Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
File:                     M-oI76mz94ye-dt2etwh3WGDTg8.mft (raw, json)
Hash identifier:          hDCWrrB/SIb9RhKWci2Q/YDiWuVOL+Alj4dQiuiQdPw=
Subject key identifier:   4A:BF:45:36:41:2F:28:F3:90:01:5E:0D:75:D6:A8:28:BB:CE:9D:98
Authority key identifier: 33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F
Certificate issuer:       /CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f
Certificate serial:       019CDAA02C922F293EE3E4FF312447851384
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
Manifest number:          1861
Signing time:             Wed 11 Mar 2026 02:00:56 +0000
Manifest this update:     Wed 11 Mar 2026 02:00:56 +0000
Manifest next update:     Thu 12 Mar 2026 02:00:56 +0000
Files and hashes:         1: M-oI76mz94ye-dt2etwh3WGDTg8.crl (hash: Ogg+2WSp7B/97xKS71zW2h3OouwtVioNsun3RCc4w3Y=)
                          2: S2Rr6_hn2BX5-GlRfv2PnCiP4xk.roa (hash: 7r472AWf04Pi1AuDVC711AyL3xDv3j2X7wUK1jCkLQk=)
                          3: fFXDtgvQwtuo26S2a1Fj55vsTB8.asa (hash: EyxWJ7SdSqpwJL1gtM1HT9SdtAnugRTp0AwNzm8Whcw=)
                          4: kPXOPfjYRrsOHKmt2uydskWrmx8.asa (hash: LJNoYRHWRV4CsqJStGIYTWQsD6lLtFIRWRFBMsiQTN8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:da:a0:2c:92:2f:29:3e:e3:e4:ff:31:24:47:85:13:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f
        Validity
            Not Before: Mar 11 02:00:56 2026 GMT
            Not After : Mar 12 02:00:56 2026 GMT
        Subject: CN=4abf4536412f28f390015e0d75d6a828bbce9d98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f8:80:88:07:13:fc:a5:c5:8e:75:18:69:c2:
                    f0:88:eb:8f:ba:0a:10:08:57:9d:cc:87:97:c1:60:
                    2a:69:16:ca:a0:bb:8f:ea:16:d0:e8:1b:cf:74:63:
                    3f:ab:96:40:30:da:f0:b9:14:92:12:74:26:5d:9e:
                    aa:e3:1d:d3:ae:8f:d2:10:85:64:9f:b1:6b:3e:66:
                    c8:70:d6:c7:22:15:a2:dc:6b:2c:06:ad:9d:fb:71:
                    88:6c:20:15:a4:54:71:cb:51:00:39:07:67:cb:82:
                    0a:d1:ec:26:80:0e:a9:28:8b:46:4e:4c:91:00:5c:
                    8f:9f:d4:76:a0:c5:cc:e6:8d:27:53:32:a6:d8:77:
                    86:a3:bd:75:28:76:25:f6:3c:ed:d0:25:c2:65:da:
                    51:33:96:b6:48:74:0e:54:ad:dd:dd:8d:7c:be:0e:
                    dc:bb:70:58:6f:38:f3:ca:bb:0b:8e:ae:c3:ad:ba:
                    c1:49:fa:4e:e1:60:4f:08:9f:c4:b4:ab:b2:6c:58:
                    c4:b5:91:49:1c:fe:84:ef:36:6f:74:11:ec:04:09:
                    3c:12:9c:d4:c2:35:a9:0a:63:52:7a:66:95:62:8c:
                    7e:15:0c:a6:ef:cc:e2:fa:f0:4a:d1:18:68:51:b4:
                    6d:d1:1a:a7:91:f7:d1:17:a4:8e:55:9d:29:b0:60:
                    37:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:BF:45:36:41:2F:28:F3:90:01:5E:0D:75:D6:A8:28:BB:CE:9D:98
            X509v3 Authority Key Identifier:
                keyid:33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:9b:8e:09:07:94:0b:31:4c:cc:2b:2d:a2:0e:41:6a:fd:52:
         16:14:47:83:ec:a8:3c:d9:7f:7a:6a:99:0a:8f:5e:b3:c4:cf:
         71:1e:9e:f1:15:bb:98:15:8a:af:47:fb:e7:ba:47:ba:c7:6f:
         cc:c8:b3:18:73:89:cf:e6:db:5e:8e:73:08:5e:d9:ee:8d:ed:
         35:64:88:3c:98:08:66:a4:23:69:7e:07:5c:3b:b1:33:46:0b:
         d6:5c:b1:57:b4:a0:cf:db:79:40:73:93:42:89:cc:fe:07:98:
         5d:b2:8a:26:e2:31:ac:44:8b:d4:2e:71:aa:80:49:1e:cd:6c:
         55:a7:15:eb:ec:ff:38:74:9d:3a:69:b9:5d:ab:90:28:96:d7:
         90:6c:e4:52:74:78:d1:58:78:bf:51:a8:6a:a7:10:b1:4a:ab:
         f3:ba:4c:b1:c0:55:80:da:ea:37:15:d6:26:3c:04:16:23:6f:
         db:cd:f0:3c:b7:10:29:f8:d8:2f:73:83:f1:f4:a0:d6:3a:31:
         5b:78:03:98:a7:0e:b6:a4:d3:94:b2:79:0f:f9:b7:ce:d5:39:
         43:02:32:4c:96:da:b4:b7:9d:bf:12:18:31:68:18:a4:7d:2d:
         ad:95:3e:28:79:51:2b:c1:fb:04:f2:af:ad:fb:39:d6:be:81:
         e4:e2:80:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzaoCySLyk+4+T/MSRHhROEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzZWEwOGVmYTliM2Y3OGM5ZWY5ZGI3NjdhZGMyMWRkNjE4
MzRlMGYwHhcNMjYwMzExMDIwMDU2WhcNMjYwMzEyMDIwMDU2WjAzMTEwLwYDVQQD
Eyg0YWJmNDUzNjQxMmYyOGYzOTAwMTVlMGQ3NWQ2YTgyOGJiY2U5ZDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjviAiAcT/KXFjnUYacLwiOuPugoQ
CFedzIeXwWAqaRbKoLuP6hbQ6BvPdGM/q5ZAMNrwuRSSEnQmXZ6q4x3Tro/SEIVk
n7FrPmbIcNbHIhWi3GssBq2d+3GIbCAVpFRxy1EAOQdny4IK0ewmgA6pKItGTkyR
AFyPn9R2oMXM5o0nUzKm2HeGo711KHYl9jzt0CXCZdpRM5a2SHQOVK3d3Y18vg7c
u3BYbzjzyrsLjq7DrbrBSfpO4WBPCJ/EtKuybFjEtZFJHP6E7zZvdBHsBAk8EpzU
wjWpCmNSemaVYox+FQym78zi+vBK0RhoUbRt0RqnkffRF6SOVZ0psGA3DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEq/RTZBLyjzkAFeDXXWqCi7zp2YMB8GA1UdIwQY
MBaAFDPqCO+ps/eMnvnbdnrcId1hg04PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTS1vSTc2bXo5NHllLWR0MmV0d2gzV0dEVGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi82ODg0MjUtMTRjYi00ZmQ2LThmMjct
ZGVjY2ZhM2VhNjM1LzEvTS1vSTc2bXo5NHllLWR0MmV0d2gzV0dEVGc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi82ODg0MjUtMTRjYi00ZmQ2LThmMjctZGVjY2ZhM2VhNjM1
LzEvTS1vSTc2bXo5NHllLWR0MmV0d2gzV0dEVGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAspuOCQeU
CzFMzCstog5Bav1SFhRHg+yoPNl/emqZCo9es8TPcR6e8RW7mBWKr0f757pHusdv
zMizGHOJz+bbXo5zCF7Z7o3tNWSIPJgIZqQjaX4HXDuxM0YL1lyxV7Sgz9t5QHOT
QonM/geYXbKKJuIxrESL1C5xqoBJHs1sVacV6+z/OHSdOmm5XauQKJbXkGzkUnR4
0Vh4v1GoaqcQsUqr87pMscBVgNrqNxXWJjwEFiNv283wPLcQKfjYL3OD8fSg1jox
W3gDmKcOtqTTlLJ5D/m3ztU5QwIyTJbatLedvxIYMWgYpH0trZU+KHlRK8H7BPKv
rfs51r6B5OKAXg==
-----END CERTIFICATE-----
Generated at Wed Mar 11 08:04:08 2026 by rpki-client