Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
File:                     idpg8EnfujS-S06EGLn_SSElxEk.mft (raw, json)
Hash identifier:          uLSdInZ9ssv2uMyUxJ/Yw5Qzz2p4IbCdFvI5MhAPRBM=
Subject key identifier:   CB:E8:2C:D6:72:75:0B:6C:9C:8D:5F:E2:C1:27:5E:C5:B6:74:82:2F
Authority key identifier: 89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
Certificate issuer:       /CN=89da60f049dfba34be4b4e8418b9ff492125c449
Certificate serial:       019D288463615500CEFC452D586308E6D3D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
Manifest number:          18B8
Signing time:             Thu 26 Mar 2026 05:00:57 +0000
Manifest this update:     Thu 26 Mar 2026 05:00:57 +0000
Manifest next update:     Fri 27 Mar 2026 05:00:57 +0000
Files and hashes:         1: 1qEKqAJdH_5JUlUOsEMtQdOuv-Q.roa (hash: OkbONL4Kv2cLwbDetNkEjbv+0531gLH+WXA/3kqlV9c=)
                          2: 9SsHjlBtd69QJ3ndqo-1KhdedKw.roa (hash: qiOm4Fr0eZzz2bsbkMUTFYSa9lmGOwKDeaQIOpLMzdY=)
                          3: JVABJxvLxkj1mSPSAUuE7d0cXpc.roa (hash: 1hA/cynNPGLtZN3nQtWNzvj3MUG4llVicN6VIwab6HU=)
                          4: gX9Z7p1Ob66YosJCGXnZh4miO-s.roa (hash: elm/BD7Osd0BcHbQbq55e8rpGxN0X0LtIG/FC4qO27s=)
                          5: idpg8EnfujS-S06EGLn_SSElxEk.crl (hash: 44qyHx70ZVh1masumyh+qL1uFxUWzRtOacwiJC5h/jk=)
                          6: pDrr_bf7Ghe4a7lfLdGTUedQJ4s.roa (hash: hckgwXDzkDTS3YgN/PyJxO9PpMuWCR3QafiNrBSQrgA=)
                          7: sFz5mtE3Mde8lSIcx7T2y7lO-zw.roa (hash: NxGgl9GbDugZBPBW0o4P8z6yiV+CD/pDM33YvrxHjSY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:63:61:55:00:ce:fc:45:2d:58:63:08:e6:d3:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89da60f049dfba34be4b4e8418b9ff492125c449
        Validity
            Not Before: Mar 26 05:00:57 2026 GMT
            Not After : Mar 27 05:00:57 2026 GMT
        Subject: CN=cbe82cd672750b6c9c8d5fe2c1275ec5b674822f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:24:c1:45:a0:6a:0e:a9:e0:a2:3b:d7:ef:81:
                    f5:f7:3d:1e:c5:06:20:83:e8:b5:79:46:c7:51:8f:
                    43:ef:25:21:eb:50:60:bc:c9:57:9f:f0:61:bd:ef:
                    f8:97:f0:d6:4b:06:05:dd:67:46:ed:88:0a:26:fa:
                    54:07:f8:9e:ec:61:c5:00:c8:45:a3:f6:89:45:67:
                    3e:8b:c2:33:56:3c:c5:48:a2:ac:e0:b6:d7:bf:72:
                    07:06:4d:9c:fe:0c:12:a3:22:14:1f:59:f1:35:8d:
                    1c:34:97:d0:a8:b5:aa:a8:96:fe:43:c3:92:d5:e3:
                    7e:44:6e:f9:a2:51:b2:2b:31:a6:cf:b4:9e:8e:97:
                    f2:3a:46:a5:8d:b8:5c:8d:f9:70:8a:6d:6f:19:f6:
                    5b:1b:bb:6a:1b:30:3b:4d:56:59:23:0f:64:1d:32:
                    6c:32:1a:03:10:b4:5b:e4:9c:de:ed:18:38:5a:2b:
                    e5:10:ce:05:58:96:08:f0:b2:21:3b:73:46:b8:cd:
                    1b:ef:d0:47:30:03:f2:f9:69:74:b6:ea:4d:ab:f8:
                    ec:fa:30:0c:b3:d8:b9:9f:2a:5c:a9:18:05:bf:39:
                    4c:2d:a8:bc:66:74:77:76:a7:18:2f:24:54:92:1d:
                    28:12:b8:12:2d:41:2e:3c:dd:7e:ec:b2:3f:c9:cf:
                    0e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E8:2C:D6:72:75:0B:6C:9C:8D:5F:E2:C1:27:5E:C5:B6:74:82:2F
            X509v3 Authority Key Identifier:
                keyid:89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:be:d8:08:c3:9d:9d:16:b9:1d:b6:be:48:a5:c8:0a:de:d3:
         d6:ed:58:54:59:5f:b9:fa:d6:07:fc:eb:8d:40:e8:4a:7e:25:
         45:fc:f3:0e:30:fb:1b:5c:44:b2:d3:65:77:c1:e4:c2:c1:77:
         93:e1:dc:22:4e:6b:a6:da:21:8f:2a:07:2a:53:ae:22:21:a1:
         6d:71:33:1f:3e:c2:f5:a9:81:cd:ca:67:85:cd:ed:3f:90:ce:
         2c:b6:13:c3:0d:10:c8:1f:b5:53:e5:49:f5:e8:a4:3b:85:0a:
         62:bd:1c:94:a7:d6:a1:24:99:9b:e9:d0:0f:8a:83:07:5f:56:
         bc:9d:b6:73:57:ad:2f:80:18:73:1c:f0:90:cf:a9:cf:ac:cd:
         a7:fd:cd:65:4e:46:60:f7:a0:b5:29:54:72:bd:0d:0c:d9:cd:
         0f:44:0a:fb:2a:d0:2d:68:80:37:e9:d8:04:3a:67:e4:8b:ce:
         a9:af:e0:ae:10:a3:b8:cc:31:25:6b:c7:c2:20:af:3d:a9:92:
         7c:f6:1f:46:79:ea:2b:4e:be:c5:b6:34:68:6f:e1:3c:bf:52:
         a7:88:fc:d6:0c:55:57:ed:52:d0:40:ee:82:be:8b:0e:4a:3d:
         f9:ac:3a:02:80:d8:27:5a:a1:56:b4:bf:9c:2b:91:27:09:53:
         e4:16:14:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohGNhVQDO/EUtWGMI5tPZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZGE2MGYwNDlkZmJhMzRiZTRiNGU4NDE4YjlmZjQ5MjEy
NWM0NDkwHhcNMjYwMzI2MDUwMDU3WhcNMjYwMzI3MDUwMDU3WjAzMTEwLwYDVQQD
EyhjYmU4MmNkNjcyNzUwYjZjOWM4ZDVmZTJjMTI3NWVjNWI2NzQ4MjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSTBRaBqDqngojvX74H19z0exQYg
g+i1eUbHUY9D7yUh61BgvMlXn/Bhve/4l/DWSwYF3WdG7YgKJvpUB/ie7GHFAMhF
o/aJRWc+i8IzVjzFSKKs4LbXv3IHBk2c/gwSoyIUH1nxNY0cNJfQqLWqqJb+Q8OS
1eN+RG75olGyKzGmz7SejpfyOkaljbhcjflwim1vGfZbG7tqGzA7TVZZIw9kHTJs
MhoDELRb5Jze7Rg4WivlEM4FWJYI8LIhO3NGuM0b79BHMAPy+Wl0tupNq/js+jAM
s9i5nypcqRgFvzlMLai8ZnR3dqcYLyRUkh0oErgSLUEuPN1+7LI/yc8O0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMvoLNZydQtsnI1f4sEnXsW2dIIvMB8GA1UdIwQY
MBaAFInaYPBJ37o0vktOhBi5/0khJcRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWRwZzhFbmZ1alMtUzA2RUdMbl9TU0VseEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTQ3N2YtMDc4NS00MDI2LTgzYmUt
Njk4OTBjODI5ZTMzLzEvaWRwZzhFbmZ1alMtUzA2RUdMbl9TU0VseEVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTQ3N2YtMDc4NS00MDI2LTgzYmUtNjk4OTBjODI5ZTMz
LzEvaWRwZzhFbmZ1alMtUzA2RUdMbl9TU0VseEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUr7YCMOd
nRa5Hba+SKXICt7T1u1YVFlfufrWB/zrjUDoSn4lRfzzDjD7G1xEstNld8HkwsF3
k+HcIk5rptohjyoHKlOuIiGhbXEzHz7C9amBzcpnhc3tP5DOLLYTww0QyB+1U+VJ
9eikO4UKYr0clKfWoSSZm+nQD4qDB19WvJ22c1etL4AYcxzwkM+pz6zNp/3NZU5G
YPegtSlUcr0NDNnND0QK+yrQLWiAN+nYBDpn5IvOqa/grhCjuMwxJWvHwiCvPamS
fPYfRnnqK06+xbY0aG/hPL9Sp4j81gxVV+1S0EDugr6LDko9+aw6AoDYJ1qhVrS/
nCuRJwlT5BYU3g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:08:25 2026 by rpki-client