Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
File:                     K04tNMzuRXa1znYFoITmwIUiwig.mft (raw, json)
Hash identifier:          DkYG9QlX5xTGkdDKGEnaBaU+oU8yhUq14kDhGPnUSqY=
Subject key identifier:   E6:30:53:7B:3C:3A:AA:F3:F5:AC:AB:D2:63:8D:C8:08:88:94:0D:FB
Authority key identifier: 2B:4E:2D:34:CC:EE:45:76:B5:CE:76:05:A0:84:E6:C0:85:22:C2:28
Certificate issuer:       /CN=2b4e2d34ccee4576b5ce7605a084e6c08522c228
Certificate serial:       019D27047B6C36EA4D7B6DF199D9A1658B57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
Manifest number:          188C
Signing time:             Wed 25 Mar 2026 22:01:38 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:38 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:38 +0000
Files and hashes:         1: 5seVusnKx_Ys9lX6helV3VYtD2U.roa (hash: PZFyRFcdx9T5Z2TzIZsPirDrvtRVVFWfye1bbVqWbBc=)
                          2: 9btJARByxb1iHyonPUVBkRTOsVo.roa (hash: OoaKNkwSuE9swZGc5WUnPf4K5AgnLBPyAFCvevkhF9U=)
                          3: K04tNMzuRXa1znYFoITmwIUiwig.crl (hash: tjOEQgZca1+yQp+LfuTDsSvVjqgKTgcXy5JGlt6i6t8=)
                          4: XWrsnRZ3w0e0DoMnOjNkuaIXctc.roa (hash: hKOZKXZd+O54dyQoUT1ViJz0QYsGp84f/gyggnOHiyY=)
                          5: _VixDRlDHcr6PrncvZUZ-GW6afw.roa (hash: XqMR9xWk1nvAk22Z7sQHJKRu3wfO9rwjwEWrKeLB+8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:7b:6c:36:ea:4d:7b:6d:f1:99:d9:a1:65:8b:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b4e2d34ccee4576b5ce7605a084e6c08522c228
        Validity
            Not Before: Mar 25 22:01:38 2026 GMT
            Not After : Mar 26 22:01:38 2026 GMT
        Subject: CN=e630537b3c3aaaf3f5acabd2638dc80888940dfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c5:bd:6c:66:5d:d8:64:24:f9:86:67:76:bb:
                    ba:7e:ee:5a:f2:86:a9:b9:1c:9a:ad:ff:8d:5e:6d:
                    12:30:43:05:e1:d9:47:9f:47:2a:34:00:71:c4:e8:
                    5e:e2:06:51:b4:c9:7a:9e:a1:00:69:32:4a:1d:ac:
                    51:3c:66:cd:96:af:05:7a:b6:72:8b:ae:74:39:6e:
                    53:1e:57:57:44:b1:c9:42:8a:b1:db:4a:81:2c:c6:
                    ca:8d:02:38:c5:8d:ac:dd:d0:23:46:4c:11:71:30:
                    69:a9:1c:ec:38:74:96:91:74:6d:a1:14:ec:08:cd:
                    89:9a:1a:05:58:bc:42:e1:f4:59:eb:d6:47:20:dd:
                    71:7c:5e:92:1d:7f:82:fc:2e:55:e7:74:f7:86:fa:
                    e5:56:95:37:ef:b5:df:ce:0c:e3:35:04:c8:94:4c:
                    a0:a1:88:d8:f5:b7:c6:f8:42:4d:b5:fa:94:97:47:
                    9c:23:0d:d5:26:82:ec:e2:4b:a7:91:55:76:8c:5f:
                    f6:86:ee:85:dc:d0:27:7e:f4:a5:95:64:9a:c5:18:
                    28:cb:2c:9e:53:7b:9d:96:70:9b:4d:83:73:78:d3:
                    25:ce:72:92:c9:30:e8:63:b2:5b:67:12:19:d0:7e:
                    e8:43:a4:4b:46:5e:6f:45:76:66:f2:ec:1e:cb:ab:
                    f8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:30:53:7B:3C:3A:AA:F3:F5:AC:AB:D2:63:8D:C8:08:88:94:0D:FB
            X509v3 Authority Key Identifier:
                keyid:2B:4E:2D:34:CC:EE:45:76:B5:CE:76:05:A0:84:E6:C0:85:22:C2:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:cc:e2:5f:59:e8:f2:0f:ab:a0:1a:9a:3f:1f:7c:ef:db:13:
         69:65:0b:17:64:79:ba:e2:07:73:78:0f:68:76:0e:62:2d:5e:
         33:1d:1a:5c:34:f7:c8:d6:ca:87:c9:e3:4d:78:f3:c6:d7:f3:
         c9:82:a5:3b:3e:f1:ac:24:3e:8a:33:67:62:20:3c:dc:e4:4f:
         6a:3a:ac:b7:0a:36:d0:dd:b3:ca:28:fb:75:6b:45:9f:68:1e:
         51:57:b7:d5:e1:b8:ba:89:93:ca:58:80:af:2f:3a:07:80:f5:
         e7:d5:bb:80:5c:5a:f3:8e:8a:7b:3a:a8:1c:b7:b0:72:e9:df:
         41:60:6b:42:51:c7:dc:40:15:88:6e:82:bb:ff:bb:f8:0f:6c:
         53:7e:a4:71:bd:3b:9d:24:3c:3a:e0:7d:7d:44:0e:68:d8:28:
         b8:82:8f:a7:92:eb:32:b9:87:ad:98:2b:0e:e1:0d:73:bb:8d:
         f0:c3:44:bd:49:60:6a:cb:aa:d1:ee:5e:bb:bb:c4:6d:19:cb:
         5a:b9:15:07:29:0b:00:46:c6:ae:05:31:95:b4:67:c8:36:bb:
         5e:76:46:18:e6:25:00:1b:cc:cc:88:9b:64:37:4e:84:45:71:
         27:56:25:f2:f6:44:e2:bb:27:49:67:14:d7:f0:a1:ed:2d:19:
         ea:0e:b9:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBHtsNupNe23xmdmhZYtXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNGUyZDM0Y2NlZTQ1NzZiNWNlNzYwNWEwODRlNmMwODUy
MmMyMjgwHhcNMjYwMzI1MjIwMTM4WhcNMjYwMzI2MjIwMTM4WjAzMTEwLwYDVQQD
EyhlNjMwNTM3YjNjM2FhYWYzZjVhY2FiZDI2MzhkYzgwODg4OTQwZGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcW9bGZd2GQk+YZndru6fu5a8oap
uRyarf+NXm0SMEMF4dlHn0cqNABxxOhe4gZRtMl6nqEAaTJKHaxRPGbNlq8FerZy
i650OW5THldXRLHJQoqx20qBLMbKjQI4xY2s3dAjRkwRcTBpqRzsOHSWkXRtoRTs
CM2JmhoFWLxC4fRZ69ZHIN1xfF6SHX+C/C5V53T3hvrlVpU377XfzgzjNQTIlEyg
oYjY9bfG+EJNtfqUl0ecIw3VJoLs4kunkVV2jF/2hu6F3NAnfvSllWSaxRgoyyye
U3udlnCbTYNzeNMlznKSyTDoY7JbZxIZ0H7oQ6RLRl5vRXZm8uwey6v4ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOYwU3s8Oqrz9ayr0mONyAiIlA37MB8GA1UdIwQY
MBaAFCtOLTTM7kV2tc52BaCE5sCFIsIoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzA0dE5NenVSWGExem5ZRm9JVG13SVVpd2lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kODk5Y2MtNTM1Ny00NzFhLWJjMWMt
MDc3YmM4YmExZTVkLzEvSzA0dE5NenVSWGExem5ZRm9JVG13SVVpd2lnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9kODk5Y2MtNTM1Ny00NzFhLWJjMWMtMDc3YmM4YmExZTVk
LzEvSzA0dE5NenVSWGExem5ZRm9JVG13SVVpd2lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUcziX1no
8g+roBqaPx9879sTaWULF2R5uuIHc3gPaHYOYi1eMx0aXDT3yNbKh8njTXjzxtfz
yYKlOz7xrCQ+ijNnYiA83ORPajqstwo20N2zyij7dWtFn2geUVe31eG4uomTyliA
ry86B4D159W7gFxa846KezqoHLewcunfQWBrQlHH3EAViG6Cu/+7+A9sU36kcb07
nSQ8OuB9fUQOaNgouIKPp5LrMrmHrZgrDuENc7uN8MNEvUlgasuq0e5eu7vEbRnL
WrkVBykLAEbGrgUxlbRnyDa7XnZGGOYlABvMzIibZDdOhEVxJ1Yl8vZE4rsnSWcU
1/Ch7S0Z6g65lQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:46:29 2026 by rpki-client