Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft
File:                     rfRJdaXb2_gjtKCmt-65mxSENn4.mft (raw, json)
Hash identifier:          im3wt6cSANCHsyybkHa8XHo6uf6GGAx3qglpg47cqVI=
Subject key identifier:   54:88:4E:56:26:58:B9:AE:6C:77:16:99:5A:F8:CB:B8:5A:61:C4:9F
Authority key identifier: AD:F4:49:75:A5:DB:DB:F8:23:B4:A0:A6:B7:EE:B9:9B:14:84:36:7E
Certificate issuer:       /CN=adf44975a5dbdbf823b4a0a6b7eeb99b1484367e
Certificate serial:       019CE523F62799AB43D5EA6FCCC4AE003EA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft
Manifest number:          07F8
Signing time:             Fri 13 Mar 2026 03:01:05 +0000
Manifest this update:     Fri 13 Mar 2026 03:01:05 +0000
Manifest next update:     Sat 14 Mar 2026 03:01:05 +0000
Files and hashes:         1: DhXIhTNHBAE7NvkalrnD2mWPOgc.roa (hash: XkSLod7NkjdHpR6f/sX0hfuPnykt4HOPZbPdtRM87jE=)
                          2: rfRJdaXb2_gjtKCmt-65mxSENn4.crl (hash: LjggITZ3wF3ZjshEAu7+swxbx0vXA2/9lodcFRMAcJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:23:f6:27:99:ab:43:d5:ea:6f:cc:c4:ae:00:3e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adf44975a5dbdbf823b4a0a6b7eeb99b1484367e
        Validity
            Not Before: Mar 13 03:01:05 2026 GMT
            Not After : Mar 14 03:01:05 2026 GMT
        Subject: CN=54884e562658b9ae6c7716995af8cbb85a61c49f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:cd:99:05:c8:30:7c:27:84:4a:93:bd:20:1c:
                    b3:c4:b5:7e:be:df:6f:64:b4:54:72:41:4d:64:ed:
                    48:4f:b3:48:22:87:8a:b3:8f:a0:ba:1c:59:97:12:
                    6a:3e:54:23:a2:cc:36:65:5c:d5:bb:a4:d0:85:14:
                    bd:e2:71:15:3a:ae:28:96:f0:25:2b:b4:7c:21:e8:
                    1a:8b:88:79:43:f5:25:57:ff:82:c4:ed:ae:d2:b0:
                    c0:3d:f5:6e:48:37:1a:8f:e5:f3:0c:f1:d5:f7:18:
                    84:d7:c7:ba:71:2e:a3:b9:aa:a3:56:9a:ec:f2:9e:
                    27:f2:58:08:4c:5e:8b:1e:28:08:30:53:c2:2b:18:
                    c5:31:a7:0d:3d:02:c6:2d:9f:a7:59:30:fa:ba:bc:
                    77:26:bf:8f:38:1a:6f:02:a4:17:e4:bd:a4:c3:40:
                    bf:15:33:7b:57:00:97:cd:e0:f1:96:28:d2:87:6f:
                    e3:46:2d:3a:31:03:27:bc:cc:83:9c:0b:7e:2a:43:
                    f9:9c:63:94:d6:90:3c:79:fa:fc:49:6e:27:18:15:
                    ed:fd:0c:63:48:f6:b7:56:35:e2:e7:c8:d1:e4:73:
                    b9:bd:3b:c1:d5:e8:02:e3:4d:0a:eb:0f:4e:77:cd:
                    67:b6:60:b5:e2:dd:5d:b9:c9:1d:77:f9:c9:6b:11:
                    ea:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:88:4E:56:26:58:B9:AE:6C:77:16:99:5A:F8:CB:B8:5A:61:C4:9F
            X509v3 Authority Key Identifier:
                keyid:AD:F4:49:75:A5:DB:DB:F8:23:B4:A0:A6:B7:EE:B9:9B:14:84:36:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:bf:b4:f5:9a:33:f3:42:81:de:db:a9:d7:36:d7:a7:8b:f5:
         dd:47:9b:ce:c6:4e:b9:59:7f:59:ec:86:5b:99:c2:4e:82:a5:
         ae:64:59:5e:0e:af:e5:e1:93:c9:8b:09:c1:d8:39:cc:f1:6c:
         f5:74:ec:9c:fd:a6:ca:89:d2:53:b9:87:3f:a2:09:f9:9b:f8:
         f9:7a:9b:48:cd:43:ca:a8:4a:82:92:52:09:e1:cb:22:96:5c:
         66:a1:a7:1c:5d:4f:c5:0e:e9:a7:06:e8:13:18:7f:5f:73:b7:
         93:64:4c:17:a2:5d:c8:b4:85:a4:15:7b:a3:d7:bc:5b:cb:9b:
         67:83:db:cb:6a:05:2f:eb:7c:e9:5d:51:3b:08:17:6f:45:d6:
         ef:62:85:3c:dc:03:62:53:28:03:d5:55:a1:1f:29:e9:b0:78:
         89:52:dc:7d:03:b7:2d:25:ae:2d:a3:c9:d1:ba:7c:f5:b5:ae:
         17:47:b2:33:f7:72:9d:5e:a6:bc:e8:81:6d:ff:f0:c6:96:eb:
         b7:f8:1f:78:a1:1a:6f:0f:90:29:a0:bd:c6:2c:be:01:7c:44:
         72:13:a8:c1:07:80:0c:70:5d:5b:b9:87:fa:41:92:86:be:6b:
         3c:4b:69:ca:1e:85:e9:ea:0a:74:c3:56:da:06:6b:a1:fc:99:
         65:8d:55:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzlI/YnmatD1epvzMSuAD6gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZjQ0OTc1YTVkYmRiZjgyM2I0YTBhNmI3ZWViOTliMTQ4
NDM2N2UwHhcNMjYwMzEzMDMwMTA1WhcNMjYwMzE0MDMwMTA1WjAzMTEwLwYDVQQD
Eyg1NDg4NGU1NjI2NThiOWFlNmM3NzE2OTk1YWY4Y2JiODVhNjFjNDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlc2ZBcgwfCeESpO9IByzxLV+vt9v
ZLRUckFNZO1IT7NIIoeKs4+guhxZlxJqPlQjosw2ZVzVu6TQhRS94nEVOq4olvAl
K7R8Iegai4h5Q/UlV/+CxO2u0rDAPfVuSDcaj+XzDPHV9xiE18e6cS6juaqjVprs
8p4n8lgITF6LHigIMFPCKxjFMacNPQLGLZ+nWTD6urx3Jr+POBpvAqQX5L2kw0C/
FTN7VwCXzeDxlijSh2/jRi06MQMnvMyDnAt+KkP5nGOU1pA8efr8SW4nGBXt/Qxj
SPa3VjXi58jR5HO5vTvB1egC400K6w9Od81ntmC14t1duckdd/nJaxHqbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFSITlYmWLmubHcWmVr4y7haYcSfMB8GA1UdIwQY
MBaAFK30SXWl29v4I7SgprfuuZsUhDZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmZSSmRhWGIyX2dqdEtDbXQtNjVteFNFTm40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9jZWUxNzMtNmMxMi00M2NiLThiMDkt
YmJiMGM4MDI4ZTJiLzEvcmZSSmRhWGIyX2dqdEtDbXQtNjVteFNFTm40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9jZWUxNzMtNmMxMi00M2NiLThiMDktYmJiMGM4MDI4ZTJi
LzEvcmZSSmRhWGIyX2dqdEtDbXQtNjVteFNFTm40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0L+09Zoz
80KB3tup1zbXp4v13UebzsZOuVl/WeyGW5nCToKlrmRZXg6v5eGTyYsJwdg5zPFs
9XTsnP2myonSU7mHP6IJ+Zv4+XqbSM1DyqhKgpJSCeHLIpZcZqGnHF1PxQ7ppwbo
Exh/X3O3k2RMF6JdyLSFpBV7o9e8W8ubZ4Pby2oFL+t86V1ROwgXb0XW72KFPNwD
YlMoA9VVoR8p6bB4iVLcfQO3LSWuLaPJ0bp89bWuF0eyM/dynV6mvOiBbf/wxpbr
t/gfeKEabw+QKaC9xiy+AXxEchOowQeADHBdW7mH+kGShr5rPEtpyh6F6eoKdMNW
2gZrofyZZY1V6A==
-----END CERTIFICATE-----
Generated at Fri Mar 13 07:09:07 2026 by rpki-client