Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
File:                     Rzd55qd8flghMZh2TOKsDmvuYjY.mft (raw, json)
Hash identifier:          UoTtpAh3oyJSvEb1VZnRQvGJq5WWc5NRHZeCal6qMLw=
Subject key identifier:   A0:92:F5:C6:74:24:48:EA:F4:45:65:E4:EF:5E:E3:35:B3:36:83:3F
Authority key identifier: 47:37:79:E6:A7:7C:7E:58:21:31:98:76:4C:E2:AC:0E:6B:EE:62:36
Certificate issuer:       /CN=473779e6a77c7e58213198764ce2ac0e6bee6236
Certificate serial:       019D29613E0BCCBEC678C96B26D6C8AD41D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
Manifest number:          0366
Signing time:             Thu 26 Mar 2026 09:02:11 +0000
Manifest this update:     Thu 26 Mar 2026 09:02:11 +0000
Manifest next update:     Fri 27 Mar 2026 09:02:11 +0000
Files and hashes:         1: 2z-c3MpGdlvNK98wFJ-FhUpQXTk.roa (hash: jD+P5ccWJZqhrEzl8gpwfaAxbm2916uuSP5OIhhxw0M=)
                          2: Rzd55qd8flghMZh2TOKsDmvuYjY.crl (hash: rU9/zpl+jApFt3AlIANoQeuiNOf3lj93CXVJs5Tzmv0=)
                          3: nLrwE_Xuj7FEwaVr2PMMyDOjcsM.roa (hash: CdwJHzzCL/DT7oBvlE4BtdzceymGADOR4McXAN25EBU=)
                          4: zyBvK059nS2Wwp2gBqWo7Jx-YsI.roa (hash: YgqvlJooFLvwv+N90i8hB60uaCFF3pjZWTtq+9rP5ww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:61:3e:0b:cc:be:c6:78:c9:6b:26:d6:c8:ad:41:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=473779e6a77c7e58213198764ce2ac0e6bee6236
        Validity
            Not Before: Mar 26 09:02:11 2026 GMT
            Not After : Mar 27 09:02:11 2026 GMT
        Subject: CN=a092f5c6742448eaf44565e4ef5ee335b336833f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f6:e0:48:cf:e4:97:e2:8f:0d:d7:41:d0:36:
                    3f:c1:76:a6:7b:fa:1c:7f:ec:7c:d5:9e:a7:32:d9:
                    75:58:73:e0:2a:cb:73:bc:a8:f1:d0:0e:3e:b4:03:
                    11:ef:19:4d:6f:1b:05:5e:b5:f3:e5:29:ea:c8:54:
                    11:1e:a4:06:a9:b4:91:36:9a:51:64:1e:8b:69:c7:
                    a1:91:f2:13:68:1d:4c:3b:1d:38:6f:73:e5:a5:e4:
                    59:ec:c9:9e:26:2e:32:53:c0:69:5e:e3:69:2f:af:
                    e4:4a:f1:3f:bf:2d:dd:42:fe:fa:7b:2a:26:ce:dd:
                    e5:d0:d2:e0:a0:5d:df:a4:5b:61:81:50:d6:08:82:
                    1d:0b:b9:b6:91:59:6d:69:20:41:cd:bb:ea:99:e7:
                    69:f2:f7:1a:b8:c4:25:16:44:4e:b5:c2:21:b9:1e:
                    9c:f8:e2:58:23:78:8c:c0:de:8b:b2:d9:79:63:f5:
                    c3:5c:9c:9c:60:95:69:d0:c1:1b:64:c8:7b:d4:c6:
                    bb:ac:2d:aa:e3:fb:f7:1c:e6:d9:96:06:24:f5:33:
                    5c:39:7c:2f:25:1a:51:50:90:31:c2:5a:7a:a9:30:
                    5e:20:8b:aa:f4:ca:39:bc:76:0b:00:be:95:e7:cc:
                    ec:bf:db:f9:59:d6:2d:2d:90:48:4a:43:af:13:fe:
                    f9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:92:F5:C6:74:24:48:EA:F4:45:65:E4:EF:5E:E3:35:B3:36:83:3F
            X509v3 Authority Key Identifier:
                keyid:47:37:79:E6:A7:7C:7E:58:21:31:98:76:4C:E2:AC:0E:6B:EE:62:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:c4:e1:7e:bd:e5:ab:ef:e9:47:d8:2c:bb:13:86:d6:36:8a:
         3b:be:18:5b:09:b0:29:3b:ce:85:ce:5c:18:21:7e:e7:41:ab:
         d7:cd:d9:4e:92:8c:1b:af:0f:06:04:4e:7b:fa:1b:d1:65:4f:
         55:25:46:82:08:5f:15:c4:18:8a:eb:ff:bc:66:af:26:73:ce:
         33:69:9e:0f:e8:c3:10:d5:75:f3:0a:fe:3e:6a:37:1f:21:ed:
         2a:4b:fe:e1:36:f5:64:5c:1d:c4:77:fe:54:63:d1:2a:55:98:
         0e:62:c5:6b:8b:6b:fa:9a:72:7f:5d:d0:a6:f7:8b:72:4e:29:
         4e:ac:1f:4a:8f:c1:a5:1a:87:d1:1a:cf:b5:e8:b6:cf:ea:d7:
         70:4b:b8:9c:a2:ce:f9:ed:7c:7b:a0:e1:13:16:4c:21:41:b3:
         86:2b:e2:d7:f7:8f:8a:17:6a:17:d4:56:61:88:24:d8:58:d2:
         75:23:4f:07:89:7f:d2:88:f5:07:87:7b:a4:4e:cd:7a:94:3f:
         93:c8:71:09:12:73:67:83:24:df:15:35:bc:8f:fe:a2:de:a2:
         cd:fd:94:9c:85:db:7b:65:c5:9e:38:16:9d:70:69:be:01:f7:
         92:f4:0f:80:7c:31:99:de:07:e4:ca:9b:31:f0:33:90:0c:99:
         ae:23:0c:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYT4LzL7GeMlrJtbIrUHXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3Mzc3OWU2YTc3YzdlNTgyMTMxOTg3NjRjZTJhYzBlNmJl
ZTYyMzYwHhcNMjYwMzI2MDkwMjExWhcNMjYwMzI3MDkwMjExWjAzMTEwLwYDVQQD
EyhhMDkyZjVjNjc0MjQ0OGVhZjQ0NTY1ZTRlZjVlZTMzNWIzMzY4MzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvbgSM/kl+KPDddB0DY/wXame/oc
f+x81Z6nMtl1WHPgKstzvKjx0A4+tAMR7xlNbxsFXrXz5SnqyFQRHqQGqbSRNppR
ZB6LacehkfITaB1MOx04b3PlpeRZ7MmeJi4yU8BpXuNpL6/kSvE/vy3dQv76eyom
zt3l0NLgoF3fpFthgVDWCIIdC7m2kVltaSBBzbvqmedp8vcauMQlFkROtcIhuR6c
+OJYI3iMwN6Lstl5Y/XDXJycYJVp0MEbZMh71Ma7rC2q4/v3HObZlgYk9TNcOXwv
JRpRUJAxwlp6qTBeIIuq9Mo5vHYLAL6V58zsv9v5WdYtLZBISkOvE/75NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKCS9cZ0JEjq9EVl5O9e4zWzNoM/MB8GA1UdIwQY
MBaAFEc3eeanfH5YITGYdkzirA5r7mI2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnpkNTVxZDhmbGdoTVpoMlRPS3NEbXZ1WWpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xZDc1ODMtZDEwYy00N2RiLWFlZTEt
NThkNjY0MjEwNjY5LzEvUnpkNTVxZDhmbGdoTVpoMlRPS3NEbXZ1WWpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8xZDc1ODMtZDEwYy00N2RiLWFlZTEtNThkNjY0MjEwNjY5
LzEvUnpkNTVxZDhmbGdoTVpoMlRPS3NEbXZ1WWpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx8Thfr3l
q+/pR9gsuxOG1jaKO74YWwmwKTvOhc5cGCF+50Gr183ZTpKMG68PBgROe/ob0WVP
VSVGgghfFcQYiuv/vGavJnPOM2meD+jDENV18wr+Pmo3HyHtKkv+4Tb1ZFwdxHf+
VGPRKlWYDmLFa4tr+ppyf13QpveLck4pTqwfSo/BpRqH0RrPtei2z+rXcEu4nKLO
+e18e6DhExZMIUGzhivi1/ePihdqF9RWYYgk2FjSdSNPB4l/0oj1B4d7pE7NepQ/
k8hxCRJzZ4Mk3xU1vI/+ot6izf2UnIXbe2XFnjgWnXBpvgH3kvQPgHwxmd4H5Mqb
MfAzkAyZriMMFQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:40 2026 by rpki-client