Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.mft
File:                     LiUqR3JC-0XyC7CAIKQDortGaps.mft (raw, json)
Hash identifier:          Q7VPnXW3LyAuMzoAKfNnSarM9eKHSXBiJnOBUU8CMgY=
Subject key identifier:   38:F7:F4:35:05:88:47:AC:EC:02:2A:78:62:9D:9B:84:FD:5F:A2:60
Authority key identifier: 2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
Certificate issuer:       /CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Certificate serial:       019D28846330FBBE0CE1F6E7977FB8193647
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.mft
Manifest number:          18CE
Signing time:             Thu 26 Mar 2026 05:00:57 +0000
Manifest this update:     Thu 26 Mar 2026 05:00:57 +0000
Manifest next update:     Fri 27 Mar 2026 05:00:57 +0000
Files and hashes:         1: 2TmFbHLlO19GORs7_F9-DHpFpSA.roa (hash: 5QcmAAukWHzAPimKayDjIq+AgPinlkXxG0gwzdT2rUs=)
                          2: 4sfU9lG4vOzhUHzNup1C2QtE_8I.roa (hash: bYCqsbAVZxTJ2+Iy8BdbL2UVRXdOLYLR6HOXUl7bGWY=)
                          3: 7kfOat6vbQm7qvrLeeWgvLuWLvk.roa (hash: HpoNblvC5ioVlNcg5dKmP7Lwvwk13vS9NFrrQr61CLE=)
                          4: BgkjRZdudgnq14hayXIQycAImbo.roa (hash: UYkV6nHcydRo8OL1OQpV3Fl5YmM+UicOs7o2+58bA9A=)
                          5: DjUu4xBDiSIME5G3YoS7qdXwuIc.roa (hash: tIgCNBq60UP6njhx1ZZfpB5x7uoWyfJccaMF4fPZI+A=)
                          6: Fk0e_c9xc84N4Glhep1WPxto6dU.roa (hash: K8FkMtgeMOoJrKUMlJXSug1lFCmh3z6VEx2VFsgMiFg=)
                          7: H1c0Db3vSJrHzmOGub79UpP1owI.roa (hash: EE6YKVS4tKi55uvMazz3Vr23Cg1YzE/w0zh0LZopADc=)
                          8: LiUqR3JC-0XyC7CAIKQDortGaps.crl (hash: swZfpx9Tk01uFvnol5KoSNJq6wFC1E+XI+luAAI9KQk=)
                          9: MJx0NqXihNoO1tdw0IEUkLpGMUA.roa (hash: R5lpynjE3FnYm+DWUM4Zhg7Pyn3VQ0fhxQKf9giZ73g=)
                          10: MSQK_3EJ6OcsnkdpBQECwqcQ4PE.roa (hash: 93zxvvesPXmuUl3S2JN74fhHXFYe8d3QolX6NgG0H4k=)
                          11: X9wwMzmd-MPctoj5RySpkDCZ8Io.roa (hash: 0qFt8agfZ2UKj3wRGP9x8tREtB42FvNClzNCp/+Bt+A=)
                          12: ZP0rASlfbI0Eh5AhSZ7uHzxbJUo.roa (hash: GmmP2J7fyB00Xd+TiyxQingSm9m+0jcuXwcbjFstpKE=)
                          13: an-A_ARrqd3dSC5Jrx2G08_htKo.roa (hash: DE0wDTKj8Brp7GZ//nugmy7FeLq9/aRydb1hf9zHvPU=)
                          14: gzFffy0UFuAtfYIJyYz6bMPGu8E.roa (hash: YZ3gzvJlpzvXJs6xmk8MoAD+xCOjeprCTezveiZLpn8=)
                          15: hHmzA93aux1W073DQ0oEBEGbVdY.roa (hash: OPyr1yuN3XWDxdZPVJqJI5x57XcIZJ6bEMyQJg7BFN8=)
                          16: n8e067z642oPG-VSPPf5NH1kdkc.roa (hash: PJ1ZxoSfLoBxIG9KpA+HcKOU0Yd/GTsGewdqlSPBL7U=)
                          17: q5TzXHZpij2KetERDwER8oSMDkI.roa (hash: P3VmF/g2MZJE2J3jyCR51iNg6MfIrLEAIdlItL/TpBg=)
                          18: r1SS8LFEpQE44s-P04lm5N9jdrI.roa (hash: dmBENm5sE8LG/ao/9tbCsC72GYijSNdnoOECHESPOG4=)
                          19: tHJSj1eAta6y-GF7elY0P3HQoSY.roa (hash: aM0FUMY7W1Z6QKDoCxyyVAGXcyLgugpOHvAjA/YkwDY=)
                          20: tZte8n1HudZeANPtBHv3nnai8sM.roa (hash: QCkWDsgxzolvfhykOvONZC6AtWXczPNbF261p/fSSHg=)
                          21: uK5RbvmqEmpV3Hbsrt6dn6Q9IEs.roa (hash: VzPFB10Yr7Qb/TIPDL8kAqTC6cjaz2x8iEKjNkc8avQ=)
                          22: yybwBXyiz9EWNOxrwF0GcCKfX54.roa (hash: cgd3DDi76As8vDEWXPMuXF0S6L5gR4Q9w8jJpzj4LV0=)
                          23: zLH-7JVcpZrP-0Ozk0-Wb2-CrAM.roa (hash: MrvM1pHmPJgYOkiBF01d0f2uK5Jn6yOgQDd4aCzDwxg=)
                          24: zmvv_BQ2Rp-e29iRz58VPG9H_lI.roa (hash: vw9Mpp0fFP5dTPqWA0bQjfITn23rb5EIPK/lkANPT6w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:63:30:fb:be:0c:e1:f6:e7:97:7f:b8:19:36:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e252a477242fb45f20bb08020a403a2bb466a9b
        Validity
            Not Before: Mar 26 05:00:57 2026 GMT
            Not After : Mar 27 05:00:57 2026 GMT
        Subject: CN=38f7f435058847acec022a78629d9b84fd5fa260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:43:bd:0d:76:78:c6:66:88:7f:1f:25:67:a6:
                    d6:ab:33:36:21:be:3c:79:4e:33:5e:62:6f:68:6a:
                    d6:9e:9b:8f:8f:35:f8:98:3c:59:e8:65:28:ec:dd:
                    84:34:51:47:9b:d7:a3:45:00:d3:7c:4d:a3:5a:8d:
                    83:6b:e9:b8:97:d0:19:9a:83:dc:21:ca:1d:b5:9c:
                    10:5e:6d:8d:bb:37:22:d7:9a:da:98:f8:fa:1e:fc:
                    f1:e6:42:6a:cf:43:81:b0:69:d6:ba:a1:94:70:de:
                    09:3d:8d:d0:7d:27:ab:03:6c:ce:c7:16:b1:99:b6:
                    78:23:a6:cf:6c:77:91:6e:0f:d2:d9:33:69:17:c4:
                    66:17:23:e3:ee:86:9b:1c:15:f3:bc:72:fa:2f:af:
                    c6:8c:a7:5b:a5:99:6e:1f:cc:11:50:7a:6d:62:87:
                    f4:c0:d7:0b:d6:74:4e:80:a0:04:58:bd:d1:04:40:
                    2c:5b:ba:2e:1c:fc:a0:07:b4:69:fa:0b:77:a2:12:
                    f9:50:6a:01:d2:f8:02:51:5b:2b:ea:39:b7:81:ad:
                    54:d7:92:92:74:b5:b9:43:a4:cb:05:53:bc:12:3c:
                    f5:b2:60:69:ab:68:5f:6b:38:73:e8:be:b7:43:54:
                    b2:cc:58:c6:8f:d4:c1:46:b2:3f:dc:d9:0b:4d:5e:
                    c5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F7:F4:35:05:88:47:AC:EC:02:2A:78:62:9D:9B:84:FD:5F:A2:60
            X509v3 Authority Key Identifier:
                keyid:2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:6d:25:8b:00:77:6d:b4:cb:b3:1e:5e:6a:9c:9d:77:a4:bf:
         de:ed:d8:e5:7b:c1:04:fa:7a:94:90:6f:c3:71:7a:d0:19:5e:
         e9:c0:d8:26:f6:0d:31:b1:03:28:be:8c:db:95:a5:cc:fa:25:
         36:9a:d8:be:35:3a:ba:00:71:9b:fd:52:9c:64:d7:44:ac:36:
         b4:60:e1:39:e8:42:bf:75:e5:0b:cb:f2:d4:f9:72:b2:87:e3:
         59:20:eb:0f:c2:00:a0:0d:fa:8d:c1:ed:a3:68:42:32:8b:a4:
         8f:5c:ae:78:78:3e:9a:53:1a:7e:5a:c1:01:f8:9f:17:18:86:
         77:18:83:1f:6d:ed:c6:2c:d8:bb:54:7b:aa:80:fe:e7:c2:78:
         b7:ad:c9:5c:7b:90:f4:03:00:c2:6f:a4:09:30:ae:a8:a7:fa:
         af:ac:ff:35:6b:0d:7c:0a:00:82:02:c9:06:7c:7d:a9:4d:83:
         e8:00:28:c8:90:30:36:07:ae:82:32:1e:e3:e9:25:e9:8e:77:
         ca:ac:8b:5f:37:88:db:01:d5:2c:c9:bc:d9:62:2c:6f:1a:c4:
         f3:dc:50:3f:2f:d1:37:0c:ff:10:14:b3:5e:85:1e:22:4a:b5:
         37:11:16:ea:3b:d8:57:d0:3a:b5:4f:c6:d5:74:c5:7f:e9:55:
         30:d7:ca:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:43:14 2026 by rpki-client