Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
File:                     blQs7eU6DFcUWmr_L1gZbwLUoS4.mft (raw, json)
Hash identifier:          jjpJrZCH+gzJyhrK7siXZ7gakyssPSrruy6qybEmIp4=
Subject key identifier:   EE:04:08:3D:C4:83:A4:E2:73:0B:EA:27:CC:E0:AC:29:49:46:60:E0
Authority key identifier: 6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E
Certificate issuer:       /CN=6e542cede53a0c57145a6aff2f58196f02d4a12e
Certificate serial:       019D299758B47EE3FA563B5E49EA5DF81E2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
Manifest number:          1867
Signing time:             Thu 26 Mar 2026 10:01:17 +0000
Manifest this update:     Thu 26 Mar 2026 10:01:17 +0000
Manifest next update:     Fri 27 Mar 2026 10:01:17 +0000
Files and hashes:         1: b9UaPnV67jOsAzGdtv8uKu-bNPQ.roa (hash: ahTYgT5//xP68fFq93yMhJHhiYRSn6qSgnwTPWrcJ2A=)
                          2: blQs7eU6DFcUWmr_L1gZbwLUoS4.crl (hash: Sa5f1YX8neW3oL1iDFkd9u27P3O3uX0aNN/g7eRs5a8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:97:58:b4:7e:e3:fa:56:3b:5e:49:ea:5d:f8:1e:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e542cede53a0c57145a6aff2f58196f02d4a12e
        Validity
            Not Before: Mar 26 10:01:17 2026 GMT
            Not After : Mar 27 10:01:17 2026 GMT
        Subject: CN=ee04083dc483a4e2730bea27cce0ac29494660e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c3:50:a8:61:45:57:36:f1:a6:21:e9:28:ad:
                    cc:31:4d:8a:b1:4a:e9:e5:a4:fc:1b:19:cb:68:1b:
                    f4:b5:2c:fc:c1:9b:2d:c9:91:6e:b9:de:4b:76:bd:
                    1b:59:44:f4:8a:da:be:4d:8f:39:9b:4d:b3:bb:00:
                    8f:64:aa:7b:48:ad:2f:51:63:a8:ba:34:bd:21:a0:
                    be:4b:41:fa:8b:e2:70:d0:b1:ec:7a:1c:0d:99:96:
                    d7:e5:87:90:c9:5a:65:2f:87:24:a8:89:b8:3a:47:
                    7c:6c:f3:ff:3a:f8:61:c1:5b:fc:67:ca:c6:a6:57:
                    08:54:a3:b7:34:81:40:7f:c4:65:81:7d:63:46:95:
                    7e:c4:b7:d5:e2:91:2e:3d:a7:50:df:c9:a8:35:a3:
                    dd:4c:21:cc:67:58:44:c0:3d:78:25:01:b1:10:c7:
                    87:3d:46:e4:56:4b:aa:8e:a7:c2:8b:d6:f4:0b:96:
                    aa:af:96:dc:03:a4:e5:a8:2d:ff:a3:bf:09:76:97:
                    a6:87:f9:32:9f:19:3c:ba:94:89:7c:c0:75:3f:96:
                    e7:36:3f:57:1c:f1:95:57:99:7b:a0:ea:25:1e:2d:
                    f8:93:f5:6c:be:2e:f8:70:a1:b9:b4:98:44:6f:67:
                    c4:c3:a2:ba:46:a4:b4:68:e5:e3:4f:ce:36:05:81:
                    8b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:04:08:3D:C4:83:A4:E2:73:0B:EA:27:CC:E0:AC:29:49:46:60:E0
            X509v3 Authority Key Identifier:
                keyid:6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:d0:2e:14:2c:2a:e3:30:f5:57:91:f1:9e:b1:bf:e6:92:89:
         8e:fe:61:2f:15:6e:16:44:18:cc:2b:20:cb:9b:8c:42:40:87:
         0e:68:a3:c2:e5:9f:21:1b:30:70:9f:fb:6b:c0:09:7a:cc:1e:
         e5:f9:57:ae:95:45:06:be:d7:2b:aa:e2:d8:0b:11:3c:f8:25:
         da:0c:85:71:43:c6:24:22:26:d7:f3:be:d4:c2:0c:8a:ba:da:
         94:6b:9c:5a:06:42:97:5c:c1:59:bc:1e:c3:49:fb:dd:b0:13:
         9a:eb:54:31:90:aa:a6:04:3c:93:0d:6e:e5:1f:e2:6c:54:18:
         c2:2e:dc:0a:cf:7c:f9:fc:2c:21:b1:5e:cb:67:6d:79:55:09:
         8c:49:f6:96:19:92:f5:18:ba:f1:2e:ab:a0:3f:af:5b:c0:58:
         ab:40:33:ab:82:97:73:e0:03:3a:b7:30:52:b4:27:17:ed:0a:
         94:49:f7:48:fd:80:dc:d6:9a:f1:8e:41:9d:0e:51:a9:e1:4e:
         a2:ba:74:7a:f1:94:1d:42:ba:19:46:c9:80:0e:79:e6:59:57:
         be:97:b7:ad:b4:c2:59:67:1e:91:84:b9:c5:3c:64:25:be:a1:
         c9:1c:53:0b:da:0b:d8:cf:01:c3:98:ba:73:9e:ec:a6:d6:6d:
         34:ff:75:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pl1i0fuP6VjteSepd+B4qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlNTQyY2VkZTUzYTBjNTcxNDVhNmFmZjJmNTgxOTZmMDJk
NGExMmUwHhcNMjYwMzI2MTAwMTE3WhcNMjYwMzI3MTAwMTE3WjAzMTEwLwYDVQQD
EyhlZTA0MDgzZGM0ODNhNGUyNzMwYmVhMjdjY2UwYWMyOTQ5NDY2MGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosNQqGFFVzbxpiHpKK3MMU2KsUrp
5aT8GxnLaBv0tSz8wZstyZFuud5Ldr0bWUT0itq+TY85m02zuwCPZKp7SK0vUWOo
ujS9IaC+S0H6i+Jw0LHsehwNmZbX5YeQyVplL4ckqIm4Okd8bPP/OvhhwVv8Z8rG
plcIVKO3NIFAf8RlgX1jRpV+xLfV4pEuPadQ38moNaPdTCHMZ1hEwD14JQGxEMeH
PUbkVkuqjqfCi9b0C5aqr5bcA6TlqC3/o78Jdpemh/kynxk8upSJfMB1P5bnNj9X
HPGVV5l7oOolHi34k/Vsvi74cKG5tJhEb2fEw6K6RqS0aOXjT842BYGLTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO4ECD3Eg6TicwvqJ8zgrClJRmDgMB8GA1UdIwQY
MBaAFG5ULO3lOgxXFFpq/y9YGW8C1KEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmxRczdlVTZERmNVV21yX0wxZ1pid0xVb1M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zMjE2OWEtNGE1YS00MTFiLWIwMDYt
MzE4YzcxYjExOWY3LzEvYmxRczdlVTZERmNVV21yX0wxZ1pid0xVb1M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8zMjE2OWEtNGE1YS00MTFiLWIwMDYtMzE4YzcxYjExOWY3
LzEvYmxRczdlVTZERmNVV21yX0wxZ1pid0xVb1M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB9AuFCwq
4zD1V5HxnrG/5pKJjv5hLxVuFkQYzCsgy5uMQkCHDmijwuWfIRswcJ/7a8AJeswe
5flXrpVFBr7XK6ri2AsRPPgl2gyFcUPGJCIm1/O+1MIMirralGucWgZCl1zBWbwe
w0n73bATmutUMZCqpgQ8kw1u5R/ibFQYwi7cCs98+fwsIbFey2dteVUJjEn2lhmS
9Ri68S6roD+vW8BYq0Azq4KXc+ADOrcwUrQnF+0KlEn3SP2A3Naa8Y5BnQ5RqeFO
orp0evGUHUK6GUbJgA555llXvpe3rbTCWWcekYS5xTxkJb6hyRxTC9oL2M8Bw5i6
c57sptZtNP91mg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:59:50 2026 by rpki-client