Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
File:                     M35ja6YMcU_-h1SrnQTG0e7bm4k.mft (raw, json)
Hash identifier:          qfrtIhLTGEeCa/ij5Dovf8F9DZxxMksBnQe17CUScrI=
Subject key identifier:   30:9E:DC:F0:28:79:F2:1F:8D:CE:C9:19:68:C9:E4:C5:0E:4A:3A:87
Authority key identifier: 33:7E:63:6B:A6:0C:71:4F:FE:87:54:AB:9D:04:C6:D1:EE:DB:9B:89
Certificate issuer:       /CN=337e636ba60c714ffe8754ab9d04c6d1eedb9b89
Certificate serial:       019D27DF9DBC96A9902612C42E06E3ACAC24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
Manifest number:          050B
Signing time:             Thu 26 Mar 2026 02:00:59 +0000
Manifest this update:     Thu 26 Mar 2026 02:00:59 +0000
Manifest next update:     Fri 27 Mar 2026 02:00:59 +0000
Files and hashes:         1: 9oQBTXlH4ga0jxaDaQ46_0675r4.roa (hash: lfc14Nf9rZ4eQfU7CROzJbAHaEHHz0RDwVBA24tGJp0=)
                          2: Dx65O-asK1-UgVb-ZGw1lB5CJx8.roa (hash: s8rkkFQ6+V5aJw27ojd1rWR8DbltWhE5KRrj3bBMD1U=)
                          3: M35ja6YMcU_-h1SrnQTG0e7bm4k.crl (hash: Tups423CGFO/m9OnqwHqOdB6Qmbt7RX0JPr0weNCKJQ=)
                          4: XQ2UOuVw2T7OAFZpmHMv3GBseYc.roa (hash: st9txTOnhmX0OyjM9OI6jhYL6GVTc4OxpwXxUcHPUeA=)
                          5: dcvjkQH09CTuqJvt0Sfi1gO9Pxo.roa (hash: ocviRQYdrnx+Nz5y2Ctef0U6ZWjsZGCl6lhK6/hzJjY=)
                          6: vXTxJSzPbffHQQvVDh7hY-UvAdo.roa (hash: kJvEqskagfLdxb3XxFYls86f+7m8wdk0p3O2qSE+ugQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 02:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:9d:bc:96:a9:90:26:12:c4:2e:06:e3:ac:ac:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337e636ba60c714ffe8754ab9d04c6d1eedb9b89
        Validity
            Not Before: Mar 26 02:00:59 2026 GMT
            Not After : Mar 27 02:00:59 2026 GMT
        Subject: CN=309edcf02879f21f8dcec91968c9e4c50e4a3a87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c4:d3:82:d6:13:9f:0a:5e:ec:fd:d5:20:f3:
                    40:29:c1:73:dd:b3:43:ee:6b:8c:cb:6f:2c:a7:ba:
                    84:d6:f5:2a:9f:5f:3a:6c:d6:b0:c0:0d:4e:01:c9:
                    84:f7:e2:f4:9d:34:1d:bb:51:fb:63:11:20:b6:80:
                    ae:84:69:5f:fc:7b:1a:e5:2b:23:21:e7:0f:3e:f8:
                    f8:ff:c7:ca:9a:0f:65:5a:0e:a2:79:a5:6e:8e:8e:
                    02:fd:b5:d5:20:df:b3:e6:5e:52:f3:89:ef:35:fc:
                    75:f8:62:d2:5a:5f:83:6f:4e:95:0b:fa:1f:2e:2e:
                    f1:af:8d:ac:97:b4:c9:06:02:e4:b2:a5:53:ce:5b:
                    0b:2a:17:68:be:f1:c5:e6:7b:c4:13:27:91:25:25:
                    ae:35:b1:7d:1b:aa:94:76:89:49:8d:21:b6:ed:9f:
                    f8:4d:60:35:7e:76:80:de:d1:c5:66:32:f2:b9:53:
                    a3:ab:32:2b:9c:e9:e0:75:ab:23:89:6c:6b:5b:a7:
                    02:89:1f:03:67:5e:f4:ee:aa:a0:40:98:41:98:ae:
                    09:30:45:87:04:20:7e:81:56:92:8a:bf:4a:66:b8:
                    b3:66:36:fc:fc:26:7c:8b:3b:fd:de:ea:42:c5:ec:
                    b6:54:ce:ba:ff:2a:ab:76:b7:52:a3:57:26:3f:82:
                    40:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:9E:DC:F0:28:79:F2:1F:8D:CE:C9:19:68:C9:E4:C5:0E:4A:3A:87
            X509v3 Authority Key Identifier:
                keyid:33:7E:63:6B:A6:0C:71:4F:FE:87:54:AB:9D:04:C6:D1:EE:DB:9B:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:59:9a:31:a7:83:b1:5e:19:63:03:48:e2:28:43:36:e9:4c:
         a1:44:dd:e9:63:3c:2d:b1:b3:32:58:a3:ab:f9:b9:31:c4:55:
         d8:45:90:c7:11:1b:8b:7a:ab:aa:db:5b:7c:f2:21:df:64:44:
         ab:1d:0e:41:a4:36:b7:aa:32:7e:33:e6:24:fc:37:73:4d:d5:
         36:34:bd:67:90:64:a9:e9:8d:d6:8f:79:eb:25:0b:e7:92:33:
         45:8a:08:45:03:2c:88:0e:a7:08:3a:19:58:19:20:46:4d:2b:
         3d:04:68:23:5f:0f:bf:9c:c1:58:ad:6c:0b:47:2e:0c:f5:3a:
         b1:17:2b:ae:61:a5:4e:67:91:9a:b1:57:da:8f:1a:54:3d:1a:
         dd:e2:4d:a7:1d:10:fb:3f:ea:1a:5e:fa:81:30:f9:bc:1d:5b:
         a5:3d:bd:f3:01:16:9a:ae:4c:c0:ed:6f:c4:d1:a7:24:47:f4:
         f4:0b:45:6a:fa:d6:ea:de:cc:33:e4:ec:d6:94:fb:cb:ac:9d:
         0c:96:d2:e6:e0:74:43:5f:5d:17:95:a4:06:a4:4c:5c:43:69:
         1b:e0:ef:37:af:f0:b7:75:ca:79:90:59:56:12:87:eb:2f:5c:
         73:63:de:49:a9:10:bc:60:4d:c9:09:16:15:72:9e:d6:6f:8f:
         a2:5e:88:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n3528lqmQJhLELgbjrKwkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzN2U2MzZiYTYwYzcxNGZmZTg3NTRhYjlkMDRjNmQxZWVk
YjliODkwHhcNMjYwMzI2MDIwMDU5WhcNMjYwMzI3MDIwMDU5WjAzMTEwLwYDVQQD
EygzMDllZGNmMDI4NzlmMjFmOGRjZWM5MTk2OGM5ZTRjNTBlNGEzYTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcTTgtYTnwpe7P3VIPNAKcFz3bND
7muMy28sp7qE1vUqn186bNawwA1OAcmE9+L0nTQdu1H7YxEgtoCuhGlf/Hsa5Ssj
IecPPvj4/8fKmg9lWg6ieaVujo4C/bXVIN+z5l5S84nvNfx1+GLSWl+Db06VC/of
Li7xr42sl7TJBgLksqVTzlsLKhdovvHF5nvEEyeRJSWuNbF9G6qUdolJjSG27Z/4
TWA1fnaA3tHFZjLyuVOjqzIrnOngdasjiWxrW6cCiR8DZ1707qqgQJhBmK4JMEWH
BCB+gVaSir9KZrizZjb8/CZ8izv93upCxey2VM66/yqrdrdSo1cmP4JAPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDCe3PAoefIfjc7JGWjJ5MUOSjqHMB8GA1UdIwQY
MBaAFDN+Y2umDHFP/odUq50ExtHu25uJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTM1amE2WU1jVV8taDFTcm5RVEcwZTdibTRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9lNzBjODMtNDZmZC00MGI0LTgzYzkt
NzBjMjI4ZWU5Yzk1LzEvTTM1amE2WU1jVV8taDFTcm5RVEcwZTdibTRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9lNzBjODMtNDZmZC00MGI0LTgzYzktNzBjMjI4ZWU5Yzk1
LzEvTTM1amE2WU1jVV8taDFTcm5RVEcwZTdibTRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoFmaMaeD
sV4ZYwNI4ihDNulMoUTd6WM8LbGzMlijq/m5McRV2EWQxxEbi3qrqttbfPIh32RE
qx0OQaQ2t6oyfjPmJPw3c03VNjS9Z5BkqemN1o956yUL55IzRYoIRQMsiA6nCDoZ
WBkgRk0rPQRoI18Pv5zBWK1sC0cuDPU6sRcrrmGlTmeRmrFX2o8aVD0a3eJNpx0Q
+z/qGl76gTD5vB1bpT298wEWmq5MwO1vxNGnJEf09AtFavrW6t7MM+Ts1pT7y6yd
DJbS5uB0Q19dF5WkBqRMXENpG+DvN6/wt3XKeZBZVhKH6y9cc2PeSakQvGBNyQkW
FXKe1m+Pol6IEw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:34:33 2026 by rpki-client