Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft
File:                     d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft (raw, json)
Hash identifier:          4VJBZhV23y/7HXYlpVy9V96ws9FbniRpYIk75rNgaCY=
Subject key identifier:   E5:08:5C:A2:DF:34:92:12:CB:43:D4:45:9A:21:7A:76:E9:33:AC:4B
Authority key identifier: 77:B8:CF:45:4B:09:62:D1:6A:48:55:80:8F:D3:AB:C1:58:52:BB:D8
Certificate issuer:       /CN=77b8cf454b0962d16a4855808fd3abc15852bbd8
Certificate serial:       019CE66D0CF878C7DB6990ADBC4EC963932F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft
Manifest number:          1872
Signing time:             Fri 13 Mar 2026 09:00:32 +0000
Manifest this update:     Fri 13 Mar 2026 09:00:32 +0000
Manifest next update:     Sat 14 Mar 2026 09:00:32 +0000
Files and hashes:         1: 0EYCl_u7AU56YlSvHpYQis-MWnk.roa (hash: lcxZZ3W8GXhqGxMNgdkpvNjJpkamu9CsXtsLtPwfuzQ=)
                          2: d7jPRUsJYtFqSFWAj9OrwVhSu9g.crl (hash: V97M+dWN7dSdB8b3qU4xGuMw7Nq6dbbBictnX1K7W9E=)
                          3: gApx7_2-IVeTOgv2vlenRdRxu4A.roa (hash: c6v6uoIsvWo8tgRVkkD7YA4iGmNGOGbbt0sNKC1bk1c=)
                          4: pp7zPOmyknFg8d0Gr5g-I2wOEDQ.roa (hash: 2LjSnEN+hHc9XuvzHuSzawxoX9WgA8pySl8rAgAIPKk=)
                          5: tLsw2QWW_xQ7Cz00zASgxGHLsoU.roa (hash: vD9kNf/vheI2GM5aVVh5mwV/7+iU7IQ4nb0hyznixXs=)
                          6: zvW2BXG_KR2tH5wPFjzByZu5Wic.roa (hash: aJKDQB0eC1MIkoZBUkIu5PMs0EeE5CsftG39rD94VMI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e6:6d:0c:f8:78:c7:db:69:90:ad:bc:4e:c9:63:93:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77b8cf454b0962d16a4855808fd3abc15852bbd8
        Validity
            Not Before: Mar 13 09:00:32 2026 GMT
            Not After : Mar 14 09:00:32 2026 GMT
        Subject: CN=e5085ca2df349212cb43d4459a217a76e933ac4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:22:28:93:27:20:65:31:5c:98:3b:da:f2:49:
                    f5:65:4e:24:20:e6:f5:0d:74:3a:1a:99:67:d4:33:
                    40:fd:5d:d8:ed:1a:ae:a9:a7:40:7b:b8:66:c4:eb:
                    c0:c6:8c:63:2d:f8:e4:66:2a:05:e6:97:98:96:04:
                    6d:fc:31:72:ab:d9:f1:a2:bf:47:49:82:05:4c:7a:
                    f3:28:2c:e6:45:2d:7f:da:94:96:75:44:f0:7f:78:
                    f2:7c:cb:80:84:1c:13:53:52:87:fb:a1:8e:e8:bb:
                    b9:c3:bb:e3:ac:4b:42:53:df:d0:30:05:84:af:1c:
                    d8:bf:db:82:87:4f:ae:bc:be:97:0d:b3:2a:6a:c1:
                    67:77:43:38:f2:34:ae:94:bb:69:41:73:f5:02:a8:
                    30:fe:19:18:1e:40:89:06:ce:8d:4f:22:13:5c:f5:
                    22:32:5d:f1:60:ec:a6:f5:97:f3:db:25:6b:7f:03:
                    85:de:69:78:64:48:43:62:71:ea:8d:6f:a1:cf:88:
                    21:36:e2:2a:ff:60:63:23:6f:33:97:0e:96:82:59:
                    6c:7c:2e:11:27:01:d6:0b:47:9f:44:38:21:c5:b0:
                    3e:0e:0d:af:47:e3:86:97:b0:a4:57:ee:0e:d7:5f:
                    6a:0c:8e:82:f5:8f:09:98:c2:3a:b5:27:f9:2e:12:
                    4f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:08:5C:A2:DF:34:92:12:CB:43:D4:45:9A:21:7A:76:E9:33:AC:4B
            X509v3 Authority Key Identifier:
                keyid:77:B8:CF:45:4B:09:62:D1:6A:48:55:80:8F:D3:AB:C1:58:52:BB:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:47:f4:5b:df:98:65:a9:4d:5b:d5:9b:c5:fc:36:4a:75:38:
         b3:f5:ec:7a:d0:49:b1:10:44:7c:8c:38:bf:2e:63:0c:a4:56:
         3f:71:30:d2:e5:3c:ec:b7:2e:95:8f:c9:23:2b:93:47:58:10:
         f1:e6:a5:b0:8c:d4:ef:b3:ea:65:b0:e5:1c:8a:5e:27:95:48:
         00:42:68:13:fc:7e:ee:65:c3:e3:3a:52:da:6c:8f:99:d6:48:
         7d:f9:d3:17:4c:4b:a8:2b:ab:a5:ee:07:a4:42:5b:19:f8:b6:
         86:b7:9e:e2:0a:8c:17:93:79:6c:1f:f9:81:d3:ae:a6:6f:50:
         af:4e:8e:64:59:40:eb:d0:a0:aa:dc:a9:af:11:7c:61:a2:4b:
         a1:d6:24:2f:94:8d:30:61:fd:bd:47:6d:68:ab:88:42:80:ca:
         a8:fa:c6:fd:98:8b:17:79:41:6c:e5:7d:1a:cb:91:10:4a:34:
         12:be:d8:21:74:b8:95:e3:cc:1f:f0:5e:61:2d:96:54:08:b1:
         48:f3:69:d3:c8:aa:51:ce:bc:81:2e:a7:14:c0:18:79:4c:ee:
         88:0e:7c:4a:db:ad:13:00:cd:78:10:a8:4d:b5:db:fa:bd:0e:
         60:38:07:e5:e2:4c:3b:d3:67:71:c7:a4:2d:77:e7:36:6b:a0:
         e2:7a:41:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzmbQz4eMfbaZCtvE7JY5MvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YjhjZjQ1NGIwOTYyZDE2YTQ4NTU4MDhmZDNhYmMxNTg1
MmJiZDgwHhcNMjYwMzEzMDkwMDMyWhcNMjYwMzE0MDkwMDMyWjAzMTEwLwYDVQQD
EyhlNTA4NWNhMmRmMzQ5MjEyY2I0M2Q0NDU5YTIxN2E3NmU5MzNhYzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCIokycgZTFcmDva8kn1ZU4kIOb1
DXQ6Gpln1DNA/V3Y7RquqadAe7hmxOvAxoxjLfjkZioF5peYlgRt/DFyq9nxor9H
SYIFTHrzKCzmRS1/2pSWdUTwf3jyfMuAhBwTU1KH+6GO6Lu5w7vjrEtCU9/QMAWE
rxzYv9uCh0+uvL6XDbMqasFnd0M48jSulLtpQXP1Aqgw/hkYHkCJBs6NTyITXPUi
Ml3xYOym9Zfz2yVrfwOF3ml4ZEhDYnHqjW+hz4ghNuIq/2BjI28zlw6WgllsfC4R
JwHWC0efRDghxbA+Dg2vR+OGl7CkV+4O119qDI6C9Y8JmMI6tSf5LhJP0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUIXKLfNJISy0PURZohenbpM6xLMB8GA1UdIwQY
MBaAFHe4z0VLCWLRakhVgI/Tq8FYUrvYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDdqUFJVc0pZdEZxU0ZXQWo5T3J3VmhTdTlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9jMTcxY2EtNGIxYi00MTg3LWJhNDYt
YTRmYzllMjQ1OGVjLzEvZDdqUFJVc0pZdEZxU0ZXQWo5T3J3VmhTdTlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9jMTcxY2EtNGIxYi00MTg3LWJhNDYtYTRmYzllMjQ1OGVj
LzEvZDdqUFJVc0pZdEZxU0ZXQWo5T3J3VmhTdTlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANEf0W9+Y
ZalNW9Wbxfw2SnU4s/XsetBJsRBEfIw4vy5jDKRWP3Ew0uU87LculY/JIyuTR1gQ
8ealsIzU77PqZbDlHIpeJ5VIAEJoE/x+7mXD4zpS2myPmdZIffnTF0xLqCurpe4H
pEJbGfi2hree4gqMF5N5bB/5gdOupm9Qr06OZFlA69CgqtyprxF8YaJLodYkL5SN
MGH9vUdtaKuIQoDKqPrG/ZiLF3lBbOV9GsuREEo0Er7YIXS4lePMH/BeYS2WVAix
SPNp08iqUc68gS6nFMAYeUzuiA58StutEwDNeBCoTbXb+r0OYDgH5eJMO9Nnccek
LXfnNmug4npBQA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 11:57:14 2026 by rpki-client