBaAFNdM6dnhiiqKBstNmwi1nNdrIhGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTB6cDJlR0tLb29HeTAyYkNMV2MxMnNpRVlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9lZDVjMWUtMmQ1Zi00MjIyLWJkYzct
NjNiOTUyNDBkNzQ1LzEvMTB6cDJlR0tLb29HeTAyYkNMV2MxMnNpRVlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9lZDVjMWUtMmQ1Zi00MjIyLWJkYzctNjNiOTUyNDBkNzQ1
LzEvMTB6cDJlR0tLb29HeTAyYkNMV2MxMnNpRVlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq4ocfG+H
JQ/WQgtpIfc25MM/ueT4DnOYZKhu4VcUoqLF9yBf7IHyYcZ5qaujsdRho0EHjYpC
DSSURJgVeN0ERdj+bJ7sYEFDVRrma6j9/mMzLWfGTNS/mpAWYHnqzNOX7QNkGZZK
ZQCGg8VycIN52+ENTnzk52DdzxcjXlepV+FJONOqm/boiXUo7xb51VxBEjWI0m9t
D/U+FEHfZTTe+J0kTh5hf41kmSSLKgkJNMheU5clPh8pFfSmgTNn2gEEssp0/LqM
SvfAngt+ENZAxUcD/INk1aDkkYasQSXV8up8GEMBaJDH8Fw/RI8sRVs+ZDPMJA5L
lU6r8ctlc9nFCg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:39:59 2026 by rpki-client