Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
File:                     ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft (raw, json)
Hash identifier:          pjm6qEQoNnV6xQ28jv+8c6Lxes9LAK0FJ+FQhxXPPXY=
Subject key identifier:   5F:0D:82:FA:D2:2C:B7:EA:67:6D:61:7D:97:01:4B:16:10:9B:F8:CA
Authority key identifier: 44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
Certificate issuer:       /CN=44e888a76e99851b01fb86cec537d4d8e610de16
Certificate serial:       019D265F9B77B899B44E3F84D0F56873B86C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
Manifest number:          1893
Signing time:             Wed 25 Mar 2026 19:01:32 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:32 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:32 +0000
Files and hashes:         1: 67pKVcBP4g1ka7BHnXY8o1GjatI.roa (hash: NHI8d7vH5tjpxPomV3eBVCOa5aQTAvgW0GwAOx6HDCM=)
                          2: 6oyqxH6fbfCjScGv2qC0XiD5gCU.roa (hash: X2pwG2wmLfB4M+6njFbtbY0lJjAJiNG8E4ePk2t5PZ8=)
                          3: BG7hZwdKTnkeh7F43mqTspITrC4.roa (hash: 9w3fRT22xu3zZICYpxgXI0CEKv6s/N6rtv0UUVT3l1A=)
                          4: E3UcI6HbofZm_snwFtZqoqwg5-4.roa (hash: d4QiFFj+amh2JyYpNEFn0n/k8uKNUlkfpX81m7S5ZMs=)
                          5: FKX17PHtkRiTG0VO4fdkemmP9q0.roa (hash: 46njTd7Whv8oDcKQQcq166dpo8DO+HMFvA14eGT2kvA=)
                          6: Ig2ees5HLfOePoZmV44oy1ypzFU.roa (hash: Xt9yas6tqq8RhgQUndyXvcQyGrhriLDFS4gSQyBaGSk=)
                          7: KsuuqZuzWciosvKgFRPXzNp2Gcs.roa (hash: fH9tuqcfvS+JzHyWBgJi96fMfx/uXZQsaH9PlzbW4JY=)
                          8: ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl (hash: 8w3jQbMtSwUz9dVgWeM5BSTjA1fhF5evvopRRjldD50=)
                          9: k0wZqmhMQI1_yKbqeg-OeoA8ghg.roa (hash: okOMVmkk1MoA9VfXhi+YW9SB7pABGOjg3hztcxMcS9k=)
                          10: nzPG4vwX1IeVP2cSHRY5OFKnn24.roa (hash: OLyA9Gv/rl69xwJleWIyqhvz9X35ZOv/7WlzFp3vKrM=)
                          11: qOQMcO_XSSMHONHJzrh7779P3jo.roa (hash: ade5av8pqt7Ksv1kVj/c8U/iRecFohg4Rxixd7NnxeU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:9b:77:b8:99:b4:4e:3f:84:d0:f5:68:73:b8:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44e888a76e99851b01fb86cec537d4d8e610de16
        Validity
            Not Before: Mar 25 19:01:32 2026 GMT
            Not After : Mar 26 19:01:32 2026 GMT
        Subject: CN=5f0d82fad22cb7ea676d617d97014b16109bf8ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b5:35:b9:50:d5:b0:a3:da:4d:c3:71:6e:59:
                    eb:bc:4c:1f:67:05:be:14:cd:9f:f7:47:43:4f:44:
                    7c:25:57:27:70:0f:bf:3c:65:01:2e:a3:06:61:4a:
                    61:b3:c2:2c:0a:2d:d4:c3:a2:30:86:ed:6e:c8:c3:
                    a9:d4:97:a3:23:d3:fe:77:92:de:95:0a:5e:23:11:
                    9f:74:6e:20:8c:99:5a:8a:2c:a5:36:8f:44:66:d0:
                    53:cd:bd:17:43:c0:f1:6a:9b:e7:b9:86:a0:6c:7a:
                    84:fe:b2:d9:71:b9:e2:f7:b9:9c:16:a0:88:4b:bf:
                    95:bc:3e:b4:0c:8e:1b:d0:f1:28:cb:35:95:bc:02:
                    27:45:60:50:a7:1f:cf:53:22:2e:78:4e:13:57:1b:
                    44:0a:fa:7d:17:53:fa:94:d6:b7:dd:1a:8c:40:34:
                    07:15:c1:7b:86:78:c8:89:cf:f2:df:80:7d:e1:18:
                    27:67:5f:c6:9a:d1:9c:69:62:0b:c8:fb:ee:0a:78:
                    ec:47:a5:3a:59:b0:a3:a1:6d:13:79:ea:02:c5:86:
                    f4:e1:5f:7e:e3:be:c1:f2:f1:7e:18:91:62:c4:1a:
                    fa:7f:6d:13:71:85:e6:63:f1:cd:8e:3c:8b:8b:e0:
                    21:96:53:25:ea:4e:d5:24:96:4c:1e:eb:43:55:1f:
                    0a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:0D:82:FA:D2:2C:B7:EA:67:6D:61:7D:97:01:4B:16:10:9B:F8:CA
            X509v3 Authority Key Identifier:
                keyid:44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:8c:f9:1c:cf:73:fd:c9:c8:87:8b:ee:53:50:2c:a6:ae:44:
         dc:bd:fd:85:f3:96:f8:13:db:d6:21:d0:12:e6:84:8f:13:9b:
         d7:de:9c:df:d5:5c:d0:9b:56:8f:c6:06:d4:53:41:86:c1:a5:
         ea:06:72:57:4e:5a:e9:28:10:64:b2:9e:4a:63:94:d3:10:a5:
         b5:1f:4b:a0:2b:d5:99:87:6e:e9:f4:75:82:74:ce:ad:32:1b:
         21:53:49:c5:52:dd:1b:0c:70:40:59:9f:99:df:db:c6:9e:03:
         53:11:77:8d:64:f1:16:07:16:84:36:12:8d:8c:42:ba:50:01:
         82:df:bd:08:c6:7b:c7:6a:1f:38:4e:04:59:a3:04:b9:c5:b1:
         72:c1:93:80:5f:6b:c7:72:52:74:c3:97:b9:c7:15:0e:79:7a:
         c3:1a:6f:b3:4f:71:18:11:ec:45:a7:de:57:ab:08:82:76:dd:
         32:2e:f3:a5:8d:84:dc:53:fb:84:39:bc:d3:8b:1a:fb:f3:01:
         56:b8:f6:09:a2:34:07:72:46:0d:e8:08:3a:54:47:e4:74:1b:
         cf:fd:aa:5d:2e:d5:e4:a8:31:70:19:2b:10:be:e4:82:7c:a0:
         67:a0:5c:a7:cc:51:f1:cb:98:71:ac:f3:95:8b:f9:0f:51:ea:
         1b:9d:c4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:14:29 2026 by rpki-client