Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft
File:                     B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft (raw, json)
Hash identifier:          9RiawcbVbvk3Lq0EJN8UK9ueA7cW8S5/FjmuKkJeX40=
Subject key identifier:   DC:F0:08:62:0B:99:7B:A3:DA:BD:EB:00:4F:55:AD:1B:80:9C:65:29
Authority key identifier: 07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F
Certificate issuer:       /CN=079d9053717a16a76c10ae838f5625055be0481f
Certificate serial:       019D26CD9EDBABC62A623A071BFEF1E4400A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft
Manifest number:          14F6
Signing time:             Wed 25 Mar 2026 21:01:42 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:42 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:42 +0000
Files and hashes:         1: B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl (hash: 0i0hYk2IKdQ6OCBgnB8NoRd99aElFZL2FCRFXYXCXvg=)
                          2: UCT9k6BaPPeSMXxJ43Eo6nZzYW0.roa (hash: H/J8BuCj54OjW0xk7YjG+ivFyPL962N+uW8FPOndTZI=)
                          3: ryiFWbpMuqXbHhTaiUR9Bmksn3I.roa (hash: 4enRDEIE99ZnVUOrH1uVQZLMyVdi+VhTW5RGUgkPXEs=)
                          4: szJDTDjk11lPCTowxUuTkr1LOjA.roa (hash: tZ3E5yp9ifwL77hdiUkOobqFo6CYXkARUapRpbadEZc=)
                          5: tVIvfnxeNd5Q4fCCoef2VPaercM.roa (hash: UsZ5qTmb76xuEbD3sjS7Uzqq6fgKmtSM905Jk8/9DNA=)
                          6: wRtbNPKwzn29lLHL-XgfTc7v1-E.roa (hash: HKr7T3FnocuYvThL/hQV2CDARcO253MaFTxSFktB4b8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cd:9e:db:ab:c6:2a:62:3a:07:1b:fe:f1:e4:40:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=079d9053717a16a76c10ae838f5625055be0481f
        Validity
            Not Before: Mar 25 21:01:42 2026 GMT
            Not After : Mar 26 21:01:42 2026 GMT
        Subject: CN=dcf008620b997ba3dabdeb004f55ad1b809c6529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a1:9b:44:4e:a3:6a:4e:ac:d0:1f:7b:db:ba:
                    7b:ec:d9:c8:16:33:e1:95:cd:69:a7:19:2d:cc:ca:
                    0b:15:95:03:62:bc:76:f4:82:77:06:18:a7:08:e9:
                    df:d0:91:82:8d:79:ec:c1:ba:b5:0f:ba:97:8f:5d:
                    8b:48:40:1c:b8:15:d4:00:42:ac:fb:1b:29:70:e1:
                    d8:bb:a2:bf:8f:e9:6f:03:96:1e:a8:15:15:da:b4:
                    84:68:ac:ce:a2:20:18:06:cd:d5:d3:36:77:bb:8c:
                    dd:b4:b2:ec:6f:74:a6:48:e2:32:9d:26:3c:b8:cb:
                    b4:4e:ca:41:ff:74:25:a9:d2:f0:ac:b2:4d:cc:e7:
                    cb:cc:cf:08:7b:87:7a:9e:76:20:47:04:6e:3b:41:
                    98:13:67:64:68:b8:37:7b:cc:63:65:9c:dd:17:40:
                    55:f3:18:cb:de:08:25:d5:c4:f4:d3:ce:a0:e1:0e:
                    d0:e2:4b:cc:14:28:ef:af:dc:88:32:77:7e:88:d4:
                    69:62:37:be:ad:48:5f:5e:03:a4:d6:d0:8d:2c:a0:
                    40:c9:2f:06:2f:50:24:c1:9e:d4:f1:7b:ce:3c:a5:
                    9a:68:70:35:45:2d:19:de:76:ac:b7:ba:3f:ac:00:
                    df:58:13:ce:04:00:69:25:6e:76:ca:4c:8b:cb:44:
                    f9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F0:08:62:0B:99:7B:A3:DA:BD:EB:00:4F:55:AD:1B:80:9C:65:29
            X509v3 Authority Key Identifier:
                keyid:07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:05:e7:30:01:45:a9:49:13:f7:c2:c4:11:66:26:5b:c4:94:
         17:79:ac:e4:f2:a4:5b:45:74:9c:44:a3:91:18:37:f0:25:d3:
         b1:58:2f:57:ff:a6:ec:2d:2a:1b:9c:6f:d7:ca:9f:37:e9:dc:
         e0:73:06:20:f1:4d:dc:2f:1e:e8:cd:02:0c:8d:40:e5:f8:d2:
         eb:8d:3e:15:a7:2d:4a:4b:25:a9:cc:51:72:0a:b0:a8:e5:86:
         ca:5c:4a:da:94:cd:28:2b:e2:69:61:88:6f:ea:57:86:5c:0f:
         18:14:f7:ce:30:de:95:e4:fc:08:77:f5:f2:fe:64:b5:ae:7b:
         2e:eb:50:4f:76:3a:47:7e:c1:f4:b8:a3:ca:85:31:98:88:20:
         7f:a6:f5:02:c2:07:3d:38:14:49:d4:20:23:f4:bd:df:05:3d:
         16:01:21:85:7d:71:fb:dd:37:46:d7:af:62:12:db:b6:95:df:
         73:ef:a3:10:6d:27:0e:61:c1:6b:5d:14:7e:9f:05:77:36:b2:
         41:82:ff:f3:30:af:87:fa:df:c7:bc:00:c1:9d:35:76:7f:41:
         23:13:2b:a1:33:cc:e4:4a:d3:74:75:3e:3c:ab:9b:6a:ba:1a:
         8e:4e:0d:21:2c:df:a6:00:a3:82:bc:f7:0d:fc:cf:91:08:3b:
         7b:7d:38:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzZ7bq8YqYjoHG/7x5EAKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3OWQ5MDUzNzE3YTE2YTc2YzEwYWU4MzhmNTYyNTA1NWJl
MDQ4MWYwHhcNMjYwMzI1MjEwMTQyWhcNMjYwMzI2MjEwMTQyWjAzMTEwLwYDVQQD
EyhkY2YwMDg2MjBiOTk3YmEzZGFiZGViMDA0ZjU1YWQxYjgwOWM2NTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaGbRE6jak6s0B9727p77NnIFjPh
lc1ppxktzMoLFZUDYrx29IJ3BhinCOnf0JGCjXnswbq1D7qXj12LSEAcuBXUAEKs
+xspcOHYu6K/j+lvA5YeqBUV2rSEaKzOoiAYBs3V0zZ3u4zdtLLsb3SmSOIynSY8
uMu0TspB/3QlqdLwrLJNzOfLzM8Ie4d6nnYgRwRuO0GYE2dkaLg3e8xjZZzdF0BV
8xjL3ggl1cT0086g4Q7Q4kvMFCjvr9yIMnd+iNRpYje+rUhfXgOk1tCNLKBAyS8G
L1AkwZ7U8XvOPKWaaHA1RS0Z3nast7o/rADfWBPOBABpJW52ykyLy0T5zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNzwCGILmXuj2r3rAE9VrRuAnGUpMB8GA1UdIwQY
MBaAFAedkFNxehanbBCug49WJQVb4EgfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjUyUVUzRjZGcWRzRUs2RGoxWWxCVnZnU0I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OGQxNmEtODJlNS00ZjRhLTg3MzAt
MjdkMDNlMzkzZmI3LzEvQjUyUVUzRjZGcWRzRUs2RGoxWWxCVnZnU0I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS82OGQxNmEtODJlNS00ZjRhLTg3MzAtMjdkMDNlMzkzZmI3
LzEvQjUyUVUzRjZGcWRzRUs2RGoxWWxCVnZnU0I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKgXnMAFF
qUkT98LEEWYmW8SUF3ms5PKkW0V0nESjkRg38CXTsVgvV/+m7C0qG5xv18qfN+nc
4HMGIPFN3C8e6M0CDI1A5fjS640+FactSkslqcxRcgqwqOWGylxK2pTNKCviaWGI
b+pXhlwPGBT3zjDeleT8CHf18v5kta57LutQT3Y6R37B9LijyoUxmIggf6b1AsIH
PTgUSdQgI/S93wU9FgEhhX1x+903RtevYhLbtpXfc++jEG0nDmHBa10Ufp8Fdzay
QYL/8zCvh/rfx7wAwZ01dn9BIxMroTPM5ErTdHU+PKubaroajk4NISzfpgCjgrz3
DfzPkQg7e3049w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:50 2026 by rpki-client