Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
File:                     IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft (raw, json)
Hash identifier:          pyM9GyTzqwA42Hkh/dIPFEs6h/WqqMvOJf/rrhCVtFs=
Subject key identifier:   78:1A:90:69:37:AA:D5:6A:FF:F1:BB:A6:E9:F1:86:79:A0:61:20:43
Authority key identifier: 22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03
Certificate issuer:       /CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003
Certificate serial:       019CF04C506BF2DED2D923431EF8E8E61D19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
Manifest number:          0D01
Signing time:             Sun 15 Mar 2026 07:00:58 +0000
Manifest this update:     Sun 15 Mar 2026 07:00:58 +0000
Manifest next update:     Mon 16 Mar 2026 07:00:58 +0000
Files and hashes:         1: 3_EpI3KZKzbfeK2XXEoAgU5pxR8.roa (hash: nhz/XR/19vb+kuAg/iFUKPIFqPbUWtZOaM60Y8UGbXw=)
                          2: 4Hbh9kgEtk0ETbC9Jsg3Fsu3-DI.roa (hash: qkbQr2FGRu+j6lNNaiItQZd0nGSc0yYN6c1c29qls04=)
                          3: IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl (hash: v6r1cDjPRkU6IFx+7shKvhEM22KK1TceC0Mw6eyL8nI=)
                          4: oerPqNmEjqxbGPl4Gs_7bUETdN0.roa (hash: EfuWXG0YIgrPAIfQYw0siImFKnCmmDF+zPQxYy5oo28=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Mar 2026 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:f0:4c:50:6b:f2:de:d2:d9:23:43:1e:f8:e8:e6:1d:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003
        Validity
            Not Before: Mar 15 07:00:58 2026 GMT
            Not After : Mar 16 07:00:58 2026 GMT
        Subject: CN=781a906937aad56afff1bba6e9f18679a0612043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:67:cf:06:26:9c:0d:46:62:15:06:98:a1:b4:
                    24:93:e9:9b:22:de:40:35:8f:d5:c6:10:ac:b0:80:
                    34:ac:67:d9:84:68:3a:e2:da:0f:39:e9:a0:ad:a8:
                    b2:6d:44:66:9b:c2:0a:64:36:22:88:3f:c6:00:b3:
                    36:09:9d:a5:25:c1:d8:d2:df:f1:d1:74:c4:3e:dc:
                    dd:f8:92:01:b3:2a:11:28:ed:7b:81:ea:35:30:cc:
                    93:70:92:ca:66:27:0b:91:cb:3d:8d:dd:3b:79:dd:
                    e3:73:30:f5:ff:8d:9d:e0:75:d5:83:f0:cb:db:44:
                    c0:4d:05:a9:db:e4:60:a8:0f:5a:44:62:72:fa:50:
                    cd:54:56:30:00:09:52:42:e9:fb:cd:55:88:ef:6f:
                    bf:3f:84:4e:3f:f7:58:df:85:cf:c1:3f:37:52:53:
                    76:e4:c6:f8:0c:d8:4a:83:85:fb:cf:c8:ef:48:7e:
                    51:80:f0:62:8c:9f:a3:ac:3f:64:d0:76:4e:ba:45:
                    89:17:15:55:e6:57:72:66:b6:34:f4:a4:b5:f6:ba:
                    6c:9e:45:00:be:6c:06:e4:be:55:2a:43:cb:9a:12:
                    f1:3a:05:1f:31:5c:93:3a:92:39:0e:ef:9e:28:7e:
                    ef:d4:0c:74:f8:9a:5c:11:53:b5:5c:5c:6d:48:7d:
                    d8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:1A:90:69:37:AA:D5:6A:FF:F1:BB:A6:E9:F1:86:79:A0:61:20:43
            X509v3 Authority Key Identifier:
                keyid:22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:db:70:7f:e5:d4:6b:0c:bb:0f:6e:ba:8f:6d:e0:00:a6:8b:
         eb:1b:57:c7:03:f6:b6:bf:32:fe:c9:6e:d8:87:b2:85:3a:be:
         cd:84:31:53:aa:f3:b1:b7:a6:1b:f6:ad:a6:b5:c3:3f:48:0f:
         4d:62:4e:ce:6e:87:eb:cf:0a:a6:9d:32:57:56:dd:d7:ae:54:
         99:af:ba:cd:3c:b3:e9:0d:3b:35:90:d9:12:b9:3f:1e:da:af:
         0f:15:05:f9:c9:f5:6b:ac:13:a8:05:f3:9c:63:2b:1a:19:e2:
         d3:d5:48:8b:81:80:b6:52:fa:5d:a7:4b:0c:d8:33:03:b6:c1:
         34:e1:30:2c:45:3a:49:b8:f4:20:0f:71:4e:9f:2e:05:52:fd:
         e1:3e:d1:e0:e1:99:d7:74:8c:6b:3d:71:a6:0b:e9:03:e7:d8:
         6d:e5:ee:ff:6c:2b:52:6a:33:b6:5c:ef:c5:d8:b0:25:05:7b:
         5e:bb:7c:91:7b:ac:04:d5:ee:b0:4d:5f:d2:85:da:2c:ab:79:
         48:06:9e:37:26:f7:a7:8c:dc:0b:2a:13:5a:9d:b7:80:5d:77:
         27:08:5a:a5:04:de:57:52:d6:a3:ae:17:44:7f:e2:34:29:60:
         b8:3a:19:8a:71:12:4d:c1:e3:62:9c:42:0d:1b:36:64:c1:2d:
         a3:f9:da:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 09:26:23 2026 by rpki-client