Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
File:                     xE24sJg6z5ejJVFSwupZKtrnc1s.mft (raw, json)
Hash identifier:          PsYX9iP0oPKVqnBbIHTorbNm+R+xUcIRnXwlMPdT6R8=
Subject key identifier:   80:95:50:8B:88:21:6A:61:C9:33:8B:55:76:F3:B7:81:34:14:C7:54
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Certificate issuer:       /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial:       019CE47F08D08C2560431F45592073B3086C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
Manifest number:          1422
Signing time:             Fri 13 Mar 2026 00:00:56 +0000
Manifest this update:     Fri 13 Mar 2026 00:00:56 +0000
Manifest next update:     Sat 14 Mar 2026 00:00:56 +0000
Files and hashes:         1: 1-LSO_JyLG0JIrzuHbqA64Re_gAQ.roa (hash: 5WDg7is6i4G67NPbvdAbr5wSujjhW6eqXhKIZJmd/1M=)
                          2: 18Szc_NOHV7yuL-RPwFFVIdly00.roa (hash: ld/2o13pONoCjqn2WT6haOPdokqq4iF1vU3cu4RZBY4=)
                          3: 6UB2fd80X8NF3hjgXuy_lEnL14k.roa (hash: FwGNu6vnkuFrpQLSRXI1YDdbNMKa0QpgsCze4fDjYDM=)
                          4: 7lXBjbngAvV9gHuyOcicow6UdVo.roa (hash: BQCTu2EQ42JTon6DFlUxY4dueGNRFijDWqRTzuT0vfE=)
                          5: NCpae5NUBzzwFjKHO6HKoQsFaNo.roa (hash: T0hKAilYfTHdTNrgXDqwDch+EpqH3yYGNopfwv8HRVI=)
                          6: NKrF44Cb48ibyskEc0pmLGMwSbQ.roa (hash: /FUxbrj5UG1STIUqFgYzP0jhCRLEmRamnELFeSKbL1M=)
                          7: aJedP80vMINu1NAowpUIlCicd7A.roa (hash: xNb3NKZjro39aj2cJlh+Qm4X9UDfgL/pDQnE2wrTJ84=)
                          8: c0DX6GY3TX9xmWCZpKdJEnw99zA.roa (hash: +8IkCXO7va3zumQ/zB3m5nLEyKPvgB/ye9epdlLzV9o=)
                          9: dlWKJRjnZ2U7WO_1zPdLWle-kk0.roa (hash: ccVK1hbXQ01uxFYfHzxcGCOT5sst0ssJaUPm+OxjkPU=)
                          10: lsFM17k2ZtwL3Bozkjk-itU6fX8.roa (hash: PyQz7GTqlUWm5GnNRZLXoq3Y3tepCY9boCvSS0rIfDI=)
                          11: oSKHmVNGFh3OpJke3WnxdXvCjgc.roa (hash: Jbe/LRuw53xo+FdeFOv1OWeqAR3sX4SCDTXs5bJaUEE=)
                          12: xE24sJg6z5ejJVFSwupZKtrnc1s.crl (hash: byQqs8lsPHqfPniPlAzqrTmwhfIz8GGwesjCMCkGn8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:7f:08:d0:8c:25:60:43:1f:45:59:20:73:b3:08:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
        Validity
            Not Before: Mar 13 00:00:56 2026 GMT
            Not After : Mar 14 00:00:56 2026 GMT
        Subject: CN=8095508b88216a61c9338b5576f3b7813414c754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:67:8c:29:57:48:80:f9:bf:d5:86:6f:e8:a6:
                    c7:6e:19:d2:c4:e8:31:94:11:32:66:39:1a:7f:fd:
                    a8:eb:60:6c:e4:77:34:31:ac:b7:be:0b:a5:7a:0e:
                    e9:30:c4:e8:21:b8:b1:be:f8:a8:e8:d3:c2:6f:46:
                    52:e6:24:4a:5b:07:5a:84:d7:e0:48:1c:6a:0a:17:
                    d4:26:f2:00:ae:69:8b:b4:dd:8c:6a:7c:24:98:d6:
                    f0:18:3e:59:6e:91:2c:43:b6:a1:fc:5f:42:ea:32:
                    eb:ec:a3:bc:77:6a:61:27:b7:c0:d4:02:d1:de:d9:
                    2b:16:c1:d3:c6:b5:c2:2b:07:c1:3b:ff:61:96:31:
                    04:04:d8:fe:f5:e0:83:f0:93:90:28:56:74:37:32:
                    0a:84:4e:05:13:df:30:24:10:93:cf:43:49:6a:bb:
                    2a:18:78:78:e4:8d:5c:1b:c6:ac:99:9a:9e:bb:b9:
                    c9:aa:97:a1:db:25:b2:4a:0f:2e:8f:57:16:af:a3:
                    b4:a9:f9:ae:05:16:6a:23:98:47:2a:fa:50:f4:48:
                    7a:6d:4f:9b:1a:76:78:39:06:ee:67:d5:e0:16:a5:
                    c0:1a:b1:05:c9:28:9f:70:95:6a:98:85:cc:fb:3a:
                    fd:48:9a:08:14:ee:39:d2:0d:3a:d5:9b:be:80:26:
                    ad:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:95:50:8B:88:21:6A:61:C9:33:8B:55:76:F3:B7:81:34:14:C7:54
            X509v3 Authority Key Identifier:
                keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:c5:77:ef:5e:e4:8c:66:87:e0:a3:ff:6b:7d:a4:6c:f8:09:
         d2:e7:ad:ac:66:41:0f:69:d7:7a:b2:dc:33:12:86:1e:2c:e7:
         16:e1:ab:b1:10:d4:32:f0:06:3d:b5:a9:08:b3:3e:2a:3e:05:
         63:d7:83:bf:67:b3:a6:83:99:ec:72:60:8a:15:10:bf:95:e3:
         10:fe:54:96:a9:9c:2f:d9:57:06:81:fc:04:fe:86:98:6c:ce:
         b6:b3:4d:3c:d0:f5:89:9c:99:db:9e:82:d8:dd:62:26:e0:dc:
         c2:0a:9f:88:92:d6:2e:53:22:1a:6c:07:01:c6:7b:59:45:73:
         27:2f:17:1b:7d:6e:53:7c:4e:56:e6:ba:24:d5:af:1c:01:3c:
         44:4c:5d:ba:9d:5c:9a:fe:95:e6:ef:10:1c:e0:24:91:23:60:
         76:2c:c7:17:a3:33:92:dd:56:c3:dd:ad:eb:f4:c6:b6:b3:8c:
         e3:3d:23:14:d8:dc:a0:64:86:4d:91:4f:2a:73:10:00:e5:72:
         18:66:12:5f:07:5d:e5:e3:7f:9c:57:3b:63:28:f3:9a:32:49:
         82:6a:01:dc:86:db:8c:26:c0:0b:10:89:b2:7c:a3:d4:43:27:
         4e:7f:8a:37:94:7e:92:c0:0a:0a:d3:71:b2:61:12:af:00:22:
         bd:68:dd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 03:49:17 2026 by rpki-client