Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
File:                     pC0LgmZEoYOHz4Mi235kavY9mGo.mft (raw, json)
Hash identifier:          0LnEThodrb1N8IBA+bZHIWI/NRQcfAhjd+EG1r9IcUc=
Subject key identifier:   61:E0:C0:06:C5:41:FB:E3:5A:01:62:84:6B:96:C6:6D:2D:92:A3:35
Authority key identifier: A4:2D:0B:82:66:44:A1:83:87:CF:83:22:DB:7E:64:6A:F6:3D:98:6A
Certificate issuer:       /CN=a42d0b826644a18387cf8322db7e646af63d986a
Certificate serial:       019D2960CF6DE6F6FE5B3F56035E182A2197
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
Manifest number:          05F4
Signing time:             Thu 26 Mar 2026 09:01:43 +0000
Manifest this update:     Thu 26 Mar 2026 09:01:43 +0000
Manifest next update:     Fri 27 Mar 2026 09:01:43 +0000
Files and hashes:         1: 3fJrjAYV-8WA5qmnNRu8vP1jkLs.roa (hash: UTNsuGJV1hBq6NhuyQF7exUAJYp789Ei8OqvCYeZo7o=)
                          2: pC0LgmZEoYOHz4Mi235kavY9mGo.crl (hash: AIFUlC3kghm5UnJ6lBeV9v+u9BcnDm+9ScSq72EP4iU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:60:cf:6d:e6:f6:fe:5b:3f:56:03:5e:18:2a:21:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a42d0b826644a18387cf8322db7e646af63d986a
        Validity
            Not Before: Mar 26 09:01:43 2026 GMT
            Not After : Mar 27 09:01:43 2026 GMT
        Subject: CN=61e0c006c541fbe35a0162846b96c66d2d92a335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f3:4b:f1:18:10:ec:8c:d1:1c:df:d9:e1:72:
                    3d:ab:24:7b:5d:b0:b8:6f:ef:b2:99:a2:46:ea:e6:
                    a5:52:e8:96:d4:eb:27:87:9c:83:a9:99:0b:00:83:
                    df:1d:2a:c2:d6:d1:b1:d9:6c:63:79:aa:ff:8a:70:
                    f9:17:91:86:c5:15:cc:92:5f:e6:e6:42:79:84:2f:
                    13:7d:b0:8f:45:fa:71:8e:ec:76:28:6c:95:c0:54:
                    91:85:3d:f6:ef:0d:67:ac:d9:cf:94:a7:51:4f:32:
                    63:b1:9e:43:76:9d:b1:02:8e:1b:ee:ef:c5:e4:61:
                    83:51:06:5e:0c:a6:1b:60:1a:ce:2b:ec:ca:2b:1e:
                    86:c4:cc:37:b4:fc:f0:35:a9:64:98:ed:a3:a9:aa:
                    2f:fb:4b:af:80:01:f3:f9:fa:c7:39:18:59:d4:86:
                    35:5f:b0:ce:ef:eb:8a:23:b6:dc:46:e4:08:6d:99:
                    64:ed:5c:d9:33:67:62:eb:ec:b3:40:e8:19:79:b7:
                    87:a3:49:b6:ee:6d:57:fa:7d:ca:a3:1a:00:45:4e:
                    fe:70:03:cd:32:72:6e:6b:90:52:ad:fc:24:ae:81:
                    62:4f:95:c6:5c:6a:29:9d:6a:2f:5f:7e:66:a7:94:
                    6b:15:74:85:77:59:cb:22:e6:2f:2d:e3:44:e0:4f:
                    1b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E0:C0:06:C5:41:FB:E3:5A:01:62:84:6B:96:C6:6D:2D:92:A3:35
            X509v3 Authority Key Identifier:
                keyid:A4:2D:0B:82:66:44:A1:83:87:CF:83:22:DB:7E:64:6A:F6:3D:98:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:91:db:7c:1d:dc:84:e9:0d:6d:3b:8c:03:c1:1d:18:3c:7a:
         d9:46:8c:73:01:a5:14:a6:d5:67:e3:7d:c2:36:7a:0c:b4:c8:
         9f:0e:08:69:97:63:8a:1f:5f:07:e5:af:3a:a5:3c:00:36:25:
         5a:49:a3:7a:af:d7:1b:87:55:8b:e7:db:16:95:ea:37:9f:e4:
         01:74:11:2b:94:88:b2:7b:48:0b:a3:4e:6b:ef:c7:c7:f1:ee:
         7b:12:b6:32:36:52:77:f9:7e:1c:58:3d:51:21:7a:a2:c3:58:
         e0:e1:80:59:5c:b4:02:07:7d:ef:d4:0c:61:81:6d:a7:7e:62:
         de:e5:36:78:2a:88:ec:4a:75:46:b7:ae:e0:91:6f:d3:cc:fa:
         65:f9:7b:ca:c3:0a:80:86:fc:3c:f9:a6:41:59:fd:7d:ed:2c:
         8e:fd:ef:f8:54:74:cf:23:d8:0e:50:e6:fe:5d:81:a3:e6:8c:
         b4:3b:58:2c:17:91:9f:ce:bd:ad:6a:30:15:42:4f:1e:18:e1:
         54:1e:52:75:b2:1e:7f:b3:ef:0b:1a:4c:81:8b:99:c0:56:f2:
         e1:d1:4e:f8:9d:fe:c3:fd:19:a2:64:70:cb:d0:f1:ea:55:4f:
         39:0a:f5:84:ba:34:7d:a7:ca:e6:a5:4b:83:92:61:ec:2d:5e:
         eb:ea:63:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYM9t5vb+Wz9WA14YKiGXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MmQwYjgyNjY0NGExODM4N2NmODMyMmRiN2U2NDZhZjYz
ZDk4NmEwHhcNMjYwMzI2MDkwMTQzWhcNMjYwMzI3MDkwMTQzWjAzMTEwLwYDVQQD
Eyg2MWUwYzAwNmM1NDFmYmUzNWEwMTYyODQ2Yjk2YzY2ZDJkOTJhMzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfNL8RgQ7IzRHN/Z4XI9qyR7XbC4
b++ymaJG6ualUuiW1Osnh5yDqZkLAIPfHSrC1tGx2Wxjear/inD5F5GGxRXMkl/m
5kJ5hC8TfbCPRfpxjux2KGyVwFSRhT327w1nrNnPlKdRTzJjsZ5Ddp2xAo4b7u/F
5GGDUQZeDKYbYBrOK+zKKx6GxMw3tPzwNalkmO2jqaov+0uvgAHz+frHORhZ1IY1
X7DO7+uKI7bcRuQIbZlk7VzZM2di6+yzQOgZebeHo0m27m1X+n3KoxoARU7+cAPN
MnJua5BSrfwkroFiT5XGXGopnWovX35mp5RrFXSFd1nLIuYvLeNE4E8bpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGHgwAbFQfvjWgFihGuWxm0tkqM1MB8GA1UdIwQY
MBaAFKQtC4JmRKGDh8+DItt+ZGr2PZhqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEMwTGdtWkVvWU9IejRNaTIzNWthdlk5bUdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8yMjYwZjItM2NjZC00NGU1LTg0Mjgt
ZTgyZDVlZTRlNDBmLzEvcEMwTGdtWkVvWU9IejRNaTIzNWthdlk5bUdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8yMjYwZjItM2NjZC00NGU1LTg0MjgtZTgyZDVlZTRlNDBm
LzEvcEMwTGdtWkVvWU9IejRNaTIzNWthdlk5bUdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmZHbfB3c
hOkNbTuMA8EdGDx62UaMcwGlFKbVZ+N9wjZ6DLTInw4IaZdjih9fB+WvOqU8ADYl
Wkmjeq/XG4dVi+fbFpXqN5/kAXQRK5SIsntIC6NOa+/Hx/HuexK2MjZSd/l+HFg9
USF6osNY4OGAWVy0Agd979QMYYFtp35i3uU2eCqI7Ep1Rreu4JFv08z6Zfl7ysMK
gIb8PPmmQVn9fe0sjv3v+FR0zyPYDlDm/l2Bo+aMtDtYLBeRn869rWowFUJPHhjh
VB5SdbIef7PvCxpMgYuZwFby4dFO+J3+w/0ZomRwy9Dx6lVPOQr1hLo0fafK5qVL
g5Jh7C1e6+pj8Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:40:43 2026 by rpki-client