Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
File:                     ge7UCROD2e1AVtn07_fSYi3c4gU.mft (raw, json)
Hash identifier:          Tkg06PaMjayxZQQE20sCY9vFnaxdry1On+sqN7snNpE=
Subject key identifier:   A7:F2:F5:F0:A6:B3:C3:FB:91:D7:10:C2:F8:AA:F9:C8:3F:84:2B:F4
Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
Certificate issuer:       /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Certificate serial:       019D27E0312D2C5BA7AEE11E416D20FF4D99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
Manifest number:          18A4
Signing time:             Thu 26 Mar 2026 02:01:37 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:37 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:37 +0000
Files and hashes:         1: 1-NC7tshaF2ypJ8_MjHNn7wk6ylg.roa (hash: jCwzjmjn98JT6TSQJ5ZYF1MDhZK9lKwwZgcySCCZS8w=)
                          2: AQBZKKUw0CfqLnDcy9hcMLkcBVQ.roa (hash: e8Nsfm4NARCM4kcuUWqaXIOJHBmE9O9GAIR9R4lcjmA=)
                          3: OIeDUqwKxJ57Hp4z0SriVjqHOa0.roa (hash: zgCtWjL78//MuJt8PD5olXX7a8O1W8EOEEdN7zziB7Q=)
                          4: VuSedNq080u42oe8PtK90QTYvdk.roa (hash: ZZTjW9ToPnYbK8YX5tY0XOAbcYCc6gHAC9O1wsgeddc=)
                          5: XiqMdLxfKoUjx95VMJtJvMxAZvY.roa (hash: SXoL5HuxIAiQquuEruAdXQNKyAHRVH7HOzbYGfTqh5A=)
                          6: bVitBPgZXTQtQI1h9qes3hDRRxY.roa (hash: tqq2V5OTdPLeDjlXCD6tq05OTPazJPQl/dxmKD2F5i4=)
                          7: ge7UCROD2e1AVtn07_fSYi3c4gU.crl (hash: 2TF+xmH67mJ16/UeP8iMUAe+mCyiofsN1fsFJ2Y7ghI=)
                          8: nQU1rY2ErLKpGm3xNOk2Vd6maac.roa (hash: I6X6MYBEOfSMB0M7TNs7z1Yj80MN+WqIyp43IIumKAY=)
                          9: zT2SVobKOrqCSSH6tmxWYylcNJ0.roa (hash: +n2XEQtkvSldlIzuGKqZcGU0lIa7VYbzPW0ct3CZyds=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:31:2d:2c:5b:a7:ae:e1:1e:41:6d:20:ff:4d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
        Validity
            Not Before: Mar 26 02:01:37 2026 GMT
            Not After : Mar 27 02:01:37 2026 GMT
        Subject: CN=a7f2f5f0a6b3c3fb91d710c2f8aaf9c83f842bf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:82:b0:5e:9e:15:73:44:c7:db:e8:3d:02:9c:
                    0b:32:06:e3:e8:30:b2:4a:81:5c:c2:84:9c:76:5b:
                    6c:0e:f4:7a:d8:0c:10:8f:81:ec:cf:80:bb:51:62:
                    1e:cd:7a:6e:15:cb:03:af:47:e9:69:95:46:76:34:
                    5c:97:37:42:83:fb:78:d2:16:b5:59:3a:61:7f:59:
                    8a:29:a0:4f:a1:33:1e:b3:92:62:28:28:97:73:e9:
                    9a:60:ac:d0:2f:9b:88:3d:1c:9e:70:fc:90:5c:bd:
                    8e:28:04:b6:18:0e:c2:a7:34:50:56:16:94:7b:1b:
                    37:73:0a:a8:43:cb:c0:9b:e3:b0:27:d0:56:f1:0e:
                    f4:32:b4:72:de:6f:fa:7c:9b:93:70:c4:e9:c7:68:
                    c6:1e:ba:49:b0:c3:bb:6d:42:aa:76:f4:0b:de:c0:
                    9e:b4:23:f2:f0:3f:ae:09:9a:ce:05:ac:b8:b3:fb:
                    93:25:d0:36:94:4b:93:cd:9d:3f:2f:ce:bc:f1:44:
                    c6:1d:83:c3:bd:bc:e4:0c:7d:3d:a6:e7:1c:cb:83:
                    5c:44:bc:15:0a:d2:92:89:81:3f:71:63:34:f8:12:
                    36:e4:7d:66:d5:06:4d:d6:1b:9c:2f:68:01:12:ed:
                    7d:8d:21:94:b9:53:1a:38:a9:a3:00:82:98:29:20:
                    fe:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F2:F5:F0:A6:B3:C3:FB:91:D7:10:C2:F8:AA:F9:C8:3F:84:2B:F4
            X509v3 Authority Key Identifier:
                keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:d2:82:b3:aa:93:11:3b:45:7a:b2:b6:74:54:75:52:68:04:
         a7:a0:1d:1c:48:c2:9e:dd:4d:de:92:3a:b5:ee:74:75:58:a5:
         ec:09:31:cb:55:49:e6:1f:f0:36:03:74:22:60:57:8b:e5:1b:
         c9:e8:07:76:e2:e0:c6:0d:0c:82:e0:ed:0b:ee:7f:fd:a3:48:
         f5:3d:fc:01:c9:4e:0a:56:b3:fe:74:0a:12:e8:c8:56:a8:5b:
         ac:3d:57:63:95:19:3f:13:4e:b9:e4:4d:c1:28:f5:62:04:f8:
         5d:2f:20:0f:93:42:3d:0d:cd:c0:44:3f:1f:6e:a5:84:b9:62:
         f2:70:2f:67:a8:a8:c5:0e:79:8f:f3:8a:24:f8:34:fa:4c:c6:
         11:cb:16:7e:03:c0:69:f4:5c:9c:15:64:62:22:f0:1d:05:d2:
         eb:11:cf:66:fc:48:e2:b9:a2:9a:8c:3a:f5:7a:6c:2c:a3:eb:
         dd:1b:b8:c1:a0:6d:5f:13:f6:ed:72:83:03:14:f7:57:d8:56:
         db:59:a3:96:f4:48:8a:38:41:27:29:7f:d9:69:52:5f:8d:b0:
         c0:c8:4e:43:c9:6e:b4:e5:4c:95:67:8d:15:5c:ff:ea:79:99:
         a5:0c:e9:00:20:d7:b4:16:37:53:95:b9:36:bc:fc:2c:e8:9a:
         52:a7:64:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:51:59 2026 by rpki-client