Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
File:                     DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft (raw, json)
Hash identifier:          amxU7oJ7hRYApf9qpCWDsEXVEYPvVDzOG5WtCKmL7rg=
Subject key identifier:   B1:04:06:0B:BF:C0:DC:50:2E:98:63:6A:3E:2D:BC:ED:6E:FD:AF:38
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Certificate issuer:       /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial:       01A066498586836E486B9CD7EB90DDF4767F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
Manifest number:          1332
Signing time:             Thu 03 Sep 2026 08:01:29 +0000
Manifest this update:     Thu 03 Sep 2026 08:01:29 +0000
Manifest next update:     Fri 04 Sep 2026 08:01:29 +0000
Files and hashes:         1: 5IBA90e0btpD-oUMxNJyjPTNMRo.roa (hash: CzjoqGPd0ng+inzIaw4MD6uqCBQT54w7Tg/W+lOitOc=)
                          2: 6cANbFm-EJrK8-PMA7NyEk83u6k.roa (hash: jYdd/eqOCPnLV/a9ltPhyg+PE8hVFdwnP1KBbgFBkI8=)
                          3: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl (hash: 6myBJleXL7LBUjrSjCeDhN6/jQklT6lgv7+Tb4fwk44=)
                          4: EuqppgZcuvBd77APj6BJDc66El0.roa (hash: Pou/5mkV9ShqmcqFaVCa6/FpNsjCyEKxq/5LPM8oRyE=)
                          5: F5f-3aC06oFfat6kysD7KzPEy7s.roa (hash: uf9RFkZjIVlqZ17DS35sOy7dY67XFR7qpT1cpxsxJnM=)
                          6: GkG94oLLyaWn0LlA7PecrXl0W9M.roa (hash: Vz1DhIY+rwizM8CF8BSBpl44BncSNC0p93dQaqvmHIk=)
                          7: HAJo40Wzweef0-HmgppS7_KBVno.roa (hash: Md/aD3NC3DChGRJq6Yp2XnMr5nwvrS2wV2tIMtwOW50=)
                          8: KLI9lQwUC5VTV4Cut0plGC56kr4.roa (hash: rUAMk0OUXXf0cF+q5isqU/kNi2S0D4fL5AOOV6b9LlQ=)
                          9: KTMyv7vLJL4RhzKJMxYv2Q04XU0.roa (hash: qlz3neHso26dPUfoq0gD9odJX4heiGA404bEQ8650r4=)
                          10: MKJ3r_4TKeocUaOcCqRhoBecjmM.roa (hash: E+tQHI9Z8HzAp+AQr7VOtuEt3TaI3sVfC37jnLib12o=)
                          11: NpomuMBzJVKQYcl-LphdVCYzfR0.roa (hash: ItHWcgevCY69vj6UIFo76di+HZvWbt6e/RbdJHhjvCE=)
                          12: OX8T0Loeee2SJyDfY3tEnifOFiY.roa (hash: WUtUuVCFbswJZDfkLKymBevKbkG13uZEO19XKdd+n8M=)
                          13: T9U3jQACGl_voXbKIQx_h4mNSxU.roa (hash: anyXF3uiUdKKNrL5Tk4vNV4jqAnaMh1YXU1V/82OpNU=)
                          14: W8YNXsX9yPDFPY_juFzIPJCKU_I.roa (hash: +blIAp8nmqZRBhHxpcV2UfhK4Uk56S7wQ9UO0lHBgcA=)
                          15: YGyJEvwnW0WQ_NWAEj7vFCxCxWA.roa (hash: 2C2bEc32YpX5NyOiU/D+IWaEQi+cpjyPUf9gHuyinOg=)
                          16: ej_ULItssuJKfpG-aO3TpOCfAcM.roa (hash: MuVT+NmseLKCBtNzkD2hqoLRxqqBtVBwn/7W4rZMBJE=)
                          17: h6iTojqaXm32u7BLTwm0z2ziaCY.roa (hash: LjbU3TQQa1ApTEOwMzVmaLwPfpE+NGA0goG5pwMkhxw=)
                          18: ivG7FB0OuHZtaPx3ueruCQJm-VI.roa (hash: 5+fSISaJZ6MVlJNLKKnuDnQodZYydtzTRLt+3siDb90=)
                          19: kEEHiJ2_DoC2VfYdw5LhFhqepV0.roa (hash: wMCNRdrXjQmrhxah3XAz6wjU2Gf/YcDDzzpq9SAnAXc=)
                          20: k_yt6Ew5vZOiqYJGMvVI2kUV5V0.roa (hash: CUNe6MGDt6axlDbgIXUKB8iPiYMZNW/hw7m/AwCnfis=)
                          21: ladaJsKVTuv3YGDi38_Qd9THC0w.roa (hash: ElU3llDhKBNskVBOfdbOzFuE0cAaPwlyq6retebHVjQ=)
                          22: mHQ5lGsBLY58ZqsoI4KyEoGAaCY.roa (hash: qjy47Jf6cTEpCMuTgzO1n5sViPKiS4UbTibv345I4as=)
                          23: qABofJud5u1thFUHFuMgR1s31kI.roa (hash: piC9Su6MbkEuGjwZYHRT2b414PhCD/em2J4HZaBllmw=)
                          24: qG2nNWb8MqqDopUB1tVODEkVl6w.roa (hash: cfGFab+OgFf7ubny/5LdmUqIORuyuUqS67/jyuUGkNM=)
                          25: s-l1K6n-Dq-c-W13L4taLbNrba8.roa (hash: XXcUV02lcrNf1Elz+XrEzMo/1+t5L9EpOYNoooqluDA=)
                          26: t0bWLuL94obKt0o74dC0nCo7fYU.roa (hash: tfVFhgnQItxhSLrWx/IEzAzrrjR+KQ0zeBMzi4U648M=)
                          27: uuHljZPCvASdL1cahmx3sk-UM6k.roa (hash: YZhlBGblOcfxdLBJ41C2ivgjxSeLyB952u1KN3aoLfw=)
                          28: zXzaXXaXaacAbGR2BU_XAEJ7v30.roa (hash: Lqdd4BwuY4RYhpHOODbRGdpLMFlr375rTHvbeXFXxRI=)
                          29: zetNVI_5RmQ_9yMT7BWp_EHTd7k.roa (hash: BSZVF8mXcpYwrxryg8NDVMtvr+dxn8y1JxLoHLq3VvQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Sep 2026 07:42:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:66:49:85:86:83:6e:48:6b:9c:d7:eb:90:dd:f4:76:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
        Validity
            Not Before: Sep  3 08:01:29 2026 GMT
            Not After : Sep  4 08:01:29 2026 GMT
        Subject: CN=b104060bbfc0dc502e98636a3e2dbced6efdaf38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fa:74:35:34:25:a8:42:34:b2:60:f8:af:ab:
                    0e:db:5c:d4:e1:79:de:5c:2a:98:d6:58:4c:3b:a4:
                    62:c2:a1:d8:52:6e:dd:a6:ec:48:95:ae:1f:0c:9f:
                    58:5a:c6:61:57:b8:e0:1d:7e:95:df:33:28:8c:21:
                    d0:f0:52:02:a4:a8:cd:62:67:f2:ce:a1:05:9a:25:
                    9c:a2:94:b5:2f:11:de:23:6e:99:26:39:78:94:49:
                    92:c2:9f:e8:c5:b3:68:48:01:85:c4:7d:04:43:e9:
                    99:a2:8e:3d:d4:74:cc:b0:1d:b1:f7:f8:20:f9:17:
                    69:71:bc:19:a4:15:5c:23:16:41:19:92:d0:09:49:
                    d0:c0:3a:c1:42:af:73:51:1d:fc:d0:84:ff:6e:23:
                    db:4b:0d:f7:9a:01:8d:d9:51:c5:32:a8:ae:f5:f9:
                    bd:33:aa:d2:48:8e:d1:42:26:65:66:d6:33:b2:64:
                    b4:80:b1:73:c2:47:c0:bf:f0:b9:e2:4a:41:d0:90:
                    70:5e:4a:53:19:e0:1d:7d:ca:e5:27:45:be:de:1d:
                    f2:95:86:88:18:8b:dd:73:30:37:9b:b7:91:14:bc:
                    2c:5d:06:d3:78:fd:8d:a2:f9:1d:81:cc:49:05:60:
                    12:5d:bd:f4:e2:ea:8b:55:88:e8:91:6c:b4:52:64:
                    12:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:04:06:0B:BF:C0:DC:50:2E:98:63:6A:3E:2D:BC:ED:6E:FD:AF:38
            X509v3 Authority Key Identifier:
                keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:3a:9d:8a:04:5b:fa:9a:a5:f2:49:ac:d9:0b:4a:b2:0f:64:
         fe:2c:82:3c:d9:b0:00:11:a2:73:75:12:82:09:14:04:dc:db:
         e7:dd:f1:a2:c4:26:04:69:e5:e7:06:0e:81:da:f8:67:ac:14:
         00:5b:94:a4:07:0d:8e:f3:c4:b8:19:e8:e6:54:bb:2b:f1:f5:
         26:2e:d2:fb:13:9b:e3:6a:5e:5e:ef:ed:d9:1e:7e:f7:7e:dc:
         8a:be:d8:bf:64:3a:de:86:fe:e2:c4:83:91:49:4d:5c:15:cd:
         62:df:a4:00:fa:f4:a7:95:f9:1f:95:71:6c:35:7f:3a:29:5b:
         46:32:98:e6:5b:06:76:c7:9d:5c:34:df:ed:57:d3:44:7c:ac:
         68:0b:f0:14:00:66:e3:0f:7e:8d:35:02:39:58:f6:14:ef:83:
         3a:53:38:08:b9:2a:47:eb:cd:02:36:7c:27:bb:f2:6e:5c:0d:
         e3:8a:b2:be:b7:e8:67:1b:8b:fd:73:f8:47:74:08:40:75:93:
         58:90:3a:ae:40:b8:42:94:36:3e:3f:50:d0:3a:91:31:96:1a:
         b5:d9:47:8d:86:ca:7e:6e:13:f5:82:82:83:4c:df:6e:6f:ac:
         64:0a:f2:2e:92:77:16:f9:73:52:bd:52:32:3d:f9:fd:f6:85:
         9f:9c:8e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 09:24:08 2026 by rpki-client