Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.mft
File:                     V-iYv0IJJPl2ta5FEQi55qAfx9w.mft (raw, json)
Hash identifier:          wAGYiIbsrYHB3gIPhM3mBF9wkwtILzO9Nnj66yYnnjo=
Subject key identifier:   43:6B:2E:0C:4B:8C:EB:58:56:67:5E:72:CE:FF:D5:C0:11:44:8E:C1
Authority key identifier: 57:E8:98:BF:42:09:24:F9:76:B5:AE:45:11:08:B9:E6:A0:1F:C7:DC
Certificate issuer:       /CN=57e898bf420924f976b5ae451108b9e6a01fc7dc
Certificate serial:       019D375281D96D04429C97018B471716B05E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-iYv0IJJPl2ta5FEQi55qAfx9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.mft
Manifest number:          1894
Signing time:             Sun 29 Mar 2026 02:00:47 +0000
Manifest this update:     Sun 29 Mar 2026 02:00:47 +0000
Manifest next update:     Mon 30 Mar 2026 02:00:47 +0000
Files and hashes:         1: KOCxXy92oo_VGD1EEbZKaXLLk3Y.roa (hash: uOK+bljSOMX3VyHLaGCq6xj1yuZNQ68NS92rqmrWHYk=)
                          2: MXMQAZBcZXOT6UrfozY1__Ux6go.roa (hash: n4BuxRXKieJpGXIfMattFoqCGgwB9zh0vNAEkZ3ClK8=)
                          3: V-iYv0IJJPl2ta5FEQi55qAfx9w.crl (hash: L89yoRD7M4rwELArTbM9OipJ4pKf2UoDdLNcIs3YXzE=)
                          4: V_Ey4EFMly29CFJ0YsUSkgM4B4Y.roa (hash: xtvpREiVdZWuwO2sCzRKcDsqGmiaZ5yRdUpP4zq8aa0=)
                          5: rla9nfquRDNkBA9a7aTOXInR3kY.roa (hash: h1nZyOG+2GkCNjljv4pIretBeB05AhrlFnBuYz+Q++o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V-iYv0IJJPl2ta5FEQi55qAfx9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 02:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:52:81:d9:6d:04:42:9c:97:01:8b:47:17:16:b0:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57e898bf420924f976b5ae451108b9e6a01fc7dc
        Validity
            Not Before: Mar 29 02:00:47 2026 GMT
            Not After : Mar 30 02:00:47 2026 GMT
        Subject: CN=436b2e0c4b8ceb5856675e72ceffd5c011448ec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bb:32:91:7a:e8:f2:69:dd:ea:62:a7:30:2c:
                    ca:51:11:bb:59:6c:fe:2c:20:9b:97:2a:73:ec:38:
                    dc:c5:ef:60:74:8b:48:eb:ce:e5:4b:f2:16:11:a2:
                    5e:b6:47:de:61:3c:60:a7:d6:d5:6a:d2:0d:a9:a3:
                    bf:1e:63:15:57:28:71:11:16:9a:45:2d:2a:0d:32:
                    f3:ff:02:02:33:75:5c:23:4a:12:62:49:97:64:b6:
                    de:c9:3a:0b:b3:f8:cd:6a:16:9f:de:34:7c:48:90:
                    98:25:4c:47:fc:74:dd:c1:68:b8:5e:83:41:6e:3c:
                    b6:fd:3e:dd:28:58:46:67:e2:9e:9e:1c:7f:78:16:
                    9e:36:3d:35:d5:a2:01:a7:74:55:05:19:13:0d:77:
                    f7:f4:a9:3a:77:04:33:93:21:7c:90:a8:8a:51:0f:
                    89:9c:e5:2c:7b:ff:5b:b7:bb:27:c4:1d:9e:e4:11:
                    72:2c:20:00:05:2b:b5:ac:9c:8c:09:b3:3f:12:0f:
                    8b:1e:c3:58:c6:1d:73:eb:99:92:b7:23:f8:6f:5d:
                    ce:61:16:ab:67:4d:a5:57:2d:3d:6f:a5:fb:70:b6:
                    91:ec:9c:76:14:04:86:59:d0:5a:17:95:41:a9:24:
                    21:95:49:5c:aa:fb:e7:75:34:bc:ca:c1:8c:11:7e:
                    84:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:6B:2E:0C:4B:8C:EB:58:56:67:5E:72:CE:FF:D5:C0:11:44:8E:C1
            X509v3 Authority Key Identifier:
                keyid:57:E8:98:BF:42:09:24:F9:76:B5:AE:45:11:08:B9:E6:A0:1F:C7:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-iYv0IJJPl2ta5FEQi55qAfx9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:78:12:15:7e:81:e7:e4:d5:f9:04:f9:a8:84:b2:49:2e:91:
         5d:2c:9f:fb:24:c9:55:65:96:97:68:aa:7c:9f:3f:1f:68:c5:
         2f:f6:3f:79:e8:d9:17:e3:c9:ac:5e:0c:ba:dd:ca:32:42:f2:
         66:2b:e6:11:56:e4:0b:44:42:78:1c:1d:55:1f:99:5e:80:00:
         d0:8a:2b:0f:91:8a:dd:21:4e:a8:37:6b:4b:34:17:b4:5f:f3:
         22:0f:8e:00:88:c7:f2:f6:b8:4d:91:d3:06:ad:ac:d4:f6:89:
         50:41:35:e7:7b:85:e7:e9:50:e7:8b:96:dd:28:af:2a:3a:79:
         a8:ab:5b:6c:10:ac:da:42:6b:dd:9d:a6:32:3d:2f:2b:65:95:
         09:5c:b1:d0:1b:cd:e4:29:c3:68:0c:47:21:40:29:02:b6:ec:
         71:1a:ff:07:a3:c4:9b:19:38:18:2a:c7:3f:a4:dc:98:ab:b3:
         1b:83:55:37:fc:41:f7:ed:e3:9e:62:34:eb:5b:3d:52:73:4e:
         25:ba:c1:bb:ac:8e:68:f6:3c:6a:ec:05:22:e1:7c:ce:f4:4b:
         4d:f0:eb:a5:87:0b:7f:04:9a:1f:4a:20:25:3e:9e:b3:60:87:
         ec:2e:a9:dd:ea:1d:16:ca:8d:8f:b2:6e:26:50:a8:73:8a:2b:
         7d:0a:3b:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UoHZbQRCnJcBi0cXFrBeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3ZTg5OGJmNDIwOTI0Zjk3NmI1YWU0NTExMDhiOWU2YTAx
ZmM3ZGMwHhcNMjYwMzI5MDIwMDQ3WhcNMjYwMzMwMDIwMDQ3WjAzMTEwLwYDVQQD
Eyg0MzZiMmUwYzRiOGNlYjU4NTY2NzVlNzJjZWZmZDVjMDExNDQ4ZWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLsykXro8mnd6mKnMCzKURG7WWz+
LCCblypz7Djcxe9gdItI687lS/IWEaJetkfeYTxgp9bVatINqaO/HmMVVyhxERaa
RS0qDTLz/wICM3VcI0oSYkmXZLbeyToLs/jNahaf3jR8SJCYJUxH/HTdwWi4XoNB
bjy2/T7dKFhGZ+Kenhx/eBaeNj011aIBp3RVBRkTDXf39Kk6dwQzkyF8kKiKUQ+J
nOUse/9bt7snxB2e5BFyLCAABSu1rJyMCbM/Eg+LHsNYxh1z65mStyP4b13OYRar
Z02lVy09b6X7cLaR7Jx2FASGWdBaF5VBqSQhlUlcqvvndTS8ysGMEX6EvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFENrLgxLjOtYVmdecs7/1cARRI7BMB8GA1UdIwQY
MBaAFFfomL9CCST5drWuRREIueagH8fcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVi1pWXYwSUpKUGwydGE1RkVRaTU1cUFmeDl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jNTE0Y2QtNzk1NC00NGNlLWJkN2Yt
NzEzYjQxNjg4NzA2LzEvVi1pWXYwSUpKUGwydGE1RkVRaTU1cUFmeDl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9jNTE0Y2QtNzk1NC00NGNlLWJkN2YtNzEzYjQxNjg4NzA2
LzEvVi1pWXYwSUpKUGwydGE1RkVRaTU1cUFmeDl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo3gSFX6B
5+TV+QT5qISySS6RXSyf+yTJVWWWl2iqfJ8/H2jFL/Y/eejZF+PJrF4Mut3KMkLy
ZivmEVbkC0RCeBwdVR+ZXoAA0IorD5GK3SFOqDdrSzQXtF/zIg+OAIjH8va4TZHT
Bq2s1PaJUEE153uF5+lQ54uW3SivKjp5qKtbbBCs2kJr3Z2mMj0vK2WVCVyx0BvN
5CnDaAxHIUApArbscRr/B6PEmxk4GCrHP6TcmKuzG4NVN/xB9+3jnmI061s9UnNO
JbrBu6yOaPY8auwFIuF8zvRLTfDrpYcLfwSaH0ogJT6es2CH7C6p3eodFsqNj7Ju
JlCoc4orfQo7gw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:57 2026 by rpki-client