Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft
File:                     B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft (raw, json)
Hash identifier:          N0HNg1Thy7Dq6qfrbAWdIT4vXgIPzmmXTku1rQFh2vc=
Subject key identifier:   08:EB:4A:84:54:D2:93:94:EA:38:B4:AB:A8:2D:27:56:75:97:89:A1
Authority key identifier: 07:D6:4D:AE:F3:39:E6:FD:AE:64:4D:B1:B2:0B:BF:54:E6:7E:5D:66
Certificate issuer:       /CN=07d64daef339e6fdae644db1b20bbf54e67e5d66
Certificate serial:       019D25F1F4196BAF67856CE069905746DEB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft
Manifest number:          0F69
Signing time:             Wed 25 Mar 2026 17:01:46 +0000
Manifest this update:     Wed 25 Mar 2026 17:01:46 +0000
Manifest next update:     Thu 26 Mar 2026 17:01:46 +0000
Files and hashes:         1: B9ZNrvM55v2uZE2xsgu_VOZ-XWY.crl (hash: kbqBWz5Y3Dqkr/Ypd4w/77pbGkT8RzqIDwhj29cZTog=)
                          2: mXvHGytm_d-ZmmjoABMVc3yVsds.roa (hash: yE1KIjBpAWB8h1LtfkwyNXpw6sG5nRfdWFiNpWMDlR0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:f4:19:6b:af:67:85:6c:e0:69:90:57:46:de:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d64daef339e6fdae644db1b20bbf54e67e5d66
        Validity
            Not Before: Mar 25 17:01:46 2026 GMT
            Not After : Mar 26 17:01:46 2026 GMT
        Subject: CN=08eb4a8454d29394ea38b4aba82d2756759789a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7f:a0:c9:bc:7d:27:59:89:9b:71:66:bf:77:
                    e2:8c:0b:25:8b:54:28:73:07:9c:e9:af:a8:6f:5b:
                    af:f5:8b:53:6a:73:88:49:8e:6e:74:c9:cf:40:23:
                    a5:54:dd:50:0c:ac:ce:f4:c5:f0:e6:a1:c7:56:fa:
                    65:c3:2f:01:a6:49:d2:99:e9:cc:ea:cf:ff:12:23:
                    7d:42:58:9d:6c:7a:20:c8:dd:90:20:0f:34:85:55:
                    9d:09:00:72:21:2d:b8:6f:ac:07:60:56:10:07:f2:
                    a3:98:01:99:1b:ac:e2:da:da:e8:07:36:80:7f:c9:
                    86:d7:b9:6e:88:aa:85:fe:e3:16:4a:68:ed:66:eb:
                    32:bd:3a:2f:dd:28:58:6f:d2:65:df:2f:bb:de:4f:
                    85:1c:56:4c:e6:ee:f1:21:6f:25:ed:d8:f5:b8:39:
                    3e:1e:37:b9:ed:94:78:b6:31:0e:5b:49:6e:3e:0b:
                    42:19:b5:94:8b:12:a1:8e:76:57:12:0f:68:9d:43:
                    c4:31:27:bd:6a:bb:ac:a7:7a:6d:1d:05:1e:6d:32:
                    1d:82:e0:43:3f:55:39:68:5a:50:63:38:1e:d0:8d:
                    f1:9a:90:da:b0:42:5a:7a:20:46:b7:72:15:ba:38:
                    fd:6c:a6:f9:4e:a7:9a:77:c7:69:c9:8f:56:a5:e5:
                    c2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:EB:4A:84:54:D2:93:94:EA:38:B4:AB:A8:2D:27:56:75:97:89:A1
            X509v3 Authority Key Identifier:
                keyid:07:D6:4D:AE:F3:39:E6:FD:AE:64:4D:B1:B2:0B:BF:54:E6:7E:5D:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:31:db:dc:7f:f9:c0:11:ab:1e:30:86:bd:98:e2:fc:11:41:
         eb:0b:87:40:74:70:15:e2:e4:8d:5b:57:ae:79:09:3f:4e:c5:
         df:95:fa:d4:b7:d9:ca:1d:82:53:5c:9b:ce:f8:22:74:11:e3:
         0d:0a:23:5b:b9:ca:63:1a:8b:76:68:f1:fa:48:a4:1b:19:64:
         d6:45:14:a9:da:22:ea:49:a2:72:c6:43:d8:42:98:a5:87:9e:
         56:fa:69:3d:e6:0d:95:1f:74:36:1c:8d:1d:51:db:60:f0:cb:
         9a:35:2b:1e:77:e6:24:ea:59:49:cb:77:24:1b:94:60:10:65:
         05:10:91:e6:6f:5f:22:ad:68:f6:b3:20:46:06:07:6e:35:7d:
         03:13:ae:c5:a3:38:ed:5f:e9:b3:78:e5:a9:9a:2b:88:cc:58:
         76:43:e3:f0:3f:2b:77:b2:12:09:0e:a4:5f:8c:49:13:fe:54:
         99:27:ce:c3:95:0f:28:f2:51:8c:ad:98:e9:4c:83:83:b9:d2:
         8c:c2:d6:5d:8d:3c:25:91:6e:85:c8:d4:59:62:07:bc:80:c7:
         fe:2e:40:9c:fb:20:85:9f:36:27:20:97:44:0b:57:37:b3:2b:
         fb:b9:ea:66:79:43:41:27:1b:79:28:d0:83:ca:ae:48:ec:fa:
         01:6e:ce:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8fQZa69nhWzgaZBXRt60MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZDY0ZGFlZjMzOWU2ZmRhZTY0NGRiMWIyMGJiZjU0ZTY3
ZTVkNjYwHhcNMjYwMzI1MTcwMTQ2WhcNMjYwMzI2MTcwMTQ2WjAzMTEwLwYDVQQD
EygwOGViNGE4NDU0ZDI5Mzk0ZWEzOGI0YWJhODJkMjc1Njc1OTc4OWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwX+gybx9J1mJm3Fmv3fijAsli1Qo
cwec6a+ob1uv9YtTanOISY5udMnPQCOlVN1QDKzO9MXw5qHHVvplwy8BpknSmenM
6s//EiN9QlidbHogyN2QIA80hVWdCQByIS24b6wHYFYQB/KjmAGZG6zi2troBzaA
f8mG17luiKqF/uMWSmjtZusyvTov3ShYb9Jl3y+73k+FHFZM5u7xIW8l7dj1uDk+
Hje57ZR4tjEOW0luPgtCGbWUixKhjnZXEg9onUPEMSe9arusp3ptHQUebTIdguBD
P1U5aFpQYzge0I3xmpDasEJaeiBGt3IVujj9bKb5Tqead8dpyY9WpeXCzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAjrSoRU0pOU6ji0q6gtJ1Z1l4mhMB8GA1UdIwQY
MBaAFAfWTa7zOeb9rmRNsbILv1Tmfl1mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjlaTnJ2TTU1djJ1WkUyeHNndV9WT1otWFdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9kN2ZkMmMtOTVhOS00YzA5LTllNDct
ODI3Zjk2NDhjMDIyLzEvQjlaTnJ2TTU1djJ1WkUyeHNndV9WT1otWFdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9kN2ZkMmMtOTVhOS00YzA5LTllNDctODI3Zjk2NDhjMDIy
LzEvQjlaTnJ2TTU1djJ1WkUyeHNndV9WT1otWFdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWjHb3H/5
wBGrHjCGvZji/BFB6wuHQHRwFeLkjVtXrnkJP07F35X61LfZyh2CU1ybzvgidBHj
DQojW7nKYxqLdmjx+kikGxlk1kUUqdoi6kmicsZD2EKYpYeeVvppPeYNlR90NhyN
HVHbYPDLmjUrHnfmJOpZSct3JBuUYBBlBRCR5m9fIq1o9rMgRgYHbjV9AxOuxaM4
7V/ps3jlqZoriMxYdkPj8D8rd7ISCQ6kX4xJE/5UmSfOw5UPKPJRjK2Y6UyDg7nS
jMLWXY08JZFuhcjUWWIHvIDH/i5AnPsghZ82JyCXRAtXN7Mr+7nqZnlDQScbeSjQ
g8quSOz6AW7OAg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:44:05 2026 by rpki-client