Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft
File:                     C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft (raw, json)
Hash identifier:          1z+Bdrcto3P7foii/rJGjvyYwqemsqhVJmJQrl7vvTE=
Subject key identifier:   44:80:6F:50:D9:14:97:7B:7D:66:DB:B9:4F:82:10:18:03:C4:91:BA
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Certificate issuer:       /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial:       019CE25A018E84A3B9275BA7ED5D98107816
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft
Manifest number:          1512
Signing time:             Thu 12 Mar 2026 14:01:15 +0000
Manifest this update:     Thu 12 Mar 2026 14:01:15 +0000
Manifest next update:     Fri 13 Mar 2026 14:01:15 +0000
Files and hashes:         1: 1M_KfK7WN2a9S2sM4HPxRdgNk3Q.roa (hash: FXLWu7cTao5t5N2dNabz3TuA4IoXpfS81L/ChF9Q08w=)
                          2: 3v4aI3hIcklmgeZ_UAwLSRXNdMQ.roa (hash: IpPkFkZsNYzLAK3kRG6z1JeeccdjVJAcpoXlT9FO7rs=)
                          3: 6hfKommEGXOxbZsoMmyZp1Jipf0.roa (hash: PBG49W+jrBQkGXpn4QJjssvWvrDP7tqPFzk/gI0/fXg=)
                          4: 6iU5q2O8knwO6rsCxrpEDYfQfwc.roa (hash: wn70AHhkmwh/HEbVbZLkEYQ5m0ssl6kZ6p4p/pcbYdw=)
                          5: 9ClNIRUhBNtx6NUYh8zm6GwII1c.roa (hash: vGZ8wnFhqRVJP+elmOStrLyKU7bRjBC5vLXKAyxYAyo=)
                          6: C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl (hash: tiQS7VN020nsdpp8LsmCabZxNo8lzHfNx0uwET3QVwI=)
                          7: CwEJEkChVeT5ByriMeWvHMii5Kc.roa (hash: +buHsgpQk2jvmt0OGhHOlWMDX6OUOHB42I6FSxQelZE=)
                          8: DLvFNukbRAhZM4TuFhov4WWOGb0.roa (hash: Sq2gts+S55hxx/TOW9y2dVTRNKFXvpr4cfM5oauwoaM=)
                          9: EU0dIexXpepLqV4coUUAIRVb-H8.roa (hash: Sb2wLX/RqNGdGCSytUaEJdgIu7Q+7vz9Pa8hlXYY0rU=)
                          10: FSSW1ZODYaGOgTHhq7srADJ7wNo.roa (hash: t1sAD3HTmL1FNe10X/d6I8aLemzTkwpNiXZMluJaeak=)
                          11: Fq-R29bbT_OFMbzC4S4L4IdB-is.roa (hash: JzQ34FqB0/yZtRfeREt9DodHo2xR3cGWACcIkZal6yg=)
                          12: LMCAcXdS2XUrnwUK8y3aA_YgYVI.roa (hash: Zx7X9nBZcYpyZkk9a1fb6zgF5sti3hLdBb/GhQbu+WI=)
                          13: POkwjuuBGCe0F21ORjR2-VQPpzM.roa (hash: 2Yn0ZCvtpiHPj7sihF4ez4hggi+qgq8ycEgz8zN0BIM=)
                          14: WVYa2teNXynmvJvnFVohphSasGE.roa (hash: orfB14/U2twh+Xy8e+efxXCsqq9c3OWe/VkDs9EtPWg=)
                          15: ZJn7G6eupzsYI6Qb_3PZRyUP64A.roa (hash: MBZe37MzhPFgcFvelUunWWfavB0OARuzaKp7z8aRi3s=)
                          16: Zema6N-_yb1spowlt5JHLTMroU4.roa (hash: qF9Cqwb/phFXGyfXmecnj5M4wNF9UM4/U7GSyXzWvos=)
                          17: ala-3w7jXBx1Y6f2e_qq-HBChTo.roa (hash: JIf9VJc6GvAkZ5p/ya8p2yQh9PHmYhCztgviL6iUJrc=)
                          18: dSEucPba5jbG_hBap1JYIaV4Psk.roa (hash: RBIyIZiDbpY1D9V0ivY3QmCifvd4xUi/eYRwLwz+HUI=)
                          19: djDUS_Dp1clYmZIjyKII50PHWfk.roa (hash: vJJCn0Gst4uVO2l5ZPOKkOm7N8sHDzQxxWFRYaz0dr8=)
                          20: eE8w7Gi2e_s5rLXawSVZCcaRlvk.roa (hash: g0rKhAIGDEgpNj647haSdnpBK13OSalrt6qPIIz9V48=)
                          21: hBwQvgPhGJzR_22ttNwtHhdx7UE.roa (hash: BA8aCpTJ5opcE6AfKmkjJWSoOHA/DSBCKSoiBPNDf6k=)
                          22: jp70RKj-l4e-FsAEnfnaN0KnsKo.roa (hash: Wc9n68tUKd4lrFnJAtiaeP7RW1dgjzh0zCTtcCNTJto=)
                          23: oBQjnG6Zj6o_8VxMtUsGatV5hV4.roa (hash: 7dA7xujM9AdU+gFa8obBWyqzT2p9RQ/v2ZO8GDKs3tU=)
                          24: wfQmPdI-vmy_WQj32p1pdNv8LjM.roa (hash: Wlbgs7E1UKGfQEo0Wy61nxhp0A6dAzQWLbqDaTK1Nbc=)
                          25: wqMSf4TrRzX1v1lLyVp0rCqMWLY.roa (hash: 1E+Xv8wtnswf3OgqernoluNz5hyvaYNmHhkW4xlZGIc=)
                          26: z0A9SiYDfgi894bbsnwqjIIKm_E.roa (hash: 0kWVTAgMN8/IObLAgrvtPloL9CuNOeQsdQJfTEF/3/U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 14:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e2:5a:01:8e:84:a3:b9:27:5b:a7:ed:5d:98:10:78:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
        Validity
            Not Before: Mar 12 14:01:15 2026 GMT
            Not After : Mar 13 14:01:15 2026 GMT
        Subject: CN=44806f50d914977b7d66dbb94f82101803c491ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d3:c4:67:b0:e5:69:0a:a1:5f:8c:49:f3:13:
                    4f:7a:f8:27:31:e4:92:c6:f9:3a:59:aa:25:6e:29:
                    07:5d:f2:1a:59:f4:ef:3f:2a:10:6e:5c:7f:c0:66:
                    6e:31:10:65:ce:8b:ac:d2:c8:ba:82:5b:7b:50:56:
                    ad:52:0f:27:28:97:30:b2:e5:c3:ba:90:32:7e:c8:
                    1a:6e:75:b3:89:33:59:35:fb:42:59:d1:d5:12:4e:
                    e4:37:0c:d6:c1:63:3f:fa:e3:50:77:37:cc:db:d0:
                    f6:8b:a6:eb:42:97:63:d6:05:01:08:d4:ab:ee:4c:
                    cb:08:c3:1a:4e:c6:5d:35:0e:7f:64:a0:46:66:95:
                    5c:91:ef:c0:ca:93:2c:32:6c:2c:15:5a:ff:ac:56:
                    32:39:ed:4c:f1:70:05:26:83:d0:43:17:fb:67:46:
                    fa:fb:db:99:aa:b1:a8:a9:39:49:19:5d:81:c8:2c:
                    94:cc:9c:1c:b4:2b:70:a8:9a:80:e3:aa:67:bd:57:
                    3a:bf:3b:ac:f3:ff:2b:4d:b4:fd:f6:e1:f0:5a:18:
                    4a:ab:b9:f5:98:4a:3a:8d:8e:fe:49:ae:3a:37:7e:
                    c2:4d:c8:10:95:77:9e:d8:41:21:8b:3d:70:6c:70:
                    d3:87:bf:56:58:0b:10:41:e7:b9:f1:54:1e:70:92:
                    78:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:80:6F:50:D9:14:97:7B:7D:66:DB:B9:4F:82:10:18:03:C4:91:BA
            X509v3 Authority Key Identifier:
                keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:db:07:ed:62:a2:6b:ea:a8:85:d9:52:2f:30:a2:5e:d1:7f:
         2a:84:d3:9d:50:04:ed:25:d3:8e:5b:a1:6e:2d:9b:f6:1f:ea:
         97:8d:85:32:65:b3:30:a1:6c:96:6c:45:ab:fe:7a:5b:a4:60:
         65:0a:02:9a:0c:5a:4e:44:69:92:b8:d5:6d:68:77:d0:85:6d:
         84:1b:f3:ee:32:c6:8e:7f:b8:fb:ad:96:82:6b:f0:93:ec:ad:
         c8:39:10:0d:7d:9a:2e:2b:75:62:b3:a3:93:b6:bf:26:8f:c6:
         b7:5c:91:62:ab:63:93:d4:b5:db:17:7b:89:b1:d3:88:5e:f5:
         62:e5:b2:f6:4e:b8:ca:98:39:34:73:2c:50:5c:14:64:d8:2b:
         46:91:28:54:28:c4:6c:91:b2:37:1d:3d:72:c9:04:81:61:df:
         49:e1:86:13:78:7a:99:b2:f8:dc:a0:87:dc:2b:5a:50:56:37:
         86:e7:f7:47:af:64:b7:e8:e2:db:e2:9d:28:97:17:e1:ef:09:
         fe:cf:9b:86:db:ef:e2:a1:4f:9e:44:04:89:d8:00:43:81:5c:
         f5:e3:1d:f2:d0:69:17:00:9e:88:6d:fd:7a:b8:e8:b4:67:5c:
         39:9b:c7:52:6e:c7:bf:2a:5f:40:94:8f:e5:23:94:66:78:a4:
         5e:f8:e7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 16:52:12 2026 by rpki-client