Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
File:                     7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json)
Hash identifier:          HjlJIZGu6yiYl2mm4kFxkijsD3C78AQ0acjktN6Inrc=
Subject key identifier:   02:96:53:1C:A6:75:4B:19:DF:54:5E:4B:36:EB:0F:90:34:AD:FC:45
Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
Certificate issuer:       /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Certificate serial:       019CCC08B2C2E4249DAF43F00D4836D783E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
Manifest number:          1179
Signing time:             Sun 08 Mar 2026 06:00:47 +0000
Manifest this update:     Sun 08 Mar 2026 06:00:47 +0000
Manifest next update:     Mon 09 Mar 2026 06:00:47 +0000
Files and hashes:         1: 1-D8OmgY3nKSj2v3MJmWlPYnb9CQ.roa (hash: a385zNiEurpE9zRwf9X4UBpg40A2fY4ohIw0B9nkrro=)
                          2: 1fKDHDyi88uhIrdIl99Ji35F12s.roa (hash: ibeCFUGVM6Hr/NL42yqJmWoFRaGEzYgkrlHOoS3siho=)
                          3: 3t7MGPFMuBSxJLCxDF_3n50KStc.roa (hash: 6GS3fb7DEXDLSqf4y4y0SrlWtV5NF4pu8OcshRbE90U=)
                          4: 4epOeDhcnpBTi2g4YcisvFWMAa4.roa (hash: +2jkFhE3n0xcPuUcbVnaPwBBTRX7qOSg8rWKC4wCay8=)
                          5: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: CyhRQVf8B5BNwKdpRAnNEmXgZR5MZqBQ3tTu+JfchS8=)
                          6: BYsn1N5gP2JO3UfQxO-E-V2e0co.roa (hash: 6igu0zYuxX+N38bsBkkYKxt8Fvp/P+aUhF4rJG443fk=)
                          7: F2c42ybkIwQUeCQqNVp_C3yFlro.roa (hash: KrIMAe6Zw/sJbSu3dokUorq0Itj56++s8jIbDFuR90Q=)
                          8: FHmKT3d93phBQ2sJCe6iypixWE4.roa (hash: gr7Vm5ezbEir/8TLVn3dVqAxR+5C8tMF+REqdfAIUrk=)
                          9: FzQlXJMrueOFWSAR8L8h6Ur-hZc.roa (hash: WfwyKtSywEHryZ+M6HznzFfEjcPQAgXonMv0QamAIn4=)
                          10: LVLHCbJcyDZSnlN60YzfQsK0HpA.roa (hash: vgdjHgNRPC/reweQCNlxL1k3EIbDFAOPreXZsrVrnu4=)
                          11: NSS0gU9xsQcOZEIfKkpLsjZuNB0.roa (hash: VyQiUIVUgwwIcEoE5kv5MX8wQDctr6SkpBRpe02j4L4=)
                          12: PwETNKs37jeOPIwRfzmAVRCx5RA.roa (hash: A7MiRy6tdF3DFHgGL2Bg1zW3IkK52EBZK26ibjcoM5o=)
                          13: S9FfJCycMQRA7bahC5rfE0YQTSg.roa (hash: 8MejBWKBQixvCnUzb1LPtqAMZdROfL9yfHkcMqfZHKY=)
                          14: SEmswT8qRK9Bjzxvl0uw6a5asBk.roa (hash: u11Eo4iK3j8KXMwIQS50D4H8cdM2mGVMvEkf3VKSGko=)
                          15: ZRxBI6--3WcDP6y0WoOf_vAd2NE.roa (hash: tzOhUp8auz5616T4WhpBy1GjZZJ7rOEJ1FCyRQX+r8M=)
                          16: ZweD9hSO-FjSNgRjYiWP5ozqgiM.roa (hash: tLzdWZNv79sT3YaekBIw1EK7WtYQTy+aDzxkObz61k4=)
                          17: fIGWD-4Fshb7d4r83OFbyVwjqBY.roa (hash: Ks+OV7JB0vGipKpWHkMisr6xMryLFUgnnDUUzg6XUBQ=)
                          18: iyx4iGSqz3YL_BqXzYoasBlGIOs.roa (hash: tcdJGjSX6zqPJW45F+GkjDvmD1FBoeYzAmLsGXVBq0c=)
                          19: xX_eayIur3ayUrNMcGn9ChpnHec.roa (hash: U/ut0MWz8oiiYflyyyeRjSx1ThmGKeCsH/L5YDP+UgA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 22:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:cc:08:b2:c2:e4:24:9d:af:43:f0:0d:48:36:d7:83:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
        Validity
            Not Before: Mar  8 06:00:47 2026 GMT
            Not After : Mar  9 06:00:47 2026 GMT
        Subject: CN=0296531ca6754b19df545e4b36eb0f9034adfc45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7e:2a:1b:ec:c7:df:15:23:06:a5:49:dd:db:
                    b5:6a:b4:54:b5:95:e5:19:e9:65:7d:e6:32:66:99:
                    a3:b4:83:51:28:cc:f7:bf:77:ca:fe:10:58:f3:8e:
                    09:90:b0:86:aa:8a:08:cd:47:e9:a7:20:4b:c4:4c:
                    77:08:64:23:35:6e:f8:b1:3d:4a:b7:5f:2d:dd:de:
                    d0:33:0f:6c:77:23:d5:4f:a4:e2:f7:a9:34:f3:d3:
                    30:79:6c:6e:2c:4e:19:8e:49:5b:94:4f:0f:ca:46:
                    54:1b:8b:34:ca:ff:c0:fe:cc:b4:7f:41:23:dc:f3:
                    5d:e5:ab:58:62:06:48:85:3d:e3:03:77:fe:f9:19:
                    0c:ff:ef:4d:09:37:cd:66:bf:38:12:d2:fd:f2:b5:
                    57:8d:45:1c:1f:f5:e2:a1:49:8c:e4:ab:e8:ab:eb:
                    15:a8:04:9d:37:df:38:84:01:7b:1a:f5:ff:d7:5d:
                    9d:de:4b:c0:49:85:66:2a:b5:0e:6c:21:21:73:a2:
                    6e:d0:01:3c:ee:fa:81:54:8f:ab:43:3a:5a:58:a0:
                    8d:e3:ed:43:57:f2:bc:41:61:3e:71:10:46:7d:33:
                    cd:b4:6a:dd:b3:8c:de:db:e0:61:be:3c:2e:5c:07:
                    42:45:d8:0d:4d:27:d2:10:f7:02:46:ce:da:7e:b7:
                    19:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:96:53:1C:A6:75:4B:19:DF:54:5E:4B:36:EB:0F:90:34:AD:FC:45
            X509v3 Authority Key Identifier:
                keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:27:9e:1b:61:c1:f2:77:c7:54:cd:e8:bd:a2:e1:5e:3d:65:
         c0:71:72:1e:6a:da:e2:67:08:19:f9:31:78:dc:26:e7:f7:26:
         4c:a3:27:9e:a8:b9:f1:57:72:2c:00:97:54:f5:88:14:67:72:
         52:55:29:7e:30:eb:97:8d:c8:69:83:9f:7e:0e:b8:66:7e:44:
         63:d4:ab:db:e6:aa:50:68:a4:70:6c:2d:62:d6:8b:9b:60:97:
         e7:24:ed:06:12:51:90:fa:a9:c7:8b:17:e6:16:5d:75:27:9a:
         db:76:08:dc:8c:73:66:5f:71:98:b2:33:7b:60:16:a6:c1:9a:
         63:31:c8:18:95:91:db:e6:d8:6a:fd:6d:ff:a5:71:15:2d:96:
         8d:fb:c1:f6:4b:78:a2:ec:7e:72:69:90:9c:ba:cd:d6:2b:f3:
         f0:38:ff:fe:2d:15:3d:b1:ee:b7:e5:88:ba:e6:d2:eb:8b:87:
         aa:5b:4f:76:01:8a:34:5a:a8:3c:28:92:a5:2c:b4:89:8c:d9:
         93:9c:d8:db:59:0f:5b:64:6b:db:6c:c6:8b:97:79:2b:19:6e:
         11:65:ce:c9:ad:9f:a5:8e:1c:ca:89:06:61:e0:6e:03:16:80:
         89:92:8d:3c:ed:48:2a:25:89:e4:1e:f6:6a:f2:90:73:68:f1:
         da:e1:b0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 07:36:26 2026 by rpki-client