Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft
File:                     SeRO7qJladDdvQ6GN_Es9QWk7ek.mft (raw, json)
Hash identifier:          2temrZeechVIc+J0VSvjPNcOKNfu7R5yF+ZvEKpTXbo=
Subject key identifier:   6B:61:A8:7F:B3:C7:9E:B8:C3:23:71:4D:CE:57:C6:9D:0D:F6:8E:06
Authority key identifier: 49:E4:4E:EE:A2:65:69:D0:DD:BD:0E:86:37:F1:2C:F5:05:A4:ED:E9
Certificate issuer:       /CN=49e44eeea26569d0ddbd0e8637f12cf505a4ede9
Certificate serial:       019D262841DB0781DA685437438FA4F46DFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SeRO7qJladDdvQ6GN_Es9QWk7ek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft
Manifest number:          1890
Signing time:             Wed 25 Mar 2026 18:01:05 +0000
Manifest this update:     Wed 25 Mar 2026 18:01:05 +0000
Manifest next update:     Thu 26 Mar 2026 18:01:05 +0000
Files and hashes:         1: GeUW--hPT8o2pnbr6vUqN1nL0I4.roa (hash: /hKRpfPYym/y7mfH6PMx7JCo0hOLOhMMO2ioAJ8i8ac=)
                          2: LviMRn9_ALWXEXh18KS7ROO3kbY.asa (hash: mlRj/x3uwzMDAiQwgunweAXCBmQ8b/GoPuwWY6Ee+SY=)
                          3: MzCp_EhdHcpKPhvDpuOgeT8wOGQ.roa (hash: cWyQP57tffmbuPRh8jXrqPR/aGo4VRBu/ka+8DAvu8Q=)
                          4: SeRO7qJladDdvQ6GN_Es9QWk7ek.crl (hash: jVD3i9UrzQqCY39YjV+X3vc4xbwdMnkFc2r1XWI2vmA=)
                          5: hEoypnAbDinC0QGassGs76xtnAw.asa (hash: xkbrTyJaG9QSCNIjm8fjAkbI7ZEMVBfs8nTofEueXdQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SeRO7qJladDdvQ6GN_Es9QWk7ek.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:28:41:db:07:81:da:68:54:37:43:8f:a4:f4:6d:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49e44eeea26569d0ddbd0e8637f12cf505a4ede9
        Validity
            Not Before: Mar 25 18:01:05 2026 GMT
            Not After : Mar 26 18:01:05 2026 GMT
        Subject: CN=6b61a87fb3c79eb8c323714dce57c69d0df68e06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:44:48:a1:c2:45:f6:6c:4e:47:64:b6:b8:72:
                    30:20:50:05:e4:ad:9f:7d:67:b3:e9:bb:ef:b2:28:
                    e0:9e:1d:ce:44:de:c1:66:74:61:23:44:2a:ea:3f:
                    aa:dd:ea:28:f4:49:9c:ba:24:9c:b6:a1:67:22:a3:
                    8e:0f:4a:1f:d6:0e:b4:52:96:c9:e4:fe:1f:49:02:
                    34:08:9a:7c:c7:2f:3a:7d:43:78:d0:09:b5:e0:dc:
                    c2:24:4e:ee:15:21:d2:33:ce:db:b0:4e:92:72:a6:
                    6c:fe:10:51:cd:4b:ca:5b:4f:f3:34:df:6c:22:af:
                    a5:7a:7b:90:6c:a7:0b:9d:cd:45:e1:22:3c:bd:68:
                    8a:13:bd:43:d6:bd:c6:d4:22:76:07:70:33:78:f2:
                    de:44:e6:ad:f6:a5:9f:87:8d:a6:32:4d:57:87:06:
                    1f:41:40:eb:66:1f:d2:4b:de:24:06:d7:fc:8c:18:
                    a3:db:29:54:99:9a:c3:38:93:6f:ff:0a:05:0a:e9:
                    27:98:2f:95:d7:20:a2:36:e3:91:71:dc:c9:cb:e0:
                    f5:c7:26:6c:44:8b:13:09:cd:5f:6a:44:71:7c:38:
                    06:9d:27:d7:62:93:67:aa:8e:34:1a:c7:f3:e5:60:
                    32:d6:c5:8a:42:e6:22:d6:9a:fb:23:8d:23:ff:25:
                    e2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:61:A8:7F:B3:C7:9E:B8:C3:23:71:4D:CE:57:C6:9D:0D:F6:8E:06
            X509v3 Authority Key Identifier:
                keyid:49:E4:4E:EE:A2:65:69:D0:DD:BD:0E:86:37:F1:2C:F5:05:A4:ED:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeRO7qJladDdvQ6GN_Es9QWk7ek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:1d:71:a4:6e:25:43:23:fe:e6:d2:ba:02:c6:1f:ed:92:dc:
         aa:25:22:ff:88:76:31:bd:18:be:2c:7d:70:85:cc:60:9d:7f:
         56:31:6b:ba:c0:11:27:fa:c0:91:76:7b:6f:0e:fd:ff:16:57:
         53:c6:d9:c7:64:99:2e:ef:7c:69:d8:e3:a9:9d:f8:c9:f0:c4:
         35:da:64:8d:ce:2f:73:8d:b8:31:1c:88:a5:de:3e:40:08:00:
         1c:37:6b:a4:5a:65:ff:10:36:70:80:9f:a9:27:df:98:b4:d7:
         f8:34:65:49:95:9b:b0:b5:e2:39:a9:64:af:68:c8:58:f2:6f:
         ad:3c:1d:5f:22:73:07:f5:6b:74:5e:9e:43:5c:85:17:8a:b4:
         df:da:76:fd:fe:91:d0:ea:80:af:bb:b7:ea:96:b1:fc:7c:67:
         12:ba:b5:87:69:f3:e4:36:23:f2:22:44:03:16:90:8c:f3:0e:
         66:bc:e0:41:44:07:28:3e:3e:a0:d9:15:6e:e1:75:9b:a1:e2:
         0c:2b:9a:be:5a:6f:3e:8b:15:9b:7f:c8:a0:5f:78:65:64:7f:
         6b:a6:c4:1f:83:8e:0b:42:42:83:42:91:3a:2b:1f:6f:21:db:
         7c:34:c9:57:a4:fb:e6:ff:82:39:0d:db:ca:79:fe:54:63:2f:
         9b:a7:06:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKEHbB4HaaFQ3Q4+k9G39MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTQ0ZWVlYTI2NTY5ZDBkZGJkMGU4NjM3ZjEyY2Y1MDVh
NGVkZTkwHhcNMjYwMzI1MTgwMTA1WhcNMjYwMzI2MTgwMTA1WjAzMTEwLwYDVQQD
Eyg2YjYxYTg3ZmIzYzc5ZWI4YzMyMzcxNGRjZTU3YzY5ZDBkZjY4ZTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0RIocJF9mxOR2S2uHIwIFAF5K2f
fWez6bvvsijgnh3ORN7BZnRhI0Qq6j+q3eoo9EmcuiSctqFnIqOOD0of1g60UpbJ
5P4fSQI0CJp8xy86fUN40Am14NzCJE7uFSHSM87bsE6ScqZs/hBRzUvKW0/zNN9s
Iq+lenuQbKcLnc1F4SI8vWiKE71D1r3G1CJ2B3AzePLeROat9qWfh42mMk1XhwYf
QUDrZh/SS94kBtf8jBij2ylUmZrDOJNv/woFCuknmC+V1yCiNuORcdzJy+D1xyZs
RIsTCc1fakRxfDgGnSfXYpNnqo40Gsfz5WAy1sWKQuYi1pr7I40j/yXihwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGthqH+zx564wyNxTc5Xxp0N9o4GMB8GA1UdIwQY
MBaAFEnkTu6iZWnQ3b0OhjfxLPUFpO3pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VSTzdxSmxhZERkdlE2R05fRXM5UVdrN2VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9jM2RjMWItZDFlZS00ZmYyLWE1YWEt
ZjBjNGJlOGUyNDBhLzEvU2VSTzdxSmxhZERkdlE2R05fRXM5UVdrN2VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9jM2RjMWItZDFlZS00ZmYyLWE1YWEtZjBjNGJlOGUyNDBh
LzEvU2VSTzdxSmxhZERkdlE2R05fRXM5UVdrN2VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJR1xpG4l
QyP+5tK6AsYf7ZLcqiUi/4h2Mb0Yvix9cIXMYJ1/VjFrusARJ/rAkXZ7bw79/xZX
U8bZx2SZLu98adjjqZ34yfDENdpkjc4vc424MRyIpd4+QAgAHDdrpFpl/xA2cICf
qSffmLTX+DRlSZWbsLXiOalkr2jIWPJvrTwdXyJzB/VrdF6eQ1yFF4q039p2/f6R
0OqAr7u36pax/HxnErq1h2nz5DYj8iJEAxaQjPMOZrzgQUQHKD4+oNkVbuF1m6Hi
DCuavlpvPosVm3/IoF94ZWR/a6bEH4OOC0JCg0KROisfbyHbfDTJV6T75v+COQ3b
ynn+VGMvm6cGPg==
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:18:57 2026 by rpki-client