Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft
File:                     7ouogkxcjSBzJqSjq4k-u49Qlq0.mft (raw, json)
Hash identifier:          KHVoly6BdIDfKiicRwOT5Dg5F+8UdTe4LC3HTdbIucs=
Subject key identifier:   8C:90:11:6F:4E:6C:58:A1:08:8B:C1:DA:30:4C:2A:24:0F:E7:BE:D4
Authority key identifier: EE:8B:A8:82:4C:5C:8D:20:73:26:A4:A3:AB:89:3E:BB:8F:50:96:AD
Certificate issuer:       /CN=ee8ba8824c5c8d207326a4a3ab893ebb8f5096ad
Certificate serial:       019D28F1FCDC4FD566457CC18F044512B650
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft
Manifest number:          1966
Signing time:             Thu 26 Mar 2026 07:00:40 +0000
Manifest this update:     Thu 26 Mar 2026 07:00:40 +0000
Manifest next update:     Fri 27 Mar 2026 07:00:40 +0000
Files and hashes:         1: 1-H0y4muQP0qGsbnwDRkuAQcDW7E.roa (hash: g9VndcainQCE9rJPzvx2gBX4SdQ4CkKN0leZNSGdqXk=)
                          2: 7ouogkxcjSBzJqSjq4k-u49Qlq0.crl (hash: nJaNJ97oPt/693Tfo8F4fwQjSbPTpKUiuAiRJ4tPaM4=)
                          3: 9_qzaYR-EszIpBxI4ownqBBUFGw.roa (hash: VhzjhZWKdSpMHocreuG2Si0iTaWmN7K1sjii56hPLwc=)
                          4: KjzZQ3XHTR1E4K2w5QoidTvxCog.roa (hash: 0FtQ/w38a9SAPO2B+4vZGc9BxQRkeEmmddcJQ1zQ63s=)
                          5: PdBo5LYrW3mTEROFtgvAOtWJw7o.roa (hash: FthkQ7lp8mIcRsIs/VRf4z45qSoRaUz1xKUgBE6qdA4=)
                          6: QOp6ldZ4aq2zfMPYvuOeV0oKmeY.roa (hash: 8YOvlrB9urinWAqeR4fd1zgfcxdDnYVPoOrAJi9cHqo=)
                          7: YuD6mYeegaW9d29Ci66BL3l4jWw.roa (hash: cYyPCH7nR9uMcm/IXKU1fKBDvQZmREUlYnB22XhXA1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f1:fc:dc:4f:d5:66:45:7c:c1:8f:04:45:12:b6:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee8ba8824c5c8d207326a4a3ab893ebb8f5096ad
        Validity
            Not Before: Mar 26 07:00:40 2026 GMT
            Not After : Mar 27 07:00:40 2026 GMT
        Subject: CN=8c90116f4e6c58a1088bc1da304c2a240fe7bed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a7:0a:bc:a3:ea:4f:b5:bc:db:a0:d4:07:c6:
                    7d:6c:54:b0:57:d9:f6:dd:56:35:03:52:20:20:08:
                    c0:80:ec:da:fe:a7:5c:c7:7f:64:d1:dc:ee:a0:dc:
                    08:b8:a7:e0:18:5b:f0:44:b3:e2:82:4d:78:cf:fa:
                    46:92:ed:bd:07:1e:45:97:6b:5a:54:c7:d2:55:15:
                    e3:de:ce:1c:a5:ac:bc:72:7c:1c:33:e4:93:2f:91:
                    0b:69:f4:c0:a5:95:f8:76:c7:f0:9a:44:e9:88:6d:
                    52:23:92:24:80:09:f9:e8:b8:28:1e:4b:68:44:6f:
                    ea:71:0a:94:22:8e:bd:45:fb:64:24:7b:c1:db:26:
                    cf:5f:29:fd:19:66:f7:87:50:8a:ee:95:36:42:03:
                    97:b8:30:17:c8:dd:54:27:c0:55:13:e1:b9:7a:56:
                    39:ed:da:db:1f:48:34:c3:b2:d1:7f:8d:1b:3d:9f:
                    5d:03:f2:bb:ec:94:44:4c:23:ef:c9:90:6c:f8:ae:
                    89:20:a6:9a:b0:43:70:0a:5c:13:a6:8f:53:5c:b7:
                    bc:7a:bc:5f:c8:2d:b5:6d:3e:c8:ee:67:f2:7d:4d:
                    3e:d5:46:39:81:12:3f:8c:5e:f3:62:f8:32:3d:08:
                    cd:fd:3e:2f:45:29:7c:62:5b:d9:d7:7c:40:c6:e3:
                    73:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:90:11:6F:4E:6C:58:A1:08:8B:C1:DA:30:4C:2A:24:0F:E7:BE:D4
            X509v3 Authority Key Identifier:
                keyid:EE:8B:A8:82:4C:5C:8D:20:73:26:A4:A3:AB:89:3E:BB:8F:50:96:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:b1:bb:6e:09:14:3a:6d:c4:c4:22:47:74:bd:72:10:99:a7:
         a7:99:dc:bb:d2:a2:a0:14:58:5e:28:a6:64:26:be:9c:85:a8:
         50:6c:c4:9f:d3:0a:ef:37:f5:78:5c:12:a0:c7:29:43:66:02:
         5f:8f:13:e9:ef:30:22:92:e1:25:70:2c:ba:31:25:79:96:10:
         dc:14:0c:a0:98:98:8a:c4:57:48:74:f8:2a:8a:56:cb:82:84:
         34:ec:aa:f1:48:b6:d5:96:10:8a:34:80:d9:ea:21:1e:d8:18:
         ec:50:7d:67:82:09:48:ed:e7:08:c5:c8:a5:03:39:e3:91:0b:
         8b:2a:a4:30:d5:50:e5:ff:52:7c:07:36:5d:b7:60:2d:4b:48:
         47:a3:aa:b0:60:1c:72:ab:73:23:2a:08:12:1d:08:3d:a8:01:
         16:37:14:cc:4b:f1:58:9e:2e:0d:c6:f4:64:68:9d:cb:95:17:
         43:71:17:a9:de:e6:71:12:cb:54:7b:5f:eb:59:ea:86:88:33:
         f4:28:d3:9e:72:f5:5f:3b:f2:b5:14:8f:d5:24:ce:6e:de:0b:
         a7:ca:45:5a:05:db:2a:9f:ec:ed:5c:61:89:5c:ee:f3:1e:bc:
         81:5d:4d:37:65:3f:cf:d5:a1:a3:7a:00:e0:97:ec:6a:e2:ef:
         1e:46:0a:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8fzcT9VmRXzBjwRFErZQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlOGJhODgyNGM1YzhkMjA3MzI2YTRhM2FiODkzZWJiOGY1
MDk2YWQwHhcNMjYwMzI2MDcwMDQwWhcNMjYwMzI3MDcwMDQwWjAzMTEwLwYDVQQD
Eyg4YzkwMTE2ZjRlNmM1OGExMDg4YmMxZGEzMDRjMmEyNDBmZTdiZWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqcKvKPqT7W826DUB8Z9bFSwV9n2
3VY1A1IgIAjAgOza/qdcx39k0dzuoNwIuKfgGFvwRLPigk14z/pGku29Bx5Fl2ta
VMfSVRXj3s4cpay8cnwcM+STL5ELafTApZX4dsfwmkTpiG1SI5IkgAn56LgoHkto
RG/qcQqUIo69RftkJHvB2ybPXyn9GWb3h1CK7pU2QgOXuDAXyN1UJ8BVE+G5elY5
7drbH0g0w7LRf40bPZ9dA/K77JRETCPvyZBs+K6JIKaasENwClwTpo9TXLe8erxf
yC21bT7I7mfyfU0+1UY5gRI/jF7zYvgyPQjN/T4vRSl8YlvZ13xAxuNzVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIyQEW9ObFihCIvB2jBMKiQP577UMB8GA1UdIwQY
MBaAFO6LqIJMXI0gcyako6uJPruPUJatMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN291b2dreGNqU0J6SnFTanE0ay11NDlRbHEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC82MzUwOWMtNTY3Ni00ZWFmLTk5ZDQt
ZWVjZDI4ZTI4ZTM1LzEvN291b2dreGNqU0J6SnFTanE0ay11NDlRbHEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC82MzUwOWMtNTY3Ni00ZWFmLTk5ZDQtZWVjZDI4ZTI4ZTM1
LzEvN291b2dreGNqU0J6SnFTanE0ay11NDlRbHEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiLG7bgkU
Om3ExCJHdL1yEJmnp5ncu9KioBRYXiimZCa+nIWoUGzEn9MK7zf1eFwSoMcpQ2YC
X48T6e8wIpLhJXAsujEleZYQ3BQMoJiYisRXSHT4KopWy4KENOyq8Ui21ZYQijSA
2eohHtgY7FB9Z4IJSO3nCMXIpQM545ELiyqkMNVQ5f9SfAc2XbdgLUtIR6OqsGAc
cqtzIyoIEh0IPagBFjcUzEvxWJ4uDcb0ZGidy5UXQ3EXqd7mcRLLVHtf61nqhogz
9CjTnnL1XzvytRSP1STObt4Lp8pFWgXbKp/s7VxhiVzu8x68gV1NN2U/z9Who3oA
4JfsauLvHkYKHw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:28:03 2026 by rpki-client