Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
File:                     e5RH_ppKzH1v9y1seY1D1mzVDD8.mft (raw, json)
Hash identifier:          3EjPaiuFeGzOBnnNIHvdfkEzw+gGSDsrRDWwM5aPivM=
Subject key identifier:   C4:5C:A4:74:FF:43:01:98:5E:70:5D:47:0A:AB:5A:19:3D:77:3E:5E
Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
Certificate issuer:       /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Certificate serial:       019D31BE66785FB047C2E8AD14B1E3030319
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
Manifest number:          03CD
Signing time:             Sat 28 Mar 2026 00:00:54 +0000
Manifest this update:     Sat 28 Mar 2026 00:00:54 +0000
Manifest next update:     Sun 29 Mar 2026 00:00:54 +0000
Files and hashes:         1: 3WwCnnTd8cSzdKjbYhNI8g53NPE.roa (hash: aIhbguXWgQO1tJI+20Jt3xw4Dn8zy1ZDD/ntTtEtp2c=)
                          2: 4kwKLdh3RM_T2CHdwfr7djNqFPw.roa (hash: fMhCuCyOrPdsWFDfGoHBSeCFarYrpqQUzcCOvftK41o=)
                          3: 72Wb5Ky01kvhl4QhfLQ5L_ylSiI.roa (hash: vZhU/38tVfKMQXtXEf0zL9xQr8OezLicNnuxASDwPqs=)
                          4: 7V5o0G742Xx6wwekFHlHI_pH6s8.roa (hash: 5RA9pDaVBJdJXOc6UztowcHA38lXbN2dK51pTKu1n/4=)
                          5: FLzeXwMTcxPKK3Cylrlgedr-ojc.roa (hash: YhEZuAyUsLvSj9fGLqbsotQyMGnBUmdmRvWkAdNehQg=)
                          6: FwV9_soW4dQWq_CwmZwM9y_Yg24.roa (hash: xPzL9Tf4VzlH+kYxMAxG9MOUeYhbFQVm/oBhO2qB2hw=)
                          7: KFPTzEg4Y0L6aJGjreTB0eGWtcY.roa (hash: 8tieHB2/IwsPF3XmJYABOmkTWjKNGkzX0/aPiwcDseA=)
                          8: KvNF-GNwZ3nupnOa4r1l2jy1zCI.roa (hash: atOFPKEzfFHxFdsBH5bVAxThEg5GX7FYolGtUJKktyc=)
                          9: M5z_FJkpC3bqs6y8rNLlO6L7mt4.roa (hash: pnzeAaisjISO2SuVi7e+PqwovvETfQV3LOc/UO86oM4=)
                          10: RFitIfzbelUgTTUVvMm_6P7Qua4.roa (hash: k1QiINtX4yKyCSBsMvwbViWzQ/ACbhcMG/vPDPVXV8c=)
                          11: S1JnSXKRylQf_Uh5rIFy-LkjUjc.roa (hash: vNnVXt5NopYDCqipg2PS3dWJG6ySbA9t5QTX1gIkUow=)
                          12: UnPZZ3Kg5vEIC6EGE2a0fCR05Us.roa (hash: nCSgngo72sAUBIAPkqY1n0nS+kfpLh6FUfGBWOhDNHw=)
                          13: VaLOykeeFU8I2YIJdyOEx8ZVuUc.roa (hash: kAYhfT6Miw9r4z05yf2O6XBU1ToH3EWuwwXPo6D2N2A=)
                          14: WJ-fLCvpA2b7b4xbzc2R6ukUcDA.roa (hash: SBFLbGd5ofqXRAn4g/0xvSlGhywAxzvjT5O22NBuorc=)
                          15: bY71skCcBRy3_7E1b-YloIxj3EI.roa (hash: wz4302B/D0gTMZmb2I2/ICofgsbTDyh3vJJUmvhGTb4=)
                          16: cxrFYholN9HvJ-us9fmJgzA0WI0.roa (hash: Wwa5EX50bfWPI0XbhpID/ZlbhKK3J9mlKgRfeQnAMPQ=)
                          17: dIdr6CdHDFmEHdvXrAfl7icIYxY.roa (hash: WfzmExFAW5iLs+d61FaP+J5J9DI0CoXqdTMcrCDFzqo=)
                          18: e5RH_ppKzH1v9y1seY1D1mzVDD8.crl (hash: 4nsBYsq3mGXyIr0m3snWExxvyZWRoM1K1PsbV5wniKc=)
                          19: f5M-hTzNDSSqohb0b1K4vjNcyxY.roa (hash: ciY50ZlYxva7aKDHcfCcjzo6LTzr/qKlBuKYyTji90k=)
                          20: fISbt3TEt5z7hvgEykaWZ1xKNyY.roa (hash: CfyvMhS9ewbjRLfiApY3927/WtEF1gMMScOXv02Vkr4=)
                          21: gIP9USWnnclcg29VZ6IPiCLAwfs.roa (hash: 5kwZkbeysJwaJZe9nLV8atLbSq1wE0MO56m8K6TUyD0=)
                          22: hgcz_S5xSTbLKn2JgFiffzoE0Lc.roa (hash: DEovq/0Otm5xzo+ikKL6F1zlfXWLyId8aTGFI9Mt6iE=)
                          23: o-2kICnoHNfivNsTLGTpqOYwstQ.roa (hash: YkVOT+LP7w8mTJUbnwv0gEvNf1idVM4c+qYZj2+A7Oc=)
                          24: r9B02vmajGoqzJg47qEQQvo3CxE.roa (hash: SlXFzGDnnfIbDGN67Fp7Oc2RR984LeMf9GzRFDPOlaA=)
                          25: xp4XInmvIX6CC9Ex-JmVHgrbPgs.roa (hash: RHkZbfHLGorgQEqsyMXzjKwc68C6UanDs4STBF1Ck9I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 00:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:31:be:66:78:5f:b0:47:c2:e8:ad:14:b1:e3:03:03:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
        Validity
            Not Before: Mar 28 00:00:54 2026 GMT
            Not After : Mar 29 00:00:54 2026 GMT
        Subject: CN=c45ca474ff4301985e705d470aab5a193d773e5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c8:0f:2a:8d:50:3c:09:50:57:20:a6:c2:a4:
                    7c:08:bc:cb:1a:b9:a1:f0:7f:85:a6:48:11:b2:a0:
                    67:ef:b7:59:6c:da:e2:0a:43:93:a2:5a:0c:05:d1:
                    38:49:f3:af:c1:ca:fe:16:19:c7:88:fc:e4:61:32:
                    0e:89:2e:29:ae:fc:e5:cf:86:d2:30:2c:fb:3c:cc:
                    58:e7:75:18:f0:e0:62:0c:60:45:b0:e1:11:b0:6d:
                    6e:e2:fc:9c:10:7f:c4:20:46:31:28:7c:0e:f6:94:
                    c4:c7:75:f8:b2:b7:35:35:d0:df:94:f7:75:de:bf:
                    93:52:d3:4d:a8:30:8f:f0:4a:7b:61:46:5c:a6:c4:
                    0a:79:8c:7c:41:b3:b7:73:6a:c2:82:a7:13:a9:f6:
                    65:09:e8:14:fe:d6:66:b2:8a:3b:e9:2d:81:f3:27:
                    83:9f:53:b5:1b:82:1b:87:7e:ed:69:c9:60:6e:bd:
                    62:4d:96:51:f9:7e:8d:a8:a6:dd:ea:ae:20:e0:6f:
                    28:30:3a:a3:3e:fb:0a:77:df:8c:d4:95:8d:21:9a:
                    f5:e6:48:1d:d4:3d:45:8d:31:70:58:60:3f:06:c3:
                    62:84:d3:b1:8d:95:d5:a5:d1:5e:fc:d5:9d:98:84:
                    ab:fc:a8:75:19:37:a5:b0:48:6d:0a:a3:93:01:ec:
                    18:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:5C:A4:74:FF:43:01:98:5E:70:5D:47:0A:AB:5A:19:3D:77:3E:5E
            X509v3 Authority Key Identifier:
                keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:bb:b8:81:4c:28:59:a1:7c:36:9f:c6:e2:a9:3c:76:4c:e1:
         26:ce:30:e3:70:b5:c7:46:e6:6d:64:49:70:f8:05:02:01:1a:
         6b:50:be:61:5a:71:9a:a6:4e:86:f4:a7:22:a6:ab:21:37:89:
         c3:ae:83:52:fa:32:67:f5:43:b8:79:9f:77:55:a0:d7:05:b7:
         86:20:82:90:65:24:4b:b2:1e:71:9d:a5:2f:2b:8a:9a:81:cc:
         14:76:8c:2f:ba:63:4f:ab:79:b0:99:32:eb:77:c6:72:5b:6c:
         6b:7e:20:30:72:8e:f9:7c:06:2b:e4:4f:4c:ec:6a:4b:6e:42:
         ca:a0:39:ab:d1:fc:b3:1a:1e:82:bd:02:5f:5c:26:a1:88:83:
         1c:b1:32:58:44:e5:9b:f8:f1:df:f4:e0:3a:72:53:74:10:f0:
         02:4d:c5:e7:f0:a3:97:be:c5:24:f0:21:0a:49:d0:b3:5b:ba:
         89:b9:05:12:e5:49:0f:46:8a:6e:fa:44:8c:b9:de:ce:8e:71:
         ea:be:45:5a:b5:07:9f:47:b7:d7:57:92:09:50:78:18:c8:fa:
         3d:f7:b7:b2:a4:12:ae:7a:d8:ac:e5:8e:ce:54:9d:af:35:54:
         89:74:75:18:23:bf:bf:70:74:dd:9b:bc:94:75:de:25:f5:18:
         ed:d2:fb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:40:42 2026 by rpki-client