Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft
File:                     Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft (raw, json)
Hash identifier:          OBnXHueqPdVA5ntLUfU1gLQ6ItWFYPY+ZSQ99JVM7JY=
Subject key identifier:   4C:6E:19:DB:B4:04:12:DE:B3:3C:AA:66:B0:8A:7F:03:01:53:54:39
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Certificate issuer:       /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial:       019CF94F51C5F5CC5278CBBD560385A26005
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft
Manifest number:          188C
Signing time:             Tue 17 Mar 2026 01:00:50 +0000
Manifest this update:     Tue 17 Mar 2026 01:00:50 +0000
Manifest next update:     Wed 18 Mar 2026 01:00:50 +0000
Files and hashes:         1: 4TKo4hpIgeOaUC4msoLXj79brZw.roa (hash: nEKkT5nayoB6X5C9mnM1stExdpwEue5SpN4elNaZnJg=)
                          2: 5xaOtvdRRcRbWJ7RO2zXZTBbzHo.roa (hash: jVjnXKJCmaM69ihXNF4Fvp6wlNMh49T6+g/No1R59Xw=)
                          3: HIrm6sRoTksRGtSnmk5VERHaRBI.roa (hash: 5kYVCcz0PvuIcAwPfpXwqKs3H5+iF2EWwV43kAN9Zh8=)
                          4: Lc1GuVjjApGSdMl5cDRvuL9C63E.roa (hash: j2ZLFcBgyK8+6PD7sIFfqmq1q2LME6wfEuotMkEwgLw=)
                          5: TBbb52loGUfoyqY4IjSCSNt13F8.roa (hash: 7gXhXE88Dz/LUX1AsHHfFQZ/lUsqoBgQIbupC+dBqCA=)
                          6: Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl (hash: 8Q/HPJPKq75C1IlEFMMD1FJnDMKVTrRbbbwv9lTBq4Q=)
                          7: bwp5bXEghgHr7EYl0KNAFE7mc20.roa (hash: 7u7Zj5oFaGyCqot4J3MzTBt5vDDbem5Ae4vFNHbppfk=)
                          8: giCv_eoabdDGNQ76ze62UyFFjv8.roa (hash: CGWpYFajJaXhrm0XFaoEyMaeJXprNddmqt1FMrWwQoA=)
                          9: jKcEmRIDilRbegMXDvNfe4imvAk.roa (hash: Z/j4k2QApdwbYRv/hX0sWoy2nITxJs8LZ19RK808A/E=)
                          10: kAV42zy5ItGrvvbv1krId_7HV5A.roa (hash: yhIVNCh19TC+CSc7taPbV70ViFKCn6sP5Y0H3vfQEDc=)
                          11: nntHTPnh88EzY_e3kkkRQsK5w7M.roa (hash: aZV+AItfqgNQSbmNx8IbkbUfKGk65poULNn0lqPwxbM=)
                          12: sZoONX-atX44GreUxrMqc6C9sFQ.roa (hash: OXwYQmgqP66zyYHOv7k9Apd3i8xq7uri5BBqPLyj09A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Mar 2026 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:f9:4f:51:c5:f5:cc:52:78:cb:bd:56:03:85:a2:60:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
        Validity
            Not Before: Mar 17 01:00:50 2026 GMT
            Not After : Mar 18 01:00:50 2026 GMT
        Subject: CN=4c6e19dbb40412deb33caa66b08a7f0301535439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:58:b9:49:9a:35:30:da:90:41:7b:81:7c:c9:
                    5e:55:5e:a1:8a:91:65:5a:46:2c:3a:c2:72:9c:54:
                    c6:47:69:4f:fa:1d:82:eb:ba:cb:e4:57:56:ea:ff:
                    40:97:38:e3:d5:a4:54:79:67:a1:c1:0c:20:7d:f3:
                    8e:8a:8a:3c:92:2e:0a:91:b3:05:17:4d:f1:4d:2c:
                    7b:be:ba:76:c7:cb:41:22:3f:7d:8c:01:67:d1:8c:
                    8a:47:df:5f:24:25:fe:5e:08:1c:30:28:40:1e:65:
                    00:ca:74:e4:43:c5:c9:0d:40:e7:38:80:64:cb:a3:
                    3f:32:ad:3d:0f:b9:35:77:2b:e4:01:a4:17:84:b4:
                    79:03:81:4e:13:7d:a4:72:be:b1:dd:ef:f3:2e:9e:
                    f2:fb:2b:6e:8a:88:db:1b:9c:2a:f3:7d:72:32:b1:
                    78:99:73:80:1e:85:48:5d:e8:fc:9c:30:17:59:0d:
                    aa:fd:a2:7b:06:a0:a5:43:9e:fd:03:2d:84:21:4d:
                    80:c6:2d:4d:6d:eb:5f:aa:e4:8f:a6:f3:74:93:d6:
                    28:75:6f:4f:53:32:c8:e6:5b:44:af:0a:be:d0:2a:
                    5c:fb:9d:28:67:71:d6:2c:fd:e5:22:49:a4:fc:8e:
                    89:b5:a2:ad:69:0e:a2:f1:57:cc:47:f6:b9:c9:0a:
                    d6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:6E:19:DB:B4:04:12:DE:B3:3C:AA:66:B0:8A:7F:03:01:53:54:39
            X509v3 Authority Key Identifier:
                keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:91:6a:39:8f:93:55:6f:4b:44:01:d2:6b:f0:d8:51:54:fd:
         43:4b:03:de:31:6b:b0:19:c0:5d:1e:47:5e:a2:c4:e1:f1:7c:
         6a:2a:1e:d0:79:3e:e8:5c:7a:fe:58:90:e1:e2:4a:b2:f1:33:
         82:e0:2a:dc:b6:ef:9f:13:0d:69:df:ce:c3:86:37:70:ec:2a:
         fa:6d:69:e3:c0:6b:fa:e4:a2:e8:24:bd:fa:4c:d2:b9:df:b8:
         09:37:3e:5b:ee:fa:a9:31:07:99:08:fd:fe:32:76:09:1b:62:
         94:06:73:95:4f:59:54:47:08:2d:92:99:36:1c:f0:96:17:cc:
         48:5a:b7:36:d1:70:08:50:f1:3b:ad:03:30:4c:6a:2d:7a:ec:
         50:8d:0c:d4:65:c9:7d:6e:1c:b5:9f:50:57:8c:dc:91:82:a2:
         c6:34:7a:9d:80:34:2a:72:71:e6:94:80:49:f6:6e:b4:fd:30:
         e5:66:45:db:d5:fe:c7:56:1d:38:3a:68:65:3a:57:69:18:cc:
         62:84:1d:fc:8d:8a:0c:39:9b:1e:67:37:cd:ac:47:c0:65:e7:
         49:a3:77:0f:4f:72:d0:b3:41:36:9a:2e:d2:0c:2e:98:fd:fb:
         30:86:e5:a0:8c:27:34:57:51:57:76:21:40:0a:ec:34:8e:de:
         4e:0a:8f:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZz5T1HF9cxSeMu9VgOFomAFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZWUwZDdlNzMwODRhNDJlNGM3ZjcxMThmMjM4M2ZjZmYz
NjliYTQwHhcNMjYwMzE3MDEwMDUwWhcNMjYwMzE4MDEwMDUwWjAzMTEwLwYDVQQD
Eyg0YzZlMTlkYmI0MDQxMmRlYjMzY2FhNjZiMDhhN2YwMzAxNTM1NDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVi5SZo1MNqQQXuBfMleVV6hipFl
WkYsOsJynFTGR2lP+h2C67rL5FdW6v9Alzjj1aRUeWehwQwgffOOioo8ki4KkbMF
F03xTSx7vrp2x8tBIj99jAFn0YyKR99fJCX+XggcMChAHmUAynTkQ8XJDUDnOIBk
y6M/Mq09D7k1dyvkAaQXhLR5A4FOE32kcr6x3e/zLp7y+ytuiojbG5wq831yMrF4
mXOAHoVIXej8nDAXWQ2q/aJ7BqClQ579Ay2EIU2Axi1NbetfquSPpvN0k9YodW9P
UzLI5ltErwq+0Cpc+50oZ3HWLP3lIkmk/I6JtaKtaQ6i8VfMR/a5yQrWuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFExuGdu0BBLeszyqZrCKfwMBU1Q5MB8GA1UdIwQY
MBaAFF7uDX5zCEpC5Mf3EY8jg/z/NpukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgt
ZGRjMjY2NTY0NmNjLzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgtZGRjMjY2NTY0NmNj
LzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkpFqOY+T
VW9LRAHSa/DYUVT9Q0sD3jFrsBnAXR5HXqLE4fF8aioe0Hk+6Fx6/liQ4eJKsvEz
guAq3LbvnxMNad/Ow4Y3cOwq+m1p48Br+uSi6CS9+kzSud+4CTc+W+76qTEHmQj9
/jJ2CRtilAZzlU9ZVEcILZKZNhzwlhfMSFq3NtFwCFDxO60DMExqLXrsUI0M1GXJ
fW4ctZ9QV4zckYKixjR6nYA0KnJx5pSASfZutP0w5WZF29X+x1YdODpoZTpXaRjM
YoQd/I2KDDmbHmc3zaxHwGXnSaN3D09y0LNBNpou0gwumP37MIbloIwnNFdRV3Yh
QArsNI7eTgqPFg==
-----END CERTIFICATE-----
Generated at Tue Mar 17 06:04:56 2026 by rpki-client