Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft
File:                     ayM9dVCLToXMz0Q0mny3AxmNHSY.mft (raw, json)
Hash identifier:          aNvKCIA9Qfjn1dD6s40VjlbifBU/AoTxb/hvhUnLW/c=
Subject key identifier:   04:13:0B:A6:80:F2:35:58:15:3A:4E:EA:3E:99:6D:82:50:DB:89:AE
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Certificate issuer:       /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial:       019D2704526B402AE72C89272009CBFDEBA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft
Manifest number:          1603
Signing time:             Wed 25 Mar 2026 22:01:27 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:27 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:27 +0000
Files and hashes:         1: 1bncdI1HvWegkfkOeeoa5nOljr8.roa (hash: NfbtKL/fM/sWFvyUIB3zJxF3TY7oHsHrb3iWZHcFnF8=)
                          2: 7SIMvj1k5xsN1h3xkS5_DMW5y4Q.roa (hash: S6k/+gtFBCC3b9KfwT6tZ5Xz1q+2dXqGcNdYKCd9ehg=)
                          3: 7cfTnZvgSfEil-YZBKZdLdCbAbo.roa (hash: AKLB22yDeG7EM9+/4pHVnLAsK2pplpeZJDCWxL6pSIw=)
                          4: 96nhW7fwQ_laWKSgwpcxi24MuvM.roa (hash: N6W5Ek/wK4Pm3whmGHtixWn1/HYkCfQdvQqhfZHUqC4=)
                          5: BfVNHWqEPlzaLXAUxndKGpZQISo.roa (hash: iPfjs5sAMs8Z6poczMNyYY8Bje3i0GDrHxRTpq3hZxY=)
                          6: DAsiheAfQV-3n4ItlbPGVG1Md4w.roa (hash: 6+SFOXT2tV1fCHy49Xv2Jfj0h6/qqmiVRYPvHr297JI=)
                          7: Eilb_UFwv7AQKBHlICmP2pgi_FQ.roa (hash: qQ/zUElPipJtSapfn3wrRR1KfyHaSlWeiqF/oVIx/d0=)
                          8: FBci10I6aG73ENuNfx7xpq1wj1I.roa (hash: 7Qx3boAf1NH/EWgy4dJq6Se8FRdBuYw6f3pqwBtRiL0=)
                          9: FXAzI68zn2MhAmyLaAVs5acySp8.roa (hash: 0tRXxkEiNEXv52H1UOhctD+Lw3+UX2F5o1ZQoQd1xvE=)
                          10: J_aMB1ufPcbVxvqNqW0DJagt9Ss.roa (hash: rYNYIygzVLxsYiz9/QpiUL2isg45v/iPFE29a+xdhpw=)
                          11: JgQFyvhK48UsiHLo2GClJOr_UYg.roa (hash: ENI0caY+qR5uep969CyovRK5p657zdmyswAf0HcKQ3I=)
                          12: M25DxF769Ii8sD3VQLHjxn_a5xs.roa (hash: km4/YnoSASnoYK+VrVOCmmtlMYLN2uh5BGpv+BmeWq0=)
                          13: RCc63apjlRxYYVC64jleE_CWsJc.roa (hash: mjSJEm7ypZz9PgXhGjjzoNx0TMGrQIqwIHaBFwo6puM=)
                          14: UBImtmTpT9AJK4XiVIvbMq--q_s.roa (hash: NijKBNgwerk44M+DxExLCS24gu6T722sFHFMOCujRn0=)
                          15: ayM9dVCLToXMz0Q0mny3AxmNHSY.crl (hash: rP0MV7mOQDd+4wUuXKqtZB8253V1x3pvErtAgw7XjLY=)
                          16: eIXa3P7-DLgvGb_upQKW0QWQEN0.roa (hash: rZZy59BZf9kQ9RiHu2DTRBT4n3jQYisJ5vFK73yoXdk=)
                          17: hPPUJEU66HUzBCdsMKPjv4y6kCw.roa (hash: ZcjMLqy1z7bp5wMo9CeMXm4svFAsNX9iyFgfU+2xru4=)
                          18: jdZLuGrwcV0Bz7rkdGZPvyBj9L4.roa (hash: EBuUGjICQaJYXCY6gsLdo0i6JEklwjuwZKX4alPejb4=)
                          19: kx1p1slIxkJTxYn4OAj06CJUsf8.roa (hash: HkJZcVcAXKQ3R00x2VbaFry/zdm9SDMa5rLM9eNsbGo=)
                          20: q4DCvIiS6THJXZg00ACbcwTs9to.roa (hash: BzDZyZi3DK/fRXztW3cj1XBtDtFZup20v6Mda//O7qY=)
                          21: r1Lm-dX1qz59WOfpWgSU33XPmSM.roa (hash: 6oVzYKTRmw48EXPMuELo04geZt6gGCfSZv5bRmChJw8=)
                          22: yhO6jjNSs_bJoAXmqMYLMOei02c.roa (hash: onlwkoJ5OKhTr40KVglk32d3M7hjIqq4nk6HmNYVvsU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:52:6b:40:2a:e7:2c:89:27:20:09:cb:fd:eb:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
        Validity
            Not Before: Mar 25 22:01:27 2026 GMT
            Not After : Mar 26 22:01:27 2026 GMT
        Subject: CN=04130ba680f23558153a4eea3e996d8250db89ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b8:e7:b2:68:92:ee:70:d2:2f:df:92:a4:c6:
                    10:06:da:cb:e5:9a:13:ec:82:01:fe:40:97:e9:c3:
                    89:82:da:de:74:a4:43:cb:8f:c7:59:a9:41:6a:cc:
                    c4:de:d4:fb:88:3c:da:14:cf:fc:6d:d2:5f:f3:13:
                    17:d4:6c:41:c6:a2:cc:c8:cb:9d:b0:fc:65:27:17:
                    f5:02:37:34:ad:7d:2f:78:a9:ba:2d:7d:3b:10:a5:
                    fd:59:0a:05:2a:38:47:75:83:ac:46:f7:00:18:e5:
                    06:59:94:a7:8e:42:36:d2:f5:bc:96:61:0e:8b:e8:
                    e4:6e:37:ed:26:33:a0:0d:83:17:ce:69:af:10:f3:
                    8e:a1:b5:0d:64:08:88:3c:6f:85:e9:e5:74:c6:45:
                    7c:a5:60:43:76:f3:63:7b:9f:9f:2e:8b:17:62:de:
                    3c:d1:20:a0:63:16:d4:fb:a3:60:e0:a3:cc:3a:3b:
                    ac:b8:a5:2e:28:30:01:39:08:e5:ae:81:3d:00:e3:
                    79:a7:fa:b3:fa:09:57:b4:9a:f6:60:6b:7a:ad:21:
                    10:a5:c5:4c:e5:9c:89:c5:76:37:ae:af:da:c4:37:
                    56:55:fc:bd:19:b9:15:4f:63:63:12:18:34:05:af:
                    66:82:d9:55:12:57:b2:c6:64:a7:55:59:6e:ff:c0:
                    50:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:13:0B:A6:80:F2:35:58:15:3A:4E:EA:3E:99:6D:82:50:DB:89:AE
            X509v3 Authority Key Identifier:
                keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:cc:a6:ff:aa:38:45:d1:80:e9:9a:6f:c6:ab:9c:d6:87:9f:
         01:a5:5a:05:ed:39:5f:5e:64:8c:dd:4b:47:6d:be:0f:48:91:
         b0:36:da:02:df:bf:07:4f:1d:ea:79:84:ec:ed:b2:5d:80:26:
         ae:4c:48:eb:ce:b2:a7:d9:6a:a1:a1:96:b7:2b:fe:57:10:3d:
         d1:b0:84:15:48:62:e5:d3:3c:8f:71:33:cf:00:64:78:f2:6d:
         f3:bf:9b:92:fc:9a:99:53:f4:2f:8d:a4:b6:c1:cd:6c:97:61:
         4d:48:c2:bf:4b:d2:2f:a2:e9:f0:ad:e0:c7:52:29:03:5a:c8:
         61:c2:a3:20:cb:13:3d:8b:df:61:11:0b:ef:59:f9:4d:1a:b9:
         c0:bc:8c:da:d3:e7:d2:ee:4b:43:11:8f:8e:7b:01:e7:fe:cc:
         32:63:0b:0a:97:fb:a2:8e:dd:0b:fc:5e:12:c0:d1:cb:67:a6:
         b3:04:4b:b6:44:4a:0d:c1:ef:bb:ba:03:2e:43:4f:2d:fd:85:
         ee:d1:37:2b:c9:5f:76:30:99:c2:e2:f7:00:58:ae:25:d2:0a:
         09:40:28:bf:f9:c6:21:ac:84:9e:80:f6:30:e7:56:a2:59:3d:
         40:06:2a:7f:2f:cf:88:38:bf:6c:02:e2:28:63:61:8a:2d:0c:
         6f:87:0c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:46:28 2026 by rpki-client