Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
File:                     22QfyQPVtMyXFkkySks05PgkIsU.mft (raw, json)
Hash identifier:          RHtU0tj6lkkmAsuMYdBP40/I8QgQGvmQvU9tVjtXkN4=
Subject key identifier:   6C:AC:62:4E:64:D6:47:4F:0C:20:F3:F4:7D:AE:A5:CB:70:CD:82:8D
Authority key identifier: DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
Certificate issuer:       /CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Certificate serial:       019D2695FA6712FBB474F0E961ACDA1B7385
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
Manifest number:          1890
Signing time:             Wed 25 Mar 2026 20:00:56 +0000
Manifest this update:     Wed 25 Mar 2026 20:00:56 +0000
Manifest next update:     Thu 26 Mar 2026 20:00:56 +0000
Files and hashes:         1: 22QfyQPVtMyXFkkySks05PgkIsU.crl (hash: i8Q1lmJuw8r/Sq5epTuX8QWhaTdrWSiO/cbnOotgXtI=)
                          2: DGuA7DOyGXAn98oCAGhbl48323g.roa (hash: KaiwSlSCPAgF52IKRYkPf8oMfbhIntogM/QW0s5kztk=)
                          3: cNdUG1i54zJ-DiyzAbYp5hI1_Yw.roa (hash: Zs9p0r7/OlghiUl1YzqqCjoM6IGWezmYkoL5qYs5XiU=)
                          4: fmcwhaidzArdA6kvh0y-Aej9y88.roa (hash: bKNi3L38o7bRnB56dZw/HCV46FJZnj7F35iWZ5QhbjY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:95:fa:67:12:fb:b4:74:f0:e9:61:ac:da:1b:73:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db641fc903d5b4cc971649324a4b34e4f82422c5
        Validity
            Not Before: Mar 25 20:00:56 2026 GMT
            Not After : Mar 26 20:00:56 2026 GMT
        Subject: CN=6cac624e64d6474f0c20f3f47daea5cb70cd828d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e5:81:9d:66:71:e0:de:5a:ca:3b:1f:61:80:
                    28:3d:d2:b5:12:04:e7:c9:f9:23:57:d3:cf:fc:b5:
                    77:a3:6f:fc:c7:bd:56:b7:6b:49:77:11:15:dc:09:
                    ce:12:f2:82:dd:22:f8:0f:a2:47:1f:fe:dc:0a:f5:
                    d8:9b:56:c0:4b:02:6e:d5:7c:a7:4b:26:7b:1c:cc:
                    c0:08:7c:da:76:d2:51:48:d0:3a:84:ae:f3:e3:77:
                    7b:11:db:d2:d5:00:86:fa:68:67:0d:3f:fe:7c:55:
                    ba:34:ed:a4:9f:e1:c3:36:05:bc:c6:6c:1b:bf:44:
                    80:d6:ba:14:05:4b:54:1f:97:9a:ab:c1:ed:4b:1c:
                    b6:19:d2:3f:e7:e1:80:36:28:d2:c3:e9:7b:bc:09:
                    2d:8f:10:6f:0e:d4:9c:b3:96:e1:07:bf:79:69:0a:
                    dc:44:02:e0:e7:ec:67:5e:ec:71:2f:f5:9a:3d:98:
                    be:d1:18:58:27:d7:52:1e:84:a9:8d:33:44:b2:ea:
                    be:d2:2f:f7:d9:5e:12:31:c5:10:f7:ff:9a:6a:8b:
                    5b:f0:4a:87:5b:a8:51:85:c1:a8:5b:3f:b0:45:c0:
                    49:e3:4d:be:f9:8b:1b:05:a1:0e:69:1d:30:6f:f5:
                    c5:f7:36:aa:fc:80:fe:8f:a7:01:bf:66:ba:3b:d7:
                    7c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:AC:62:4E:64:D6:47:4F:0C:20:F3:F4:7D:AE:A5:CB:70:CD:82:8D
            X509v3 Authority Key Identifier:
                keyid:DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:44:6f:f5:af:e8:89:0c:8c:09:09:17:b1:66:02:a6:8e:2e:
         c2:67:f0:8a:a8:e1:83:dd:ad:4d:b7:66:21:11:c6:79:d6:05:
         b8:24:13:f8:a7:6e:d2:10:69:b1:85:13:11:8a:c6:28:26:50:
         b0:53:8b:41:b6:ae:a6:4d:26:6b:29:77:6f:48:6e:8b:ab:f5:
         ec:dc:df:b2:57:cb:14:9b:f8:c8:7b:08:dd:3a:b9:7a:a5:b9:
         97:7c:0b:a5:9d:16:b4:fc:38:47:42:99:77:ab:2e:d7:39:1e:
         81:af:f9:4a:cd:a4:ee:6d:08:71:11:14:3c:45:93:25:bc:d5:
         c3:69:32:b5:87:d1:b8:07:e7:e9:b4:84:65:28:60:67:e4:70:
         28:e6:f5:1f:3f:f9:1e:b5:10:be:cb:14:d3:18:48:94:73:44:
         68:e0:ba:40:a6:96:37:e9:7d:d7:6d:5c:eb:c4:e2:16:8b:6f:
         fb:af:74:b8:c0:b5:11:9c:1f:29:df:44:69:8c:0f:ae:09:2f:
         8e:32:01:8f:b3:6f:b7:06:fd:4c:59:07:44:11:2d:c7:69:83:
         3c:07:dc:95:de:fb:30:d4:43:66:fe:3e:a2:03:3f:9d:24:27:
         e8:5d:d2:fb:1d:6d:84:71:e7:4c:4f:51:57:e2:59:5c:97:f1:
         3a:7d:93:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlfpnEvu0dPDpYazaG3OFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiNjQxZmM5MDNkNWI0Y2M5NzE2NDkzMjRhNGIzNGU0Zjgy
NDIyYzUwHhcNMjYwMzI1MjAwMDU2WhcNMjYwMzI2MjAwMDU2WjAzMTEwLwYDVQQD
Eyg2Y2FjNjI0ZTY0ZDY0NzRmMGMyMGYzZjQ3ZGFlYTVjYjcwY2Q4MjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveWBnWZx4N5ayjsfYYAoPdK1EgTn
yfkjV9PP/LV3o2/8x71Wt2tJdxEV3AnOEvKC3SL4D6JHH/7cCvXYm1bASwJu1Xyn
SyZ7HMzACHzadtJRSNA6hK7z43d7EdvS1QCG+mhnDT/+fFW6NO2kn+HDNgW8xmwb
v0SA1roUBUtUH5eaq8HtSxy2GdI/5+GANijSw+l7vAktjxBvDtScs5bhB795aQrc
RALg5+xnXuxxL/WaPZi+0RhYJ9dSHoSpjTNEsuq+0i/32V4SMcUQ9/+aaotb8EqH
W6hRhcGoWz+wRcBJ402++YsbBaEOaR0wb/XF9zaq/ID+j6cBv2a6O9d8jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGysYk5k1kdPDCDz9H2upctwzYKNMB8GA1UdIwQY
MBaAFNtkH8kD1bTMlxZJMkpLNOT4JCLFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjJRZnlRUFZ0TXlYRmtreVNrczA1UGdrSXNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8xMDA5NWYtZmQzNS00YTA2LThmMzkt
N2ZlZTU5MWEyMDljLzEvMjJRZnlRUFZ0TXlYRmtreVNrczA1UGdrSXNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8xMDA5NWYtZmQzNS00YTA2LThmMzktN2ZlZTU5MWEyMDlj
LzEvMjJRZnlRUFZ0TXlYRmtreVNrczA1UGdrSXNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnkRv9a/o
iQyMCQkXsWYCpo4uwmfwiqjhg92tTbdmIRHGedYFuCQT+Kdu0hBpsYUTEYrGKCZQ
sFOLQbaupk0mayl3b0hui6v17NzfslfLFJv4yHsI3Tq5eqW5l3wLpZ0WtPw4R0KZ
d6su1zkega/5Ss2k7m0IcREUPEWTJbzVw2kytYfRuAfn6bSEZShgZ+RwKOb1Hz/5
HrUQvssU0xhIlHNEaOC6QKaWN+l9121c68TiFotv+690uMC1EZwfKd9EaYwPrgkv
jjIBj7Nvtwb9TFkHRBEtx2mDPAfcld77MNRDZv4+ogM/nSQn6F3S+x1thHHnTE9R
V+JZXJfxOn2T7A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:46:15 2026 by rpki-client