Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft
File:                     miM7vd_kOGRvWG8IXl3w15vfufw.mft (raw, json)
Hash identifier:          Gd/EQFHOUvux0I2VkKB5na3ni49ucPfivpJ/2nEhQh4=
Subject key identifier:   53:E0:C4:58:5C:79:B3:68:4A:CF:5B:41:B9:0C:43:32:AA:2A:DC:A7
Authority key identifier: 9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC
Certificate issuer:       /CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc
Certificate serial:       019CE636956C6353F13F203A40F1EDF6E7DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft
Manifest number:          075B
Signing time:             Fri 13 Mar 2026 08:01:02 +0000
Manifest this update:     Fri 13 Mar 2026 08:01:02 +0000
Manifest next update:     Sat 14 Mar 2026 08:01:02 +0000
Files and hashes:         1: M1ruMNKluNAuiHKd8f6PvAhDGEs.roa (hash: FWsTJhEBrkq8kPBWZ62T1F7ClTwy4cYS4tWh5TLbeTA=)
                          2: XNKWPCMOPLauToaa-Vtz2zcauoc.roa (hash: luJuVPoWx92bH75pBWbCMtwrgqr+Km6/eamqOW1HDZc=)
                          3: dyhz1TfOcl672ykR-umzk8d_7AQ.roa (hash: i2scR6hBPf9EaO7J0DMnFp1+UeNi6vv8mMyfEjaxgaY=)
                          4: miM7vd_kOGRvWG8IXl3w15vfufw.crl (hash: JPk+oTk3pL5m8Wt3wJnwu0kp+yzgONOEHdLhCJa9OU0=)
                          5: nl8rJp2Gx045j4pPDWegyHxSDoU.roa (hash: 2GNCXLXhx5YXmc3JB/+CLbWieU0ZOSqkjHUYlGnPA30=)
                          6: vhhE0LlaMoAC65mEN3TyEobLF50.roa (hash: Us5rGsyQlFj4bRY6YlCqwzJno3k3/qLxqTpPkFS4SJ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 08:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e6:36:95:6c:63:53:f1:3f:20:3a:40:f1:ed:f6:e7:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc
        Validity
            Not Before: Mar 13 08:01:02 2026 GMT
            Not After : Mar 14 08:01:02 2026 GMT
        Subject: CN=53e0c4585c79b3684acf5b41b90c4332aa2adca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ee:53:06:76:e3:9a:ec:52:eb:d8:93:8e:be:
                    e8:ed:5c:b1:4e:69:d0:09:e7:a7:22:0c:1e:83:0c:
                    1a:b0:04:b8:84:22:08:94:ac:92:c5:f8:9a:32:f5:
                    fa:86:45:a7:47:0b:ba:71:c2:af:78:85:f6:34:75:
                    7f:5f:6b:b7:e4:77:a2:e0:b2:fa:46:14:09:00:b2:
                    75:05:fd:e0:49:2b:98:bf:c9:1c:6f:d3:0a:39:cf:
                    0f:d2:ff:74:88:d7:02:4d:2a:0d:4b:b6:6f:03:c2:
                    03:0b:f0:a9:05:20:78:8a:e5:19:20:d8:57:b8:5d:
                    11:54:23:c1:bd:ce:44:35:e6:18:a3:1a:ec:34:ab:
                    94:70:32:99:35:64:52:77:c0:33:0b:3e:55:a7:04:
                    8b:4f:9a:72:0c:75:f3:70:6d:3d:74:ef:4c:a0:23:
                    df:85:b7:55:c5:3f:95:a8:28:eb:32:b3:0a:a8:9b:
                    e3:1e:24:24:d3:84:5d:ee:10:f6:0a:76:47:dc:d8:
                    8a:c4:65:90:ad:7d:d9:15:b4:01:c9:1e:64:92:3b:
                    5e:57:cc:97:b2:da:b6:05:f5:09:31:4e:29:70:be:
                    a4:c8:fe:f6:41:67:95:05:36:31:27:46:a6:59:9d:
                    72:97:47:26:9a:72:08:bb:0f:f5:11:4e:e6:4d:fa:
                    42:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E0:C4:58:5C:79:B3:68:4A:CF:5B:41:B9:0C:43:32:AA:2A:DC:A7
            X509v3 Authority Key Identifier:
                keyid:9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:38:0f:68:aa:d7:bf:19:41:da:62:8d:c6:2d:c7:e7:d6:cb:
         51:50:b8:5e:50:a6:8d:b6:dd:96:fe:c3:f1:f0:b8:69:0d:24:
         27:b6:67:6a:d2:d8:36:96:f0:ff:ae:36:d0:19:50:5c:31:84:
         45:67:60:8f:8c:c1:73:30:2e:41:2a:71:83:d1:39:35:b4:9f:
         1a:cd:45:3a:79:e8:d1:9c:ef:4b:02:33:0f:02:0e:fa:46:0c:
         9d:f8:67:90:45:7c:ed:5e:bf:bb:75:e4:ee:1f:89:80:2b:5e:
         09:66:7b:0f:7c:00:fb:49:de:ef:d9:f6:2b:b8:0e:2b:14:4b:
         fb:8e:4b:68:16:bc:27:58:60:82:27:27:d6:66:25:62:d7:7e:
         5c:e1:09:19:d8:36:e6:f8:e3:27:1e:26:8a:cf:e7:95:3e:6b:
         0d:eb:78:d8:38:64:90:4e:d8:50:75:78:98:a9:20:cf:8e:00:
         27:c6:fc:f2:6a:fd:8b:9c:5a:f2:dd:1b:d6:41:0e:98:bf:fc:
         0e:16:ab:ac:aa:e0:2d:1e:75:5b:f7:13:26:9c:29:0f:08:c5:
         b3:71:e6:7b:f5:9f:bf:a0:14:e8:b5:31:25:d9:f0:d7:ce:d8:
         10:88:a3:76:b2:42:26:d2:76:ff:03:0f:80:69:01:58:97:33:
         29:d0:fb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:30:22 2026 by rpki-client