Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.mft
File:                     80YWUeW-JFCXcpdbqYxw7G7jzXs.mft (raw, json)
Hash identifier:          mEySPUzyICY7HXVN8tF20n7cwu0D3cbVC3DdycOg4Ao=
Subject key identifier:   13:7A:A6:92:CE:D9:8F:6C:11:2F:5F:EA:3E:A2:8B:60:77:FD:DF:35
Authority key identifier: F3:46:16:51:E5:BE:24:50:97:72:97:5B:A9:8C:70:EC:6E:E3:CD:7B
Certificate issuer:       /CN=f3461651e5be24509772975ba98c70ec6ee3cd7b
Certificate serial:       019D3752BB290CF2604307FB6A77D05142FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/80YWUeW-JFCXcpdbqYxw7G7jzXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.mft
Manifest number:          02F4
Signing time:             Sun 29 Mar 2026 02:01:01 +0000
Manifest this update:     Sun 29 Mar 2026 02:01:01 +0000
Manifest next update:     Mon 30 Mar 2026 02:01:01 +0000
Files and hashes:         1: 80YWUeW-JFCXcpdbqYxw7G7jzXs.crl (hash: pcHf9ji3CL3fOGeE9Pth561R0UnC5RrCGdYaj1oU1Tg=)
                          2: Qtc_zuFzRUz7J07L37X5qvUUnhs.roa (hash: D6SdWG5JeosyZFAglIkmKFjIaBi039zmz2skeCVDiYg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/80YWUeW-JFCXcpdbqYxw7G7jzXs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 02:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:52:bb:29:0c:f2:60:43:07:fb:6a:77:d0:51:42:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3461651e5be24509772975ba98c70ec6ee3cd7b
        Validity
            Not Before: Mar 29 02:01:01 2026 GMT
            Not After : Mar 30 02:01:01 2026 GMT
        Subject: CN=137aa692ced98f6c112f5fea3ea28b6077fddf35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c2:01:b1:f0:3e:b1:56:81:f3:9e:ea:c7:4e:
                    da:a1:1e:5b:5f:13:68:ec:61:bf:0c:7d:c4:53:be:
                    06:bf:9a:c5:20:41:01:67:c8:88:a2:57:f9:07:76:
                    c4:19:d7:6a:ae:36:bc:8d:46:8d:cc:e9:ba:0f:7b:
                    3c:ad:89:ca:30:f4:de:50:08:63:bc:1f:bb:73:df:
                    5f:04:84:1b:bd:e0:b4:a5:7b:c0:0d:fe:81:9a:49:
                    4c:2a:37:e9:7f:5e:55:85:24:83:c0:6e:1f:6a:69:
                    49:2d:cd:7e:84:fe:8f:db:58:ba:a2:a6:bb:3c:a0:
                    20:15:b3:8d:8e:db:02:4f:67:52:ab:6d:d6:d8:41:
                    85:a5:ea:75:1c:9b:b4:7c:31:76:b9:d1:97:ec:50:
                    ef:79:df:44:ad:ab:17:46:f7:2b:94:14:6b:7d:9b:
                    fc:b4:f7:83:7c:a9:45:84:5d:7f:14:74:3a:5e:9b:
                    da:ad:d9:1f:64:40:09:d1:31:41:c6:73:64:35:6e:
                    7a:da:fb:e6:69:c7:74:bd:53:f3:52:7e:44:8d:77:
                    50:51:22:d4:06:5a:23:7e:52:8c:2a:04:bc:83:ab:
                    e8:fc:c7:b1:fb:89:54:3d:ab:6b:b1:11:de:f3:78:
                    a9:bf:f8:db:cf:1a:f1:a7:3d:fa:85:d1:87:aa:47:
                    03:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:7A:A6:92:CE:D9:8F:6C:11:2F:5F:EA:3E:A2:8B:60:77:FD:DF:35
            X509v3 Authority Key Identifier:
                keyid:F3:46:16:51:E5:BE:24:50:97:72:97:5B:A9:8C:70:EC:6E:E3:CD:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80YWUeW-JFCXcpdbqYxw7G7jzXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:97:78:41:18:bc:af:33:05:d9:5d:b7:31:44:f0:6e:6d:fd:
         0c:51:c7:6c:7a:18:f4:18:5c:1a:bf:55:8c:5a:5d:a7:df:33:
         0c:c1:6f:70:ea:c2:15:b9:c3:0b:fd:d5:3e:9d:81:aa:04:33:
         89:29:6a:dd:50:0c:59:24:b7:46:01:11:d9:29:9a:db:8b:01:
         c8:2a:2d:a0:65:93:71:7c:4c:8e:dd:bd:4a:6b:ce:7c:ca:0e:
         70:23:01:50:b0:71:e1:66:07:29:e1:fd:e0:cd:4c:23:66:a5:
         74:25:2e:40:e8:a7:27:2a:ec:df:19:ae:9b:7c:7e:85:22:5c:
         7b:9a:88:51:db:15:17:9e:12:8d:d4:d8:76:ad:03:bf:b6:77:
         7a:09:9e:17:d3:2b:87:b7:fa:bd:d0:84:f5:c3:ea:cf:4b:53:
         16:76:f0:2d:f6:62:df:4f:b8:67:c3:d2:d1:52:b8:8c:c3:c9:
         6e:c1:1e:3a:e4:9f:d0:2c:2d:46:e8:df:cf:14:5c:e9:59:5e:
         ac:c8:a8:b7:e9:d0:de:6c:1f:72:05:62:8b:77:ec:f8:ae:45:
         eb:21:31:d7:47:97:18:98:b4:b7:a2:ac:79:db:be:2e:42:84:
         08:22:4f:7b:32:8a:06:1f:97:d4:b6:a0:f1:ad:34:f7:8c:0c:
         9b:5c:36:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UrspDPJgQwf7anfQUUL/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNDYxNjUxZTViZTI0NTA5NzcyOTc1YmE5OGM3MGVjNmVl
M2NkN2IwHhcNMjYwMzI5MDIwMTAxWhcNMjYwMzMwMDIwMTAxWjAzMTEwLwYDVQQD
EygxMzdhYTY5MmNlZDk4ZjZjMTEyZjVmZWEzZWEyOGI2MDc3ZmRkZjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscIBsfA+sVaB857qx07aoR5bXxNo
7GG/DH3EU74Gv5rFIEEBZ8iIolf5B3bEGddqrja8jUaNzOm6D3s8rYnKMPTeUAhj
vB+7c99fBIQbveC0pXvADf6BmklMKjfpf15VhSSDwG4famlJLc1+hP6P21i6oqa7
PKAgFbONjtsCT2dSq23W2EGFpep1HJu0fDF2udGX7FDved9ErasXRvcrlBRrfZv8
tPeDfKlFhF1/FHQ6XpvardkfZEAJ0TFBxnNkNW562vvmacd0vVPzUn5EjXdQUSLU
BlojflKMKgS8g6vo/Mex+4lUPatrsRHe83ipv/jbzxrxpz36hdGHqkcDkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBN6ppLO2Y9sES9f6j6ii2B3/d81MB8GA1UdIwQY
MBaAFPNGFlHlviRQl3KXW6mMcOxu4817MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODBZV1VlVy1KRkNYY3BkYnFZeHc3RzdqelhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9kZjIwNmItYmRiYi00ZmUwLTlmN2It
YzBhYzRlOWFmM2NiLzEvODBZV1VlVy1KRkNYY3BkYnFZeHc3RzdqelhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9kZjIwNmItYmRiYi00ZmUwLTlmN2ItYzBhYzRlOWFmM2Ni
LzEvODBZV1VlVy1KRkNYY3BkYnFZeHc3RzdqelhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVJd4QRi8
rzMF2V23MUTwbm39DFHHbHoY9BhcGr9VjFpdp98zDMFvcOrCFbnDC/3VPp2BqgQz
iSlq3VAMWSS3RgER2Sma24sByCotoGWTcXxMjt29SmvOfMoOcCMBULBx4WYHKeH9
4M1MI2aldCUuQOinJyrs3xmum3x+hSJce5qIUdsVF54SjdTYdq0Dv7Z3egmeF9Mr
h7f6vdCE9cPqz0tTFnbwLfZi30+4Z8PS0VK4jMPJbsEeOuSf0CwtRujfzxRc6Vle
rMiot+nQ3mwfcgVii3fs+K5F6yEx10eXGJi0t6Ksedu+LkKECCJPezKKBh+X1Lag
8a0094wMm1w2ng==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:03 2026 by rpki-client