Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
File:                     T4rqLwJfSVvqzufOWoggUZ3aE3A.mft (raw, json)
Hash identifier:          LUtPKIhOTo6oq6DLGQHN08EV2y4QsWqgsw/jfRxhdRM=
Subject key identifier:   28:01:68:45:76:51:80:E2:C3:79:ED:93:9B:A7:B4:B0:02:36:DE:55
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Certificate issuer:       /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial:       019D25F1DD7A77FBDE5B2C957013EECD4205
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
Manifest number:          1927
Signing time:             Wed 25 Mar 2026 17:01:41 +0000
Manifest this update:     Wed 25 Mar 2026 17:01:41 +0000
Manifest next update:     Thu 26 Mar 2026 17:01:41 +0000
Files and hashes:         1: 1zpG2CVrxsMORx6-f7bFYATXDp8.roa (hash: ZOZ+1A/5qrE+UhYF92TopbAqYAeLlDGmriRx3ZRkiq8=)
                          2: 4BT3ESnzNjCT2x59JVbAAXxSXAY.roa (hash: O8CcngTVUlHleqwd4kGt0w16qDAwdr4oH0nwRI5FfLI=)
                          3: 67Hu1VCqZOSeOiCM6FEEFd3iXlE.roa (hash: Him9pl9KpdgeG8GWKYKiLJdFav7i0xf6FzUlhcxDHRg=)
                          4: AQd6696DS58WSqKOJB3_PgGA6ww.roa (hash: LGXodTKuNu4kXpvG5ujn8tNfaAjmgD5yZwsMvUZmhpE=)
                          5: DFqAchiwJnzlSG4eyo-vOSeRNeI.roa (hash: N2RIPmZbJ5fy1derB4IMwjZbzNeDMo48frV/EdBPTzc=)
                          6: Ezkbpw5h6Yu188ximBXledMTyHY.roa (hash: EUfk52t0TP+il+Ji1SToM3ssr1h7ZowDd/it1ELPNV0=)
                          7: HJPaq1ftIce0cbhMLY5uOEC-VWo.roa (hash: fBTxWIRtt9pgmNZdV8y8oKacQV2jXNDSMOz+g4gJZQ4=)
                          8: M96SaOtXf2BYyJPHvAneKZXSlX4.roa (hash: Fjx5Jib6Xzn9dBAanulC/6wjKgvgmy9B+Oq0M30jiGo=)
                          9: N0E_F_u9h5bIU-j9MGpdicwRJM4.roa (hash: 23BfC+EZdJUIXPiNf0+Gr0wVhGOB4qpNJ1OtcS1XZzc=)
                          10: NQ3alsbcYrDD3Id4_ZbBebDtKMQ.roa (hash: R7bDblUywN+L5+T5OsDfB/grAiWD1P3KTdK+6VLq0W8=)
                          11: Np-SgsMbvNtUeV1Q78-Ul_LgtAI.roa (hash: FpZOxRp9m2d8Wj5Wy6a90uOf4hQ5Liav+WcFTy+XdBk=)
                          12: OjY3C6L-EuPc2t0Qn-e-3bjWy-0.roa (hash: OthyvAnziDLpR9g+pkOT+1ZzWC7VC/seTw30st0/H/s=)
                          13: T4rqLwJfSVvqzufOWoggUZ3aE3A.crl (hash: 6Ynq1sxddeanJcoLQ/7Y8FzG94QR4866/YRX364oMW8=)
                          14: UW3uCirPlSHTXeq2kWhdNXEEF_A.roa (hash: SLhda1CULfByTMm1GHCHLQiMUOu4j8DhX2dtlcfjO6M=)
                          15: ZrACWZQMbi6NxGaCnX9YMBCOCN8.roa (hash: OlqjwKoWnqX+XWjymWXMgysC4FA6tYi6yFNdSVG5cWA=)
                          16: iGAec5WLgxQuZO87yGrv6vRcxNk.roa (hash: qbtBIjuoPTdaV1pke2Rgv7Qz00a7lyCwRwSyFcFeCb8=)
                          17: jR5kew6fzKC8LrRELsfEF_xqPY0.roa (hash: DyIyP/D8JiwLk+A9TgA7HGYw8hICN7TzEhZyhCtBhvA=)
                          18: kSRDcXV5BduSfvL7CkkTWshA1dU.roa (hash: tuGJ9p+esAzUMHyIoxPT4iHzxY3yItPA7UzoeT2/0vQ=)
                          19: mkAVPuJI8QOGwHX046ylOVj6YeQ.roa (hash: cHuseTitZM61+PjKXgr2SvysGLK0bdK5xs/hORXpxOQ=)
                          20: okpXovGo8Qws_PPRtlsVVUmZZzA.roa (hash: 4oR/V429uTC5kWQN94QEJqxEv4CSp9VQuHnF9qGLwmM=)
                          21: qyFRBJyuib1PnIx-vXa3UO6rHbk.roa (hash: ttUZYHflFlcNbkH75tZXAFD7K0f4LBSVLHQuKhH+hJo=)
                          22: sZQD0TfJ8HC_2qGUYRIygeuNHq0.roa (hash: KOmrBoIDja+ViB1TQrWYGvEgnzLPHGkGzbBf9gl0eY0=)
                          23: wl3GFHoVFq2V6agPvVTqKcV6mcw.roa (hash: kC952UxlZ4u8JejZZo0O0+1EVkE3lenB3kDD7eQXlTY=)
                          24: xh9-cYUUKhW8R7RtZCiBjbPkinU.roa (hash: KHkDJpMlqbbJXAmtu6AWC6oa3xuKdiclk8iuepf/pBc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:dd:7a:77:fb:de:5b:2c:95:70:13:ee:cd:42:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
        Validity
            Not Before: Mar 25 17:01:41 2026 GMT
            Not After : Mar 26 17:01:41 2026 GMT
        Subject: CN=28016845765180e2c379ed939ba7b4b00236de55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:15:4a:52:e2:43:2c:89:e3:ea:bf:65:f1:28:
                    b0:53:cb:20:75:5c:83:9f:07:d8:ad:80:ce:85:d5:
                    0b:3c:87:5c:79:fd:e4:73:d1:18:d1:b0:86:b1:40:
                    8e:5d:3a:0e:00:c2:06:ab:44:ee:cd:55:4e:1d:06:
                    2f:07:66:01:93:45:86:cd:c5:45:17:91:a4:06:ee:
                    01:4b:e7:7c:25:4e:62:25:1f:86:c0:d4:ba:eb:a0:
                    e4:d8:c7:86:b9:c1:b9:b7:24:c4:aa:bc:5b:63:9d:
                    2d:fa:b4:9a:ec:8f:53:db:a5:4e:92:1a:d3:20:ea:
                    48:8a:ce:fa:c2:f2:36:35:d1:99:30:08:6f:36:01:
                    f9:5d:9f:ac:b9:a6:73:1e:0a:69:25:f7:29:e5:82:
                    c4:0f:bc:04:ce:f9:65:1e:a6:8a:e4:54:d2:32:fd:
                    dc:12:fd:1a:b4:f7:a1:b7:08:3a:d0:11:d0:a8:54:
                    dd:8b:7b:3f:23:7f:b5:b6:86:a7:7b:e1:d1:af:f3:
                    09:32:9b:25:dd:83:88:3e:ad:6a:0a:16:72:82:2d:
                    ac:b1:d1:52:b7:f3:23:ac:0e:de:d4:dd:d4:39:13:
                    a0:7c:81:06:f8:93:24:02:56:dc:55:02:2f:2d:fe:
                    f6:5f:a4:a3:7c:fd:c0:ec:00:d7:aa:6b:b9:27:10:
                    ac:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:01:68:45:76:51:80:E2:C3:79:ED:93:9B:A7:B4:B0:02:36:DE:55
            X509v3 Authority Key Identifier:
                keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:ac:d8:cd:91:06:2b:a3:55:c2:88:5d:17:23:60:b3:84:5a:
         a0:c8:55:42:42:b2:e4:0d:60:fb:0e:ba:fa:d9:0c:6c:48:fa:
         c9:72:55:09:8e:0d:51:8a:09:61:c7:e7:bd:35:2d:1f:a4:a4:
         de:82:42:6a:7b:17:43:17:92:e0:b6:10:b8:97:27:d5:1c:f5:
         bc:10:4a:c5:f5:e1:dd:21:d2:43:de:3c:bb:56:fb:aa:e0:7b:
         a4:03:c2:cb:e6:06:34:fd:0f:c4:e2:f4:78:b5:20:14:bd:9f:
         e2:7a:cf:28:c9:f8:bb:cf:d4:37:8c:49:37:de:2d:44:f7:d4:
         f5:0f:2b:03:ec:62:c4:87:2a:85:ea:a0:4d:2d:d9:61:1b:49:
         ff:45:0e:18:a3:03:f5:72:25:39:56:65:76:43:28:8f:e4:1a:
         a8:9c:c2:96:cc:c2:93:7d:5d:2c:d7:a2:eb:34:b7:de:4b:a7:
         7b:e2:b0:f3:8b:41:ee:c4:f2:37:ae:e8:ad:f7:a0:f3:10:ca:
         63:3d:70:8f:ca:9f:3d:5c:42:7a:80:ed:09:5b:13:6b:8c:72:
         a7:0d:d2:a1:22:d9:b9:5d:ac:4d:81:c7:11:3d:7d:6b:24:ce:
         25:f2:97:b7:2d:85:a2:86:4c:37:c4:e4:f3:40:e1:06:93:db:
         e5:4d:13:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:37:28 2026 by rpki-client