Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
File:                     alg23em52u81qKf3TWMm9rQtp00.mft (raw, json)
Hash identifier:          9HN7S99IRJ9XkmslIZ26ewZSvNpbVfnHTQWv+VeXuEw=
Subject key identifier:   59:8E:D1:37:E4:A6:2A:C6:0E:19:20:2F:4D:0A:8A:B1:0D:37:A9:7C
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Certificate issuer:       /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial:       019CC907FAF9C24B260AD50B2ED6F404E0DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
Manifest number:          0F18
Signing time:             Sat 07 Mar 2026 16:01:09 +0000
Manifest this update:     Sat 07 Mar 2026 16:01:09 +0000
Manifest next update:     Sun 08 Mar 2026 16:01:09 +0000
Files and hashes:         1: 1-1nP27bm3gAzWksm3Aa1woQLmTg.roa (hash: 4vMUg/+4aVf6LxIWRfZOUaawIS1qe+jvPE0nds6yR2Q=)
                          2: 2wOulV0vAbQf8biJXAnQkgGArPI.roa (hash: 7hYlyThHw9PBylpjQHX2//RefihYkxx++H9IszVVhRo=)
                          3: 8tE1XoXALCHY82O8b8qmwszNbGs.roa (hash: Wenx4p8ARt+i0JB3aRNXys0FukN+g6qNblR6qJZ7KAY=)
                          4: M0vUEBMIUgT4jDZek6CAIPYaSIg.roa (hash: PIpybvqNjJxeWjfkr7UEGiD+MMuADppLXWFHDY6S5Vc=)
                          5: MZRQk6tT-Iy_0EmbTY5ZwDElyos.roa (hash: pr7kUc7XXbghgioDyj2+ehsGl4rvR5Ny0ZhIypP6qnE=)
                          6: PRl542vKWzERjZy8INPb-TgkXr4.roa (hash: EnUZ2TcojekWId1tvYvvKcumXfp94C7iBeo+v/ZBk5c=)
                          7: Z0BON6E806_VujIu13j4rp4udFU.roa (hash: Dg0DZ41kSt9T8YvEtYfHhtMj9H1Pn0HsQ9ZBprqVWR8=)
                          8: alg23em52u81qKf3TWMm9rQtp00.crl (hash: at58BAZTQ7mp931YLcOQNUURbDGgcHG2JRsQ5Y+4Tno=)
                          9: cx2hNcUqecSEJqe3n2yH1nbkzcQ.roa (hash: VM9cV3NpEOzoGjoegWLpfoVKjMdeb/qreQ0du+7oLuc=)
                          10: mSzzMA6L5QbhcWeV8GJlOnBN0cM.roa (hash: KFpvmdmXJzfhj/vqjMViv2cspmTTL885sm48c0BNhjc=)
                          11: pcGsYQ6WmjLQ7fW-l50FaHq8fAw.roa (hash: OyCY6h+GWUv+mGKdOjMTfLCqD3xuf3tOl0/vrW+coks=)
                          12: pnFO1a6gizeUc-Mp5yF3aD9GKrY.roa (hash: 12+yB/uNotyYBuazoRPVxuRnI9x9XM3niLtRN4n27c0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 16:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c9:07:fa:f9:c2:4b:26:0a:d5:0b:2e:d6:f4:04:e0:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
        Validity
            Not Before: Mar  7 16:01:09 2026 GMT
            Not After : Mar  8 16:01:09 2026 GMT
        Subject: CN=598ed137e4a62ac60e19202f4d0a8ab10d37a97c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ed:68:9d:e4:ee:bb:ba:18:cc:38:3e:29:73:
                    cd:c1:06:af:c1:00:61:94:4e:0c:29:1c:0f:1d:cf:
                    dd:31:d8:32:e9:75:eb:68:fc:0e:f1:86:12:f4:2f:
                    ae:dd:46:5a:eb:cd:0e:5a:22:f6:c4:e7:4f:ec:37:
                    83:80:78:15:33:75:80:11:bb:46:80:60:b2:9f:27:
                    84:47:5c:8d:dc:25:40:34:58:d5:59:ea:7c:6e:17:
                    a0:84:bd:5e:02:1f:66:60:2a:7a:eb:b1:5c:c9:93:
                    69:f4:7f:d0:3a:e6:43:b0:39:8f:d3:a4:50:81:63:
                    c9:c7:6e:c1:d0:4d:3b:18:30:04:66:59:56:32:d4:
                    c0:57:3a:14:38:e5:3e:7f:78:2d:eb:f2:9d:8e:20:
                    ea:0c:f6:ee:31:d2:25:3f:a0:71:24:a0:05:74:0d:
                    40:9f:21:5e:b2:25:d4:1f:be:d4:ed:bf:57:cd:f5:
                    82:b0:ad:ef:d7:30:60:cc:33:0a:69:fb:40:4b:f2:
                    5c:48:f3:0f:e0:4d:cc:62:ba:59:e1:9a:c8:6d:37:
                    7b:63:80:1b:71:bd:5f:b0:ed:11:fc:61:c5:f3:7a:
                    af:14:58:62:87:9e:2d:36:eb:bd:14:79:51:72:d9:
                    cc:e6:ff:fa:29:0d:05:56:02:85:fd:27:6e:7e:67:
                    a0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8E:D1:37:E4:A6:2A:C6:0E:19:20:2F:4D:0A:8A:B1:0D:37:A9:7C
            X509v3 Authority Key Identifier:
                keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:2e:2a:be:06:b0:7c:e2:e0:c3:b7:da:18:81:5e:f2:de:2f:
         da:77:84:a8:38:76:f4:a4:c2:04:32:34:e1:b7:c0:d2:2b:59:
         b8:86:82:6c:0a:0a:83:e6:aa:cd:93:6b:7a:19:f8:4e:d2:78:
         df:03:ce:14:86:bb:bb:14:99:bf:e1:8d:85:f2:b1:b3:45:40:
         58:aa:41:89:5d:4d:79:33:01:43:9c:33:95:b1:5c:56:b5:f7:
         95:cb:c4:89:b0:c7:2c:4c:9b:d3:6a:ea:8d:2b:6c:60:7f:84:
         55:3f:7d:b2:71:b9:71:c8:39:27:a7:b1:d3:d5:04:43:d5:56:
         bd:31:6f:47:a6:85:18:91:de:23:22:d1:6c:59:63:8f:5f:04:
         88:57:e8:f4:f5:b7:ac:9e:7c:0a:82:ef:50:47:20:cc:dc:1b:
         a7:85:e9:d8:28:77:b3:b3:a9:10:9d:09:eb:01:20:5b:f2:6a:
         cb:c6:db:da:51:50:77:a3:ea:36:56:b2:3a:f7:d9:2e:9b:2c:
         e9:a2:c5:7d:ee:af:e5:a1:c1:48:c8:79:5d:ee:8f:d2:41:6b:
         74:08:a6:62:b5:17:af:4b:ef:b1:af:e1:24:57:d6:99:82:5c:
         60:4d:86:38:e5:b1:44:12:f7:ad:0d:9d:78:b0:3b:73:77:57:
         c2:a4:35:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 01:08:46 2026 by rpki-client