Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft
File:                     imauQAwtaBlg6FU_yzFXi42c37Y.mft (raw, json)
Hash identifier:          C6UyFeyVXu0i2CFtuVvsndmfK4G3ZLx+sBitLgQjqvY=
Subject key identifier:   C0:D2:DD:1A:84:C8:5B:24:60:E7:74:8C:F6:E6:DF:AB:13:B5:A7:A5
Authority key identifier: 8A:66:AE:40:0C:2D:68:19:60:E8:55:3F:CB:31:57:8B:8D:9C:DF:B6
Certificate issuer:       /CN=8a66ae400c2d681960e8553fcb31578b8d9cdfb6
Certificate serial:       019D39E5C41718C46EE59E7733ABAA92DF7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/imauQAwtaBlg6FU_yzFXi42c37Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft
Manifest number:          04BF
Signing time:             Sun 29 Mar 2026 14:00:52 +0000
Manifest this update:     Sun 29 Mar 2026 14:00:52 +0000
Manifest next update:     Mon 30 Mar 2026 14:00:52 +0000
Files and hashes:         1: NzRA3D4Kn5TIzMbdeBRZj8-3TPI.roa (hash: CfqYoJORgk50J8/a4wFc3Mw6td5sedXHYSUR5haXaCE=)
                          2: imauQAwtaBlg6FU_yzFXi42c37Y.crl (hash: s3euJf0jebOX9OumXygZo9dKLns3bdAKPHXXJk+ieXM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/imauQAwtaBlg6FU_yzFXi42c37Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 14:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:e5:c4:17:18:c4:6e:e5:9e:77:33:ab:aa:92:df:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a66ae400c2d681960e8553fcb31578b8d9cdfb6
        Validity
            Not Before: Mar 29 14:00:52 2026 GMT
            Not After : Mar 30 14:00:52 2026 GMT
        Subject: CN=c0d2dd1a84c85b2460e7748cf6e6dfab13b5a7a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:38:32:e4:3d:a8:e0:a3:2c:8c:20:f9:ef:bc:
                    1d:7d:83:b6:a5:a9:cc:62:78:f7:e3:d8:ac:a4:cf:
                    e7:99:36:f4:f8:ce:f2:25:bb:0a:70:b5:a7:e7:2c:
                    b6:3f:a5:a0:6c:29:50:26:b6:5b:35:34:62:48:0f:
                    cc:fd:29:49:62:6e:6f:b6:b1:d9:fd:95:2f:e8:3a:
                    1c:86:64:51:8f:86:58:ac:cf:cf:e1:1f:10:33:53:
                    2c:b1:02:d4:45:80:cc:2d:3f:b6:1f:08:06:82:d5:
                    51:aa:dd:d7:85:bd:8b:ac:8e:2e:7c:c4:21:86:14:
                    cd:7a:42:45:83:23:05:9d:07:3f:cd:e2:68:9d:90:
                    96:fe:9a:bb:ff:87:70:70:87:8d:4a:54:ee:30:a6:
                    20:1f:8b:89:90:b9:6e:13:a7:12:b8:84:a0:39:e7:
                    61:9f:60:cc:0d:5b:8b:68:81:47:0e:5d:f6:b2:85:
                    4b:03:0a:06:74:31:fb:aa:f6:53:8f:0b:2b:9c:fa:
                    84:1c:9e:42:74:ef:7b:42:43:8a:77:f6:46:d4:b2:
                    30:5f:15:8b:ec:01:0e:4f:6a:d6:70:99:72:44:bc:
                    b1:6d:ae:d3:ac:ae:11:e3:63:45:69:ee:34:61:5c:
                    bd:e0:40:f9:62:20:7e:ad:83:8e:32:d1:da:ba:6d:
                    01:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D2:DD:1A:84:C8:5B:24:60:E7:74:8C:F6:E6:DF:AB:13:B5:A7:A5
            X509v3 Authority Key Identifier:
                keyid:8A:66:AE:40:0C:2D:68:19:60:E8:55:3F:CB:31:57:8B:8D:9C:DF:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imauQAwtaBlg6FU_yzFXi42c37Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:47:3c:b7:a6:0c:ff:34:7d:72:3c:7f:06:d5:71:4d:d9:32:
         89:e8:68:df:a8:d9:97:88:4e:2b:82:91:cc:73:05:7d:c3:77:
         83:ae:88:5d:d4:f3:9b:78:3e:d2:19:6c:81:72:83:a9:2e:c9:
         90:2b:dc:54:86:b6:60:7a:db:e5:69:fb:0f:33:58:73:37:bd:
         40:cb:40:ea:21:33:f1:ed:07:64:d1:e8:4e:c7:fd:9c:2b:30:
         64:3e:e8:0c:55:1f:c5:bd:37:e9:bd:f2:c6:fc:f2:60:cb:b9:
         ef:eb:d0:d0:b6:c8:86:68:70:a2:b0:cf:1e:c5:5e:a8:9b:e6:
         a4:05:d1:5b:00:83:9e:02:2a:74:19:4a:d9:69:23:40:b2:aa:
         d3:79:77:86:71:d4:f6:5d:51:5a:91:fb:a9:43:86:92:6c:f7:
         d5:3e:fd:fb:3b:aa:87:67:fd:6a:c4:c8:38:63:6e:55:33:d9:
         68:c6:4e:fa:43:3e:05:a0:73:0c:bc:26:d8:f0:26:0b:3d:40:
         7f:5f:63:2d:b9:3e:2a:52:4f:83:7d:58:5b:f0:e0:27:17:77:
         75:e3:7b:7d:e6:d2:55:ab:35:ff:64:31:e1:e5:78:e4:c1:58:
         df:c2:f3:8d:c1:6d:96:37:ca:41:8a:2c:07:e9:81:7f:d5:5d:
         0a:d2:a8:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ055cQXGMRu5Z53M6uqkt9/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNjZhZTQwMGMyZDY4MTk2MGU4NTUzZmNiMzE1NzhiOGQ5
Y2RmYjYwHhcNMjYwMzI5MTQwMDUyWhcNMjYwMzMwMTQwMDUyWjAzMTEwLwYDVQQD
EyhjMGQyZGQxYTg0Yzg1YjI0NjBlNzc0OGNmNmU2ZGZhYjEzYjVhN2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTgy5D2o4KMsjCD577wdfYO2panM
Ynj349ispM/nmTb0+M7yJbsKcLWn5yy2P6WgbClQJrZbNTRiSA/M/SlJYm5vtrHZ
/ZUv6DochmRRj4ZYrM/P4R8QM1MssQLURYDMLT+2HwgGgtVRqt3Xhb2LrI4ufMQh
hhTNekJFgyMFnQc/zeJonZCW/pq7/4dwcIeNSlTuMKYgH4uJkLluE6cSuISgOedh
n2DMDVuLaIFHDl32soVLAwoGdDH7qvZTjwsrnPqEHJ5CdO97QkOKd/ZG1LIwXxWL
7AEOT2rWcJlyRLyxba7TrK4R42NFae40YVy94ED5YiB+rYOOMtHaum0BZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMDS3RqEyFskYOd0jPbm36sTtaelMB8GA1UdIwQY
MBaAFIpmrkAMLWgZYOhVP8sxV4uNnN+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW1hdVFBd3RhQmxnNkZVX3l6RlhpNDJjMzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jMzNhZjYtMzZhOS00N2IwLTgzZTct
OGJiYzNhOWU0ZjQzLzEvaW1hdVFBd3RhQmxnNkZVX3l6RlhpNDJjMzdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9jMzNhZjYtMzZhOS00N2IwLTgzZTctOGJiYzNhOWU0ZjQz
LzEvaW1hdVFBd3RhQmxnNkZVX3l6RlhpNDJjMzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlkc8t6YM
/zR9cjx/BtVxTdkyieho36jZl4hOK4KRzHMFfcN3g66IXdTzm3g+0hlsgXKDqS7J
kCvcVIa2YHrb5Wn7DzNYcze9QMtA6iEz8e0HZNHoTsf9nCswZD7oDFUfxb036b3y
xvzyYMu57+vQ0LbIhmhworDPHsVeqJvmpAXRWwCDngIqdBlK2WkjQLKq03l3hnHU
9l1RWpH7qUOGkmz31T79+zuqh2f9asTIOGNuVTPZaMZO+kM+BaBzDLwm2PAmCz1A
f19jLbk+KlJPg31YW/DgJxd3deN7febSVas1/2Qx4eV45MFY38LzjcFtljfKQYos
B+mBf9VdCtKo7Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:31:58 2026 by rpki-client