Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft
File:                     ZeqT2IogLVHTTSqQNZfna48X8Oo.mft (raw, json)
Hash identifier:          7WISI3MeMJj2e6po1DPfGPulJVWVNox7lipRAkGB8vM=
Subject key identifier:   D6:32:D7:B7:8F:C5:E5:A6:A5:0E:E8:17:02:0C:2C:10:5C:50:4A:92
Authority key identifier: 65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA
Certificate issuer:       /CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea
Certificate serial:       019D06D41B76CB46D53CAD9DCE4C482DC744
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft
Manifest number:          0297
Signing time:             Thu 19 Mar 2026 16:00:57 +0000
Manifest this update:     Thu 19 Mar 2026 16:00:57 +0000
Manifest next update:     Fri 20 Mar 2026 16:00:57 +0000
Files and hashes:         1: JDzjknDhu6Y_YYn0PdVHwiTr2YA.roa (hash: GohFVvvq+XYJmNC5kEf/pp9o0uUty9wky/EpnIbRt08=)
                          2: NoZSWhmqqJ-jT-gIkmjqQ8qYPhs.roa (hash: 4FtInJpoGkk+Vb1c+RGpJW0LjEHsFBBNSGv4WPMtxTI=)
                          3: OPTZ--metoE31gQg_Kb2TtGMPZs.roa (hash: 5B9mvxolESAWRrjNgHOj1iuu7ztWWoCrEFq+GFHk69s=)
                          4: U8WZUnMa-TahLUNYH6oN_0xrRfY.roa (hash: mHXLAX0IgZLJ42nbFOtKk2Ws8p5epFKPUUJ9r8cz5Y0=)
                          5: Xyfw_F7Al_ClRr8-ihHfuJGwEGI.roa (hash: FySK//s6n3h8RIZFxfbkqJJANJBH7/F4as5E6MlREIw=)
                          6: ZeqT2IogLVHTTSqQNZfna48X8Oo.crl (hash: prRAT0UQYpnm/kSoiEDlnBzgKvmPs3sNcplqLOtGjuA=)
                          7: a5VVVz2Ui_9h3mW5WZQg--lrU_Y.roa (hash: 5VX7qNlklX2fuW/gRGQLSag3AdckFK4/ZchDNd6NNIc=)
                          8: l_b58pljUUJymixbVYg_j7s7_b4.roa (hash: tkw9nfwUKY8DeE3LkaxnF3Ie+Qlq21vHeZW4yxJTxd4=)
                          9: u8LD6GM5KGyVdLMt4xHc2hEvEv4.roa (hash: r8B0cJyXj35djBArpMf/tZI9LQkRKm/+ERAhPE5VWvE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Mar 2026 16:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:06:d4:1b:76:cb:46:d5:3c:ad:9d:ce:4c:48:2d:c7:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea
        Validity
            Not Before: Mar 19 16:00:57 2026 GMT
            Not After : Mar 20 16:00:57 2026 GMT
        Subject: CN=d632d7b78fc5e5a6a50ee817020c2c105c504a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2b:33:da:09:8a:5b:8f:de:1e:99:1c:99:f8:
                    20:21:b5:23:3e:e5:8c:bb:15:f4:bd:bc:6d:ba:cb:
                    70:d8:ef:9a:8b:73:1b:80:61:90:29:60:c0:7b:de:
                    6a:dd:28:69:47:85:6d:13:96:73:35:7e:6c:4f:40:
                    e8:2c:86:2a:33:2d:22:10:33:02:c3:17:95:02:d1:
                    79:95:b2:ed:67:95:80:be:13:e8:2b:5c:a0:a2:57:
                    8c:f4:99:4a:06:eb:2a:d4:a3:3e:8d:e5:06:cf:d9:
                    75:5a:0d:97:5a:8a:bf:97:56:2e:13:bc:c4:d6:82:
                    5f:06:c2:b4:40:39:5a:34:52:a0:5c:77:96:cc:7b:
                    13:18:c9:8a:76:e0:bf:11:86:78:09:d9:76:b2:5a:
                    8f:1c:79:7a:e6:87:2b:8d:a6:42:4e:68:4b:10:07:
                    54:3b:5e:83:9c:3b:91:71:d6:28:8d:e3:60:2f:1a:
                    c0:59:7c:c3:ef:cc:c2:9b:11:d9:1e:3b:7b:10:19:
                    92:ea:b5:e7:ba:4a:2e:1d:ec:55:9d:42:81:82:41:
                    5c:60:23:44:29:9e:c2:e7:91:df:33:e7:25:2c:88:
                    4e:72:bc:5c:17:6a:2a:dc:81:1d:fa:79:1a:4f:45:
                    dc:a3:f4:fd:66:e5:bb:0c:78:1b:84:6c:f8:21:a7:
                    91:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:32:D7:B7:8F:C5:E5:A6:A5:0E:E8:17:02:0C:2C:10:5C:50:4A:92
            X509v3 Authority Key Identifier:
                keyid:65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:f5:7b:3c:bb:78:c0:f2:a8:b2:2c:93:0d:ef:64:1f:6c:2b:
         79:15:11:65:fa:4d:e1:38:a7:0d:10:fc:68:c2:fa:d5:92:08:
         66:4b:00:b3:6c:0d:6b:af:9d:76:6e:4f:49:0b:ea:3b:48:6f:
         63:f6:8e:2b:40:ec:73:08:e1:ef:e5:c7:ff:38:1f:50:ac:06:
         63:de:8e:63:b6:85:39:71:68:08:77:0a:52:b9:95:3a:69:ae:
         2a:5c:68:2e:dc:83:31:ad:a5:00:d7:9a:50:d3:38:94:b0:8b:
         c3:65:1a:c0:c2:0f:d9:72:9b:45:06:45:5c:a6:d3:5c:9a:05:
         ef:b1:f8:2b:ba:ba:9d:3d:94:c3:fb:4a:c7:49:9d:8e:2c:34:
         f6:d4:61:8a:cb:57:55:32:c6:ec:bb:e5:5d:26:6c:30:c4:5c:
         a3:3d:64:21:e5:9f:a1:e7:e3:1f:9e:b4:6d:67:13:e9:8a:a7:
         91:17:af:97:23:e8:f9:1d:5e:8a:ea:8c:21:e8:c3:0a:05:e4:
         04:68:27:09:fe:c4:df:72:62:7a:90:ee:96:c8:0c:16:0c:ab:
         31:4f:70:f2:76:1f:fa:b4:f0:ce:fb:c9:e6:f9:3b:ba:61:8a:
         d4:67:11:a4:f4:ba:ec:1c:23:08:74:2d:98:d8:c3:50:70:e3:
         03:86:6f:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0G1Bt2y0bVPK2dzkxILcdEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZWE5M2Q4OGEyMDJkNTFkMzRkMmE5MDM1OTdlNzZiOGYx
N2YwZWEwHhcNMjYwMzE5MTYwMDU3WhcNMjYwMzIwMTYwMDU3WjAzMTEwLwYDVQQD
EyhkNjMyZDdiNzhmYzVlNWE2YTUwZWU4MTcwMjBjMmMxMDVjNTA0YTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCsz2gmKW4/eHpkcmfggIbUjPuWM
uxX0vbxtustw2O+ai3MbgGGQKWDAe95q3ShpR4VtE5ZzNX5sT0DoLIYqMy0iEDMC
wxeVAtF5lbLtZ5WAvhPoK1ygoleM9JlKBusq1KM+jeUGz9l1Wg2XWoq/l1YuE7zE
1oJfBsK0QDlaNFKgXHeWzHsTGMmKduC/EYZ4Cdl2slqPHHl65ocrjaZCTmhLEAdU
O16DnDuRcdYojeNgLxrAWXzD78zCmxHZHjt7EBmS6rXnukouHexVnUKBgkFcYCNE
KZ7C55HfM+clLIhOcrxcF2oq3IEd+nkaT0Xco/T9ZuW7DHgbhGz4IaeR1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNYy17ePxeWmpQ7oFwIMLBBcUEqSMB8GA1UdIwQY
MBaAFGXqk9iKIC1R000qkDWX52uPF/DqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmVxVDJJb2dMVkhUVFNxUU5aZm5hNDhYOE9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC81NGVhYzAtNzFmZC00NmU5LTllMWIt
Y2UxYmJhNjkxYjM3LzEvWmVxVDJJb2dMVkhUVFNxUU5aZm5hNDhYOE9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC81NGVhYzAtNzFmZC00NmU5LTllMWItY2UxYmJhNjkxYjM3
LzEvWmVxVDJJb2dMVkhUVFNxUU5aZm5hNDhYOE9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOPV7PLt4
wPKosiyTDe9kH2wreRURZfpN4TinDRD8aML61ZIIZksAs2wNa6+ddm5PSQvqO0hv
Y/aOK0Dscwjh7+XH/zgfUKwGY96OY7aFOXFoCHcKUrmVOmmuKlxoLtyDMa2lANea
UNM4lLCLw2UawMIP2XKbRQZFXKbTXJoF77H4K7q6nT2Uw/tKx0mdjiw09tRhistX
VTLG7LvlXSZsMMRcoz1kIeWfoefjH560bWcT6YqnkRevlyPo+R1eiuqMIejDCgXk
BGgnCf7E33JiepDulsgMFgyrMU9w8nYf+rTwzvvJ5vk7umGK1GcRpPS67BwjCHQt
mNjDUHDjA4ZvNQ==
-----END CERTIFICATE-----
Generated at Fri Mar 20 01:28:06 2026 by rpki-client