Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.mft
File:                     Urm54lZYDENEuyQURbTVLlT91Qs.mft (raw, json)
Hash identifier:          x+TN5S3FoiZClGU9hX3+N+vI8vHUKnrthHiq7wSC/rw=
Subject key identifier:   3D:B0:69:F3:50:60:6F:7F:7D:EA:DF:4F:7C:89:2F:7F:24:3D:9D:F5
Authority key identifier: 52:B9:B9:E2:56:58:0C:43:44:BB:24:14:45:B4:D5:2E:54:FD:D5:0B
Certificate issuer:       /CN=52b9b9e256580c4344bb241445b4d52e54fdd50b
Certificate serial:       019D389C4ADB4B7BD0B957DC4121890E81B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.mft
Manifest number:          1566
Signing time:             Sun 29 Mar 2026 08:01:00 +0000
Manifest this update:     Sun 29 Mar 2026 08:01:00 +0000
Manifest next update:     Mon 30 Mar 2026 08:01:00 +0000
Files and hashes:         1: 9Eqe7E3eMUevbHUKUUW_q13KWD4.roa (hash: fY8VfaNE5VXikKhOcBEnGn5MdcBWXx3SvzvPlkIQeaM=)
                          2: GJJ58FIls1lHjVVLLrf2JDQD3W4.roa (hash: l4YjelWHKqcJNFE4+5c8SK1AWUNzmjFYH0lSLSmVQek=)
                          3: N4EQgttBYT2mp-p45DhZLmHfzTQ.roa (hash: Wo3GDFi8E/bJVIRvrii7wyqBFcy3ToYvmvXUkuPDxm0=)
                          4: Urm54lZYDENEuyQURbTVLlT91Qs.crl (hash: murxIqtU3PWnUafmS+K9Wbx/UPz0LC2h6i1rNJA7qN4=)
                          5: ZzgxUr7465xAKyVi3HDIHGueP3k.roa (hash: 2NJYjrGz8rRWAAvm63thzeaecXROIhhwMcqdePuSy00=)
                          6: afKwRxk1ZzUuMbqjhAMAsR8SW7k.roa (hash: 36wIpsjr4F5SRwjTUDc1wC/5dcZLwPECLsusWpMpGsA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9c:4a:db:4b:7b:d0:b9:57:dc:41:21:89:0e:81:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52b9b9e256580c4344bb241445b4d52e54fdd50b
        Validity
            Not Before: Mar 29 08:01:00 2026 GMT
            Not After : Mar 30 08:01:00 2026 GMT
        Subject: CN=3db069f350606f7f7deadf4f7c892f7f243d9df5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0a:52:54:53:97:69:bb:a0:cf:93:ca:e6:81:
                    f6:df:d0:88:fc:42:25:58:e2:53:76:51:98:af:fc:
                    2f:50:ee:d0:57:3a:16:7d:50:09:22:9c:4b:c1:07:
                    9b:ca:05:f1:75:10:59:ea:f9:d9:dd:5a:84:ad:30:
                    87:3a:cb:a7:63:b3:d3:17:c1:23:47:8d:36:6c:af:
                    e5:c0:f9:12:ba:74:f4:ee:5b:03:e9:bd:4d:71:39:
                    8d:59:88:ea:28:3e:0c:48:53:a5:28:27:f0:6a:0b:
                    b7:d1:24:16:e5:55:59:8d:29:f9:55:5b:7d:dc:d2:
                    d8:4c:e9:ad:1a:c8:d7:94:2d:8c:3e:47:e9:c0:d5:
                    f3:c0:e2:66:7e:73:55:2d:55:c4:19:d0:5f:1e:79:
                    53:c5:7b:e9:bc:7f:57:41:9f:16:16:08:05:82:ad:
                    97:bb:81:32:2c:c5:f3:1f:87:f2:6b:3d:96:fa:d7:
                    be:73:ce:d2:53:4c:dc:01:10:93:eb:ea:ab:84:e1:
                    6b:59:17:cb:3d:6f:fc:06:7a:53:25:a4:38:93:92:
                    e9:60:96:b5:6f:ef:33:d2:d0:b0:1e:b8:54:27:b6:
                    9a:ff:f1:01:9d:76:59:9c:4b:dd:0d:82:ec:51:9a:
                    61:ba:32:00:c5:bf:30:b9:0f:ea:4b:0c:36:4c:30:
                    e2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B0:69:F3:50:60:6F:7F:7D:EA:DF:4F:7C:89:2F:7F:24:3D:9D:F5
            X509v3 Authority Key Identifier:
                keyid:52:B9:B9:E2:56:58:0C:43:44:BB:24:14:45:B4:D5:2E:54:FD:D5:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:6c:7a:2f:37:c6:e8:04:e9:b8:64:ec:d5:a7:6c:37:c7:69:
         eb:57:54:65:cc:b9:94:33:bd:38:a2:a1:0e:a4:54:f4:21:97:
         54:0d:91:42:a3:1c:7d:39:88:53:c1:49:c8:1e:08:d7:be:68:
         09:b3:87:f0:74:26:70:ae:66:a8:b1:11:b2:93:f7:ed:48:f8:
         29:c9:0b:86:52:97:d4:5e:8a:c5:36:52:e5:80:1b:dc:fc:3f:
         0a:7f:07:cd:06:dd:4f:6d:e3:d4:28:10:28:34:bf:c9:0e:f4:
         5f:7d:43:bf:34:8c:15:94:4a:b2:86:a3:a8:4d:c3:79:fd:e6:
         f4:d4:bd:26:12:7e:00:2b:a1:42:d0:d3:d5:80:42:56:c2:87:
         c6:ca:fc:cc:8e:99:05:82:2c:19:af:ac:26:4d:a4:10:01:e7:
         81:a9:7e:14:bd:36:22:ad:2c:8e:b0:4b:f4:7e:b5:c4:d3:6a:
         51:97:71:f8:e1:d2:e3:7e:c1:53:b8:0b:e8:67:ab:76:bd:9a:
         b3:b4:39:51:b2:de:30:a1:33:ea:60:ba:89:61:57:5a:96:4b:
         d1:3d:64:ce:98:1b:cd:2c:e5:b1:21:38:03:0c:7b:05:b8:95:
         4d:64:dd:e1:07:e1:62:18:bc:9c:0e:90:fc:ca:75:2f:bb:60:
         61:29:e0:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nErbS3vQuVfcQSGJDoG5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyYjliOWUyNTY1ODBjNDM0NGJiMjQxNDQ1YjRkNTJlNTRm
ZGQ1MGIwHhcNMjYwMzI5MDgwMTAwWhcNMjYwMzMwMDgwMTAwWjAzMTEwLwYDVQQD
EygzZGIwNjlmMzUwNjA2ZjdmN2RlYWRmNGY3Yzg5MmY3ZjI0M2Q5ZGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArApSVFOXabugz5PK5oH239CI/EIl
WOJTdlGYr/wvUO7QVzoWfVAJIpxLwQebygXxdRBZ6vnZ3VqErTCHOsunY7PTF8Ej
R402bK/lwPkSunT07lsD6b1NcTmNWYjqKD4MSFOlKCfwagu30SQW5VVZjSn5VVt9
3NLYTOmtGsjXlC2MPkfpwNXzwOJmfnNVLVXEGdBfHnlTxXvpvH9XQZ8WFggFgq2X
u4EyLMXzH4fyaz2W+te+c87SU0zcARCT6+qrhOFrWRfLPW/8BnpTJaQ4k5LpYJa1
b+8z0tCwHrhUJ7aa//EBnXZZnEvdDYLsUZphujIAxb8wuQ/qSww2TDDiKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD2wafNQYG9/ferfT3yJL38kPZ31MB8GA1UdIwQY
MBaAFFK5ueJWWAxDRLskFEW01S5U/dULMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXJtNTRsWllERU5FdXlRVVJiVFZMbFQ5MVFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lYWY4MWQtYTlkZi00YTZhLWI2MTAt
ZGUwNWM1NDA0NWJiLzEvVXJtNTRsWllERU5FdXlRVVJiVFZMbFQ5MVFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9lYWY4MWQtYTlkZi00YTZhLWI2MTAtZGUwNWM1NDA0NWJi
LzEvVXJtNTRsWllERU5FdXlRVVJiVFZMbFQ5MVFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi2x6LzfG
6ATpuGTs1adsN8dp61dUZcy5lDO9OKKhDqRU9CGXVA2RQqMcfTmIU8FJyB4I175o
CbOH8HQmcK5mqLERspP37Uj4KckLhlKX1F6KxTZS5YAb3Pw/Cn8HzQbdT23j1CgQ
KDS/yQ70X31DvzSMFZRKsoajqE3Def3m9NS9JhJ+ACuhQtDT1YBCVsKHxsr8zI6Z
BYIsGa+sJk2kEAHngal+FL02Iq0sjrBL9H61xNNqUZdx+OHS437BU7gL6Gerdr2a
s7Q5UbLeMKEz6mC6iWFXWpZL0T1kzpgbzSzlsSE4Awx7BbiVTWTd4QfhYhi8nA6Q
/Mp1L7tgYSngpw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:28 2026 by rpki-client