Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
File:                     V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft (raw, json)
Hash identifier:          QR92F7wUhL3CqpHJOCivAaJpqKdKG+hpodBCN2cPmTQ=
Subject key identifier:   91:A2:A4:91:62:FE:BF:E4:3C:55:23:C2:B0:BA:29:BF:E2:B1:EE:BF
Authority key identifier: 57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
Certificate issuer:       /CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Certificate serial:       019D284DB53A9C838AECADDB8AF848F37C95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
Manifest number:          11B7
Signing time:             Thu 26 Mar 2026 04:01:14 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:14 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:14 +0000
Files and hashes:         1: 1AjCxB6TkTjdHZOvofHm6NOOWfo.roa (hash: d4r+30BMgqiFQp0F8pzgKQ5i8LeY9r3mXEVd6tCLHak=)
                          2: 4iLxM73eLW6tqIqIEVi5DZshAX8.roa (hash: 5ekQWavsM+QKT46VPj3wV4euAzrbD/nttRzyJzRT1UQ=)
                          3: 6yXvB2mZ6DFLBKqtlv0jb3RhyEI.roa (hash: 4T1luSU4DmiSKE8Cb9puNxoiNBazFMCURFxFQNY966Y=)
                          4: KHpN6RsIT8Yzm-xw6bcYpCXAZOw.roa (hash: Gk34if2dhZULdLD9MtyJCGYKzpai4oG9h76wWHnC34Y=)
                          5: V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl (hash: B4gCT7NBnAVx/FMBpVrqtizDhb5z9xl/lXdv9HMsxJY=)
                          6: s_Ocb5RzyDecMqmMmwcXEkDS5kY.roa (hash: zD3icNxMD7rBY0nFB8uq8qwc1AnBefPqnwojqYvDvKo=)
                          7: xi1lzXnyUQddIBg_g1qFVgVU2YQ.roa (hash: DDQgV9tAfdW2zCM78ncjHvng/XT4BDa4M2SGgGiDpqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:b5:3a:9c:83:8a:ec:ad:db:8a:f8:48:f3:7c:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
        Validity
            Not Before: Mar 26 04:01:14 2026 GMT
            Not After : Mar 27 04:01:14 2026 GMT
        Subject: CN=91a2a49162febfe43c5523c2b0ba29bfe2b1eebf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:78:e6:a6:f9:58:8b:b6:26:0f:e4:a6:76:fd:
                    c8:62:ed:58:b8:d2:23:20:39:9c:dc:3a:da:d1:3d:
                    0e:c0:61:be:36:c9:e3:0b:e2:42:04:72:20:c5:66:
                    be:de:a0:d2:ec:e4:b4:b6:d7:02:5f:26:c9:61:e7:
                    3c:f7:59:0e:e6:22:15:ff:e7:2a:e4:48:67:8d:f0:
                    57:f5:14:78:84:59:c1:7a:64:0c:ac:fc:ff:79:31:
                    0e:ff:a0:9a:40:f9:a5:be:8d:47:f8:2d:94:b5:db:
                    d3:0a:16:5d:85:13:bd:6f:47:13:28:68:3e:fa:7a:
                    0e:06:7a:dc:b9:58:e7:3f:88:15:c0:a2:0e:b4:3b:
                    ef:ec:54:77:71:4b:8b:f7:27:64:38:91:ea:e7:6e:
                    73:fa:36:64:f7:63:db:f4:b0:f6:95:01:96:68:72:
                    2d:66:cb:67:0d:88:bb:f0:75:e0:d4:38:ec:74:35:
                    b9:ce:32:56:14:ff:ad:4b:63:32:d7:d8:c7:53:1b:
                    07:f8:07:9a:4b:b6:46:b4:1d:18:4a:b3:79:5c:9b:
                    70:64:11:60:b6:79:75:cf:b7:18:98:21:a3:e8:7c:
                    a8:d1:96:4a:f7:d6:6e:28:1f:f1:c6:34:6b:7a:ca:
                    04:c4:bc:bb:6a:7c:91:a1:76:7f:c5:08:ca:f9:7d:
                    9c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A2:A4:91:62:FE:BF:E4:3C:55:23:C2:B0:BA:29:BF:E2:B1:EE:BF
            X509v3 Authority Key Identifier:
                keyid:57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:93:8b:14:1e:bc:a0:4b:ec:04:ea:5e:02:0c:c7:3f:e3:ab:
         da:f6:cc:be:79:5c:86:56:6a:21:1e:d6:18:62:15:3a:9e:40:
         47:f8:19:f5:65:1c:ad:0b:e5:9f:70:13:3f:3c:d1:53:c6:09:
         a2:68:2c:66:96:33:37:77:84:0f:b8:b5:ab:71:7c:03:05:b7:
         bb:3f:5f:e9:da:86:70:38:c0:15:85:c4:e3:ff:20:a2:f1:e6:
         60:20:c4:ef:3a:5e:d4:e2:b2:13:fd:00:f2:38:71:99:c1:23:
         e4:c8:8f:ca:3f:a1:ff:82:ad:1c:d1:ee:f0:6c:fd:57:ae:e1:
         d2:ae:ae:88:e6:96:87:ec:07:89:9b:3b:86:eb:dc:e6:32:9d:
         ec:4d:f6:98:5b:ae:49:4c:6a:83:41:a5:ca:09:8f:5e:bb:25:
         53:66:0f:ff:eb:5d:67:ac:5f:c1:3c:00:8d:f1:f3:83:20:7b:
         86:1a:59:bc:1b:2e:72:58:3f:09:b2:90:4a:e4:34:70:70:63:
         2f:be:48:4e:7f:1b:b4:5c:ab:f3:ba:44:8c:1f:21:69:f0:c0:
         55:b6:b1:ef:ea:51:1f:6b:c7:4b:91:34:75:d5:d7:4e:ed:20:
         00:d2:78:9c:fa:7d:19:7e:7e:25:3a:31:19:a1:20:a6:f0:fb:
         8d:57:ee:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:50 2026 by rpki-client