Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
File:                     7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json)
Hash identifier:          kUqGMDRac+FO6MkZs7PJLY/kgdpyrcpvU+2wLgF4QHM=
Subject key identifier:   34:F5:47:67:F0:24:30:93:DD:BC:02:6D:94:D7:BA:DB:4E:63:DF:73
Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
Certificate issuer:       /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Certificate serial:       019CF0BA35F01257415862F7DEF2AC5636AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
Manifest number:          118C
Signing time:             Sun 15 Mar 2026 09:01:01 +0000
Manifest this update:     Sun 15 Mar 2026 09:01:01 +0000
Manifest next update:     Mon 16 Mar 2026 09:01:01 +0000
Files and hashes:         1: 1-D8OmgY3nKSj2v3MJmWlPYnb9CQ.roa (hash: a385zNiEurpE9zRwf9X4UBpg40A2fY4ohIw0B9nkrro=)
                          2: 1fKDHDyi88uhIrdIl99Ji35F12s.roa (hash: ibeCFUGVM6Hr/NL42yqJmWoFRaGEzYgkrlHOoS3siho=)
                          3: 3t7MGPFMuBSxJLCxDF_3n50KStc.roa (hash: 6GS3fb7DEXDLSqf4y4y0SrlWtV5NF4pu8OcshRbE90U=)
                          4: 4epOeDhcnpBTi2g4YcisvFWMAa4.roa (hash: +2jkFhE3n0xcPuUcbVnaPwBBTRX7qOSg8rWKC4wCay8=)
                          5: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: evarrBRFO/cfeZLsGh9zhDcJjOwKpQrLQvFckrOjAjM=)
                          6: BYsn1N5gP2JO3UfQxO-E-V2e0co.roa (hash: 6igu0zYuxX+N38bsBkkYKxt8Fvp/P+aUhF4rJG443fk=)
                          7: F2c42ybkIwQUeCQqNVp_C3yFlro.roa (hash: KrIMAe6Zw/sJbSu3dokUorq0Itj56++s8jIbDFuR90Q=)
                          8: FHmKT3d93phBQ2sJCe6iypixWE4.roa (hash: gr7Vm5ezbEir/8TLVn3dVqAxR+5C8tMF+REqdfAIUrk=)
                          9: FzQlXJMrueOFWSAR8L8h6Ur-hZc.roa (hash: WfwyKtSywEHryZ+M6HznzFfEjcPQAgXonMv0QamAIn4=)
                          10: LVLHCbJcyDZSnlN60YzfQsK0HpA.roa (hash: vgdjHgNRPC/reweQCNlxL1k3EIbDFAOPreXZsrVrnu4=)
                          11: NSS0gU9xsQcOZEIfKkpLsjZuNB0.roa (hash: VyQiUIVUgwwIcEoE5kv5MX8wQDctr6SkpBRpe02j4L4=)
                          12: PwETNKs37jeOPIwRfzmAVRCx5RA.roa (hash: A7MiRy6tdF3DFHgGL2Bg1zW3IkK52EBZK26ibjcoM5o=)
                          13: S9FfJCycMQRA7bahC5rfE0YQTSg.roa (hash: 8MejBWKBQixvCnUzb1LPtqAMZdROfL9yfHkcMqfZHKY=)
                          14: SEmswT8qRK9Bjzxvl0uw6a5asBk.roa (hash: u11Eo4iK3j8KXMwIQS50D4H8cdM2mGVMvEkf3VKSGko=)
                          15: ZRxBI6--3WcDP6y0WoOf_vAd2NE.roa (hash: tzOhUp8auz5616T4WhpBy1GjZZJ7rOEJ1FCyRQX+r8M=)
                          16: ZweD9hSO-FjSNgRjYiWP5ozqgiM.roa (hash: tLzdWZNv79sT3YaekBIw1EK7WtYQTy+aDzxkObz61k4=)
                          17: fIGWD-4Fshb7d4r83OFbyVwjqBY.roa (hash: Ks+OV7JB0vGipKpWHkMisr6xMryLFUgnnDUUzg6XUBQ=)
                          18: iyx4iGSqz3YL_BqXzYoasBlGIOs.roa (hash: tcdJGjSX6zqPJW45F+GkjDvmD1FBoeYzAmLsGXVBq0c=)
                          19: xX_eayIur3ayUrNMcGn9ChpnHec.roa (hash: U/ut0MWz8oiiYflyyyeRjSx1ThmGKeCsH/L5YDP+UgA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Mar 2026 09:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:f0:ba:35:f0:12:57:41:58:62:f7:de:f2:ac:56:36:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
        Validity
            Not Before: Mar 15 09:01:01 2026 GMT
            Not After : Mar 16 09:01:01 2026 GMT
        Subject: CN=34f54767f0243093ddbc026d94d7badb4e63df73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:64:e0:63:6b:93:89:b9:37:a4:27:9f:f9:d1:
                    55:d0:9e:ff:d7:b2:39:7d:67:c3:56:c3:97:ea:97:
                    b7:4b:50:40:b6:7b:14:79:6b:f3:6c:db:2e:de:d0:
                    5c:9a:d9:8d:58:42:4d:ba:ea:d7:26:5a:fe:20:5e:
                    3c:c3:57:a6:30:dd:bf:cc:bf:86:55:35:23:c5:8b:
                    e0:c6:dd:df:fb:9f:1b:fd:38:58:c7:59:94:4d:33:
                    18:88:e4:68:9a:d2:90:36:f4:eb:eb:d4:e2:a2:30:
                    c9:b4:85:52:b8:29:14:01:59:ed:d8:4e:92:04:88:
                    24:56:0a:be:93:71:31:03:57:3b:74:a7:4b:de:73:
                    d9:fe:35:fc:83:22:13:81:72:a1:55:9b:59:cf:6b:
                    21:a8:04:0d:8d:f6:29:72:fe:55:ad:33:ee:50:0c:
                    49:13:5f:0a:fc:fe:6e:1e:3b:42:0e:f0:cf:96:dc:
                    1e:f0:a1:be:98:fd:21:7c:ea:ed:ce:68:b0:2c:49:
                    cf:07:67:26:f1:d7:7f:58:42:30:dc:81:6c:fc:27:
                    45:1b:4c:08:02:b5:ae:1b:52:ca:a7:01:77:51:59:
                    3b:54:20:6d:a8:07:e2:a0:6b:5f:6d:32:44:a2:4a:
                    29:b0:00:1c:be:2f:32:19:9e:3d:2b:3e:1b:af:9b:
                    32:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F5:47:67:F0:24:30:93:DD:BC:02:6D:94:D7:BA:DB:4E:63:DF:73
            X509v3 Authority Key Identifier:
                keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:68:9d:2a:e5:f3:c7:c2:c8:36:ef:a3:16:6b:c7:b0:17:49:
         77:e0:c5:df:29:7b:04:6e:a3:5a:cf:db:fd:db:ca:d7:91:2e:
         b4:48:a3:58:c8:08:08:43:93:cc:c6:c1:eb:68:dc:25:ed:aa:
         63:b5:a4:7a:e6:4f:14:7a:f4:e0:61:0d:9c:fe:44:32:10:d0:
         8e:bb:cf:3f:bd:c4:ad:18:48:d6:44:c8:d7:5d:bd:f5:6e:64:
         45:7b:45:90:ee:00:26:fc:27:7c:d4:77:7f:f6:5e:20:d9:16:
         7d:38:7c:c2:2f:b4:8e:4a:bb:2f:5d:9f:67:e7:7a:f3:5e:ea:
         ca:d2:94:02:bc:44:66:2f:b1:e6:1f:0d:d5:fd:ba:9d:55:bb:
         eb:23:be:97:37:8e:cb:9a:e5:ae:f0:c3:c0:c2:92:15:3f:34:
         58:73:93:56:44:a7:cb:bc:b2:89:fe:90:fa:fc:3e:30:03:8e:
         59:3a:b0:d5:ea:9e:21:51:cd:e7:5e:05:d7:ee:2f:83:e9:12:
         c9:f4:b4:8e:79:06:5b:0e:cd:95:f4:d2:e8:e2:40:b6:c6:42:
         97:c7:36:11:0c:0b:5d:ef:e4:21:11:93:5c:9f:bd:35:41:1f:
         63:ad:e9:44:c9:2c:9b:19:41:cd:ea:18:a0:a0:6a:35:94:73:
         1b:86:95:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzwujXwEldBWGL33vKsVjavMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm
YTYyZDIwHhcNMjYwMzE1MDkwMTAxWhcNMjYwMzE2MDkwMTAxWjAzMTEwLwYDVQQD
EygzNGY1NDc2N2YwMjQzMDkzZGRiYzAyNmQ5NGQ3YmFkYjRlNjNkZjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7WTgY2uTibk3pCef+dFV0J7/17I5
fWfDVsOX6pe3S1BAtnsUeWvzbNsu3tBcmtmNWEJNuurXJlr+IF48w1emMN2/zL+G
VTUjxYvgxt3f+58b/ThYx1mUTTMYiORomtKQNvTr69TiojDJtIVSuCkUAVnt2E6S
BIgkVgq+k3ExA1c7dKdL3nPZ/jX8gyITgXKhVZtZz2shqAQNjfYpcv5VrTPuUAxJ
E18K/P5uHjtCDvDPltwe8KG+mP0hfOrtzmiwLEnPB2cm8dd/WEIw3IFs/CdFG0wI
ArWuG1LKpwF3UVk7VCBtqAfioGtfbTJEokopsAAcvi8yGZ49Kz4br5syHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDT1R2fwJDCT3bwCbZTXuttOY99zMB8GA1UdIwQY
MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt
OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2
LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAImidKuXz
x8LINu+jFmvHsBdJd+DF3yl7BG6jWs/b/dvK15EutEijWMgICEOTzMbB62jcJe2q
Y7WkeuZPFHr04GENnP5EMhDQjrvPP73ErRhI1kTI11299W5kRXtFkO4AJvwnfNR3
f/ZeINkWfTh8wi+0jkq7L12fZ+d6817qytKUArxEZi+x5h8N1f26nVW76yO+lzeO
y5rlrvDDwMKSFT80WHOTVkSny7yyif6Q+vw+MAOOWTqw1eqeIVHN514F1+4vg+kS
yfS0jnkGWw7NlfTS6OJAtsZCl8c2EQwLXe/kIRGTXJ+9NUEfY63pRMksmxlBzeoY
oKBqNZRzG4aVKw==
-----END CERTIFICATE-----
Generated at Sun Mar 15 17:48:53 2026 by rpki-client