Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft
File:                     t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft (raw, json)
Hash identifier:          22UekRwkmx101CnLS5Pvc1NxdrID0mKfafJ79sODNSM=
Subject key identifier:   27:8F:2E:76:C3:0D:E7:09:E7:90:E2:98:77:01:D3:41:A8:A2:10:83
Authority key identifier: B7:76:27:CA:FE:75:57:85:75:0B:DE:5B:A4:9E:6C:10:91:BF:42:47
Certificate issuer:       /CN=b77627cafe755785750bde5ba49e6c1091bf4247
Certificate serial:       019D26CD310A5605C5013D2F5B3B059B6DC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft
Manifest number:          107C
Signing time:             Wed 25 Mar 2026 21:01:14 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:14 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:14 +0000
Files and hashes:         1: ZwPne8zOsgkMT0U51cJiftdsvfk.roa (hash: BIxOUNugWCSEebM0j8omjX/fG0IbzdxHMnELYPl8RdM=)
                          2: t3Ynyv51V4V1C95bpJ5sEJG_Qkc.crl (hash: V9IPRdhhC61QPcAFlS1sDtF0YnxNq9vZWmolpn3I1Tc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cd:31:0a:56:05:c5:01:3d:2f:5b:3b:05:9b:6d:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b77627cafe755785750bde5ba49e6c1091bf4247
        Validity
            Not Before: Mar 25 21:01:14 2026 GMT
            Not After : Mar 26 21:01:14 2026 GMT
        Subject: CN=278f2e76c30de709e790e2987701d341a8a21083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:01:37:bf:94:5d:cd:1d:53:a2:d9:36:0a:20:
                    5c:16:a3:81:b6:2f:c8:53:fe:33:44:39:d8:69:bd:
                    86:40:f1:b7:a8:4b:a1:08:63:b4:a2:0c:1e:c5:bd:
                    29:04:8c:ed:32:18:6e:6e:b5:d8:6f:5f:88:63:9b:
                    21:ca:f5:c8:41:a0:c6:7a:3e:2d:b4:d3:5d:77:25:
                    31:bb:57:86:89:ad:60:04:d7:b7:d3:55:a8:b1:2a:
                    f9:d5:57:f6:f5:14:ab:58:59:5c:30:2f:75:98:12:
                    2d:d9:b8:a7:1a:61:a0:7d:a7:4b:36:53:4d:ef:46:
                    b3:fa:f8:79:62:b5:16:da:e2:07:f9:0f:00:6b:f8:
                    a6:09:a4:bf:62:c8:69:89:1a:79:cf:f7:69:e5:5f:
                    e8:f0:3a:ba:c2:27:08:e1:a6:40:21:b1:c9:56:4d:
                    2b:97:b5:29:80:70:3a:64:cf:6c:fb:27:40:12:01:
                    19:34:e6:eb:67:0d:3f:4c:a9:99:bd:a8:3c:ad:3a:
                    93:5d:e7:2c:86:df:93:fe:32:28:07:1b:69:0b:ee:
                    8c:a9:a8:0d:fa:50:8d:e8:52:51:c8:da:a0:95:3a:
                    6f:c2:15:0d:02:96:c3:67:d5:8b:4e:48:ae:2d:92:
                    f8:ce:89:f1:09:9d:a5:29:ac:79:40:f5:97:27:95:
                    99:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:8F:2E:76:C3:0D:E7:09:E7:90:E2:98:77:01:D3:41:A8:A2:10:83
            X509v3 Authority Key Identifier:
                keyid:B7:76:27:CA:FE:75:57:85:75:0B:DE:5B:A4:9E:6C:10:91:BF:42:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:4e:5a:68:80:8c:68:82:a9:cf:27:87:92:fe:06:b6:ff:b5:
         35:09:e4:22:b3:84:02:0f:bb:9a:f9:65:91:11:6e:05:bd:16:
         b1:ac:10:1c:52:c6:dc:db:0b:44:34:0e:9b:ac:f9:ce:15:69:
         e1:13:63:5b:99:97:30:a8:a4:bf:4e:5b:1e:98:e4:3a:b1:2e:
         cf:cc:d0:5d:35:12:d5:31:c0:1a:ff:49:9d:12:fe:9f:ac:79:
         fd:ca:bf:64:16:6d:c6:09:0a:6f:43:2d:4f:cc:7c:bf:e2:02:
         cc:5b:41:8c:40:2e:cf:3f:2b:04:e8:46:b5:0b:17:b3:4b:c3:
         69:6a:50:87:bb:c5:e5:ee:7a:4c:52:01:f6:b7:18:fb:2f:73:
         8b:f9:18:b6:4c:1e:b5:93:49:38:69:84:03:68:d7:26:3e:55:
         6c:1a:42:99:dd:6c:22:4d:70:34:ca:cb:6f:67:54:45:15:53:
         5f:1e:11:95:ef:89:6e:41:2e:48:cb:94:61:15:00:fc:28:1d:
         34:c1:06:ed:10:5f:82:95:ab:6a:1f:06:8c:0c:40:4c:ab:07:
         04:92:c1:66:9d:7b:b4:56:52:c2:cd:26:62:76:c9:dc:1f:de:
         9f:44:92:9b:27:dd:09:40:35:37:69:6c:36:eb:e3:f2:6c:ba:
         44:67:e1:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzTEKVgXFAT0vWzsFm23EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NzYyN2NhZmU3NTU3ODU3NTBiZGU1YmE0OWU2YzEwOTFi
ZjQyNDcwHhcNMjYwMzI1MjEwMTE0WhcNMjYwMzI2MjEwMTE0WjAzMTEwLwYDVQQD
EygyNzhmMmU3NmMzMGRlNzA5ZTc5MGUyOTg3NzAxZDM0MWE4YTIxMDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAE3v5RdzR1Totk2CiBcFqOBti/I
U/4zRDnYab2GQPG3qEuhCGO0ogwexb0pBIztMhhubrXYb1+IY5shyvXIQaDGej4t
tNNddyUxu1eGia1gBNe301WosSr51Vf29RSrWFlcMC91mBIt2binGmGgfadLNlNN
70az+vh5YrUW2uIH+Q8Aa/imCaS/YshpiRp5z/dp5V/o8Dq6wicI4aZAIbHJVk0r
l7UpgHA6ZM9s+ydAEgEZNObrZw0/TKmZvag8rTqTXecsht+T/jIoBxtpC+6MqagN
+lCN6FJRyNqglTpvwhUNApbDZ9WLTkiuLZL4zonxCZ2lKax5QPWXJ5WZpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCePLnbDDecJ55DimHcB00GoohCDMB8GA1UdIwQY
MBaAFLd2J8r+dVeFdQveW6SebBCRv0JHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDNZbnl2NTFWNFYxQzk1YnBKNXNFSkdfUWtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS82MDIxMzctZGQ0MC00ZWY5LWJiMGYt
NDQ1N2ZhMjBiY2JhLzEvdDNZbnl2NTFWNFYxQzk1YnBKNXNFSkdfUWtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS82MDIxMzctZGQ0MC00ZWY5LWJiMGYtNDQ1N2ZhMjBiY2Jh
LzEvdDNZbnl2NTFWNFYxQzk1YnBKNXNFSkdfUWtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEk5aaICM
aIKpzyeHkv4Gtv+1NQnkIrOEAg+7mvllkRFuBb0WsawQHFLG3NsLRDQOm6z5zhVp
4RNjW5mXMKikv05bHpjkOrEuz8zQXTUS1THAGv9JnRL+n6x5/cq/ZBZtxgkKb0Mt
T8x8v+ICzFtBjEAuzz8rBOhGtQsXs0vDaWpQh7vF5e56TFIB9rcY+y9zi/kYtkwe
tZNJOGmEA2jXJj5VbBpCmd1sIk1wNMrLb2dURRVTXx4Rle+JbkEuSMuUYRUA/Cgd
NMEG7RBfgpWrah8GjAxATKsHBJLBZp17tFZSws0mYnbJ3B/en0SSmyfdCUA1N2ls
Nuvj8my6RGfhiQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:39 2026 by rpki-client