Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft
File:                     9QVXghWs7nPBf6MNApXg2N176J0.mft (raw, json)
Hash identifier:          dc62tGL8ilkt6/s8bi5yqiRAhgmg5QXNOfDBWtV5vyw=
Subject key identifier:   06:BF:70:F3:90:B1:52:0B:06:EA:F8:67:86:80:EA:62:19:A5:7B:E4
Authority key identifier: F5:05:57:82:15:AC:EE:73:C1:7F:A3:0D:02:95:E0:D8:DD:7B:E8:9D
Certificate issuer:       /CN=f505578215acee73c17fa30d0295e0d8dd7be89d
Certificate serial:       019CE2FE3A5A1CC61FC95BA8889DEE62D454
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft
Manifest number:          07EC
Signing time:             Thu 12 Mar 2026 17:00:37 +0000
Manifest this update:     Thu 12 Mar 2026 17:00:37 +0000
Manifest next update:     Fri 13 Mar 2026 17:00:37 +0000
Files and hashes:         1: 9QVXghWs7nPBf6MNApXg2N176J0.crl (hash: DF6WszIN4HFBEWPN9Igrz6zEPV/tx17+UDjOkXzxmGo=)
                          2: DTajfEiYAfwU9wznkihFnvtM700.roa (hash: 0NM6zYcwmQ05W0Dcf5q5e1n9JwwtYJ2TI/Zem3bjahI=)
                          3: ESaYN8IqGDPN28dWQyFPMlI5Fk8.roa (hash: 5I9TJRb3cc5VhsKq+pB92ABihn+aPu3v2b27S765Sxc=)
                          4: YHFA4JQJT_w-qOyv1tdQo99hP7U.roa (hash: bzABHukn/tUJxV914JpkLB2MX+U4A40WKsjCRa7w6mI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 15:04:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e2:fe:3a:5a:1c:c6:1f:c9:5b:a8:88:9d:ee:62:d4:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f505578215acee73c17fa30d0295e0d8dd7be89d
        Validity
            Not Before: Mar 12 17:00:37 2026 GMT
            Not After : Mar 13 17:00:37 2026 GMT
        Subject: CN=06bf70f390b1520b06eaf8678680ea6219a57be4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:60:d5:9c:ab:a0:34:f3:ae:19:de:6d:c0:c9:
                    6e:12:14:0b:c7:3b:54:c2:c7:f9:5d:16:85:e7:bd:
                    6e:30:66:1e:bc:b6:31:8c:00:bf:96:5c:72:29:f5:
                    f2:36:ca:bc:6e:c4:71:9b:84:2b:21:bc:76:d3:2c:
                    8a:83:29:3f:a4:62:f1:36:2f:c0:0e:e0:2a:b9:2d:
                    df:77:59:79:1f:92:d6:92:b9:de:9b:25:35:94:08:
                    78:a3:c2:5f:d2:e7:a0:02:a5:64:ef:91:f0:3c:2c:
                    0b:18:7d:c9:5f:61:4c:65:5b:33:9b:82:71:6a:37:
                    f7:9b:6c:a9:2c:52:44:15:af:19:fa:08:09:e4:7d:
                    7b:0d:cf:d4:96:7e:4e:b7:37:0d:b8:2e:79:e7:7c:
                    55:17:2b:02:88:7e:73:0c:02:6b:30:40:d7:cf:d4:
                    e5:2f:8f:2d:39:65:6e:78:1f:0a:18:1c:91:93:15:
                    d2:85:4d:25:2d:8f:a1:0e:99:32:81:c5:57:6a:ec:
                    66:db:57:9f:ce:ba:8c:a4:64:27:b8:43:94:f7:a7:
                    eb:d7:21:c3:54:95:b3:69:8b:73:09:6d:0e:bd:e8:
                    b0:aa:5f:31:fa:71:12:90:5b:bb:08:f4:f6:21:96:
                    30:cc:f4:fb:dc:d6:99:60:d1:84:7b:56:08:1d:5f:
                    f2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:BF:70:F3:90:B1:52:0B:06:EA:F8:67:86:80:EA:62:19:A5:7B:E4
            X509v3 Authority Key Identifier:
                keyid:F5:05:57:82:15:AC:EE:73:C1:7F:A3:0D:02:95:E0:D8:DD:7B:E8:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:56:6a:6d:a5:9e:cc:27:85:1a:f0:f4:47:be:b8:7e:87:cb:
         ad:36:0d:68:ca:be:c7:39:64:4e:d1:7c:74:87:40:ef:27:53:
         fa:5f:de:cf:5d:d0:5f:e6:78:74:13:84:72:d7:42:0c:8c:90:
         b0:3c:fb:78:dd:a3:6c:0f:bb:04:c8:48:3d:06:c9:91:9d:b6:
         5c:2c:54:83:32:f2:94:54:e7:40:13:37:61:ef:29:50:61:9a:
         51:80:28:47:2d:81:0b:7a:2f:d4:05:db:99:43:7f:c7:0d:79:
         73:d8:ca:09:95:bd:23:91:bb:99:7e:17:e9:39:40:b0:8f:83:
         f4:b8:3a:94:96:19:2b:16:4a:3a:18:fb:2c:95:08:ff:92:3f:
         45:95:06:69:cf:50:40:76:f9:0d:78:88:57:a7:80:a2:b5:a9:
         04:01:f0:70:4e:e0:9e:6b:08:c8:1e:7a:13:35:58:a1:bb:da:
         0e:7b:79:e6:d5:5b:72:7f:e8:8c:c9:ad:00:e0:17:4e:81:0c:
         85:9e:f6:3e:bf:da:b7:70:38:5a:bf:e6:22:f3:62:3f:ad:1c:
         36:7f:18:ec:bd:81:91:aa:96:4f:1b:4a:74:1e:c5:0d:e1:39:
         96:83:22:49:24:f1:a3:9c:53:8c:32:96:b4:66:09:1d:fd:17:
         23:ed:38:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzi/jpaHMYfyVuoiJ3uYtRUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MDU1NzgyMTVhY2VlNzNjMTdmYTMwZDAyOTVlMGQ4ZGQ3
YmU4OWQwHhcNMjYwMzEyMTcwMDM3WhcNMjYwMzEzMTcwMDM3WjAzMTEwLwYDVQQD
EygwNmJmNzBmMzkwYjE1MjBiMDZlYWY4Njc4NjgwZWE2MjE5YTU3YmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmDVnKugNPOuGd5twMluEhQLxztU
wsf5XRaF571uMGYevLYxjAC/llxyKfXyNsq8bsRxm4QrIbx20yyKgyk/pGLxNi/A
DuAquS3fd1l5H5LWkrnemyU1lAh4o8Jf0uegAqVk75HwPCwLGH3JX2FMZVszm4Jx
ajf3m2ypLFJEFa8Z+ggJ5H17Dc/Uln5OtzcNuC5553xVFysCiH5zDAJrMEDXz9Tl
L48tOWVueB8KGByRkxXShU0lLY+hDpkygcVXauxm21efzrqMpGQnuEOU96fr1yHD
VJWzaYtzCW0Oveiwql8x+nESkFu7CPT2IZYwzPT73NaZYNGEe1YIHV/yvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAa/cPOQsVILBur4Z4aA6mIZpXvkMB8GA1UdIwQY
MBaAFPUFV4IVrO5zwX+jDQKV4Njde+idMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVFWWGdoV3M3blBCZjZNTkFwWGcyTjE3NkowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy80OWU5NzQtZDcyNC00Y2FmLTlhMDQt
ZjBjOWQ2NDE3ZWU3LzEvOVFWWGdoV3M3blBCZjZNTkFwWGcyTjE3NkowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy80OWU5NzQtZDcyNC00Y2FmLTlhMDQtZjBjOWQ2NDE3ZWU3
LzEvOVFWWGdoV3M3blBCZjZNTkFwWGcyTjE3NkowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE1ZqbaWe
zCeFGvD0R764fofLrTYNaMq+xzlkTtF8dIdA7ydT+l/ez13QX+Z4dBOEctdCDIyQ
sDz7eN2jbA+7BMhIPQbJkZ22XCxUgzLylFTnQBM3Ye8pUGGaUYAoRy2BC3ov1AXb
mUN/xw15c9jKCZW9I5G7mX4X6TlAsI+D9Lg6lJYZKxZKOhj7LJUI/5I/RZUGac9Q
QHb5DXiIV6eAorWpBAHwcE7gnmsIyB56EzVYobvaDnt55tVbcn/ojMmtAOAXToEM
hZ72Pr/at3A4Wr/mIvNiP60cNn8Y7L2BkaqWTxtKdB7FDeE5loMiSSTxo5xTjDKW
tGYJHf0XI+04UQ==
-----END CERTIFICATE-----
Generated at Thu Mar 12 22:56:26 2026 by rpki-client