Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
File:                     alg23em52u81qKf3TWMm9rQtp00.mft (raw, json)
Hash identifier:          ZX0drgpcUR4xaApd0+fU1QgkD0uG/3Cp6yKEgvveFpo=
Subject key identifier:   06:A0:46:BC:FC:62:30:20:8D:28:D2:6B:B1:6F:A5:72:C5:BF:5C:B1
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Certificate issuer:       /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial:       019CD87B046098A01390E7FBFAFB1F582AB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
Manifest number:          0F20
Signing time:             Tue 10 Mar 2026 16:01:06 +0000
Manifest this update:     Tue 10 Mar 2026 16:01:06 +0000
Manifest next update:     Wed 11 Mar 2026 16:01:06 +0000
Files and hashes:         1: 1-1nP27bm3gAzWksm3Aa1woQLmTg.roa (hash: 4vMUg/+4aVf6LxIWRfZOUaawIS1qe+jvPE0nds6yR2Q=)
                          2: 2wOulV0vAbQf8biJXAnQkgGArPI.roa (hash: 7hYlyThHw9PBylpjQHX2//RefihYkxx++H9IszVVhRo=)
                          3: 8tE1XoXALCHY82O8b8qmwszNbGs.roa (hash: Wenx4p8ARt+i0JB3aRNXys0FukN+g6qNblR6qJZ7KAY=)
                          4: M0vUEBMIUgT4jDZek6CAIPYaSIg.roa (hash: PIpybvqNjJxeWjfkr7UEGiD+MMuADppLXWFHDY6S5Vc=)
                          5: MZRQk6tT-Iy_0EmbTY5ZwDElyos.roa (hash: pr7kUc7XXbghgioDyj2+ehsGl4rvR5Ny0ZhIypP6qnE=)
                          6: PRl542vKWzERjZy8INPb-TgkXr4.roa (hash: EnUZ2TcojekWId1tvYvvKcumXfp94C7iBeo+v/ZBk5c=)
                          7: Z0BON6E806_VujIu13j4rp4udFU.roa (hash: Dg0DZ41kSt9T8YvEtYfHhtMj9H1Pn0HsQ9ZBprqVWR8=)
                          8: alg23em52u81qKf3TWMm9rQtp00.crl (hash: 0n9ogNRKGdWIIbogVVjMmV2OY8Jdjli9brKuEVrS90Q=)
                          9: cx2hNcUqecSEJqe3n2yH1nbkzcQ.roa (hash: VM9cV3NpEOzoGjoegWLpfoVKjMdeb/qreQ0du+7oLuc=)
                          10: mSzzMA6L5QbhcWeV8GJlOnBN0cM.roa (hash: KFpvmdmXJzfhj/vqjMViv2cspmTTL885sm48c0BNhjc=)
                          11: pcGsYQ6WmjLQ7fW-l50FaHq8fAw.roa (hash: OyCY6h+GWUv+mGKdOjMTfLCqD3xuf3tOl0/vrW+coks=)
                          12: pnFO1a6gizeUc-Mp5yF3aD9GKrY.roa (hash: 12+yB/uNotyYBuazoRPVxuRnI9x9XM3niLtRN4n27c0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Mar 2026 15:04:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:d8:7b:04:60:98:a0:13:90:e7:fb:fa:fb:1f:58:2a:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
        Validity
            Not Before: Mar 10 16:01:06 2026 GMT
            Not After : Mar 11 16:01:06 2026 GMT
        Subject: CN=06a046bcfc6230208d28d26bb16fa572c5bf5cb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fb:87:ed:d4:9c:04:fb:c7:42:8b:40:64:7b:
                    d5:41:01:cf:41:3a:3b:0a:b7:64:78:d0:3a:19:5d:
                    ed:8c:63:71:14:b9:aa:3b:ce:ea:30:69:3c:a8:87:
                    e5:49:20:aa:a5:91:43:bb:1c:2d:5b:0a:88:5a:d5:
                    9c:80:03:a3:d4:95:18:e9:44:1e:fe:fb:97:b1:a6:
                    ff:47:d6:02:48:7f:01:ce:0d:19:69:5a:79:e0:6e:
                    b9:dd:77:6b:9f:79:62:fa:d6:13:81:2f:a4:d5:7f:
                    2e:19:45:25:84:3d:ec:19:26:42:4d:17:e7:40:09:
                    24:78:2a:f1:bf:6b:cd:c9:01:61:19:a7:b1:20:89:
                    ca:b6:fa:fd:c4:6d:95:37:59:18:98:ee:69:0d:97:
                    de:c8:ad:99:77:5a:7c:1b:ab:14:9b:a7:f8:fb:72:
                    20:35:2b:61:88:03:12:5c:86:cc:f5:b7:99:f4:70:
                    5a:e2:4e:6b:8c:26:33:ff:d7:c1:bd:03:02:ce:14:
                    a7:e5:25:36:6c:c9:67:19:44:30:15:fa:97:99:f1:
                    75:2d:8d:23:b5:11:f8:53:0d:6d:53:df:ac:91:07:
                    96:79:e0:fa:f4:57:10:b1:f2:e9:6a:83:49:df:bb:
                    78:77:56:92:d8:5a:46:5c:86:d2:40:f0:8d:93:35:
                    fc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A0:46:BC:FC:62:30:20:8D:28:D2:6B:B1:6F:A5:72:C5:BF:5C:B1
            X509v3 Authority Key Identifier:
                keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:dc:2f:dd:3b:8c:5c:ac:91:ec:52:62:70:ed:aa:85:75:f4:
         e8:24:0c:b3:14:13:af:65:62:4a:0c:5f:e5:3d:db:79:6f:67:
         2f:61:73:87:e2:66:37:ca:34:71:e4:c4:88:6a:21:c1:66:8a:
         e5:b1:84:c7:f5:5a:2d:9a:06:c2:45:2d:92:cc:83:63:05:50:
         4d:58:70:bf:83:f3:a3:68:dd:73:df:d5:da:8f:3c:db:ae:63:
         64:c0:40:0d:87:b9:d0:89:f1:00:a8:e1:7a:a2:6b:7c:b8:0c:
         4e:cd:97:53:d7:6b:63:4b:c1:98:32:d6:c3:55:14:df:3d:a2:
         b6:07:42:b6:4b:91:fc:f4:d2:15:ab:a9:0a:d6:ce:0d:bd:9a:
         3a:76:9f:8c:93:c6:80:de:10:35:68:61:42:9e:5e:a1:6d:84:
         87:f4:77:c0:18:6d:49:6a:1b:f4:af:3e:44:74:fe:db:ee:9e:
         5d:47:d6:17:6b:4e:61:be:cc:0e:d7:16:1a:a2:86:15:7b:15:
         ca:f9:67:ff:e8:f0:15:48:82:21:90:78:05:ec:ca:47:f6:72:
         50:76:67:d5:f8:7b:cb:66:96:ae:c3:d9:87:da:17:61:98:c1:
         e0:71:af:69:a2:28:cb:d0:14:60:f2:ec:26:69:22:19:f3:47:
         7f:aa:a5:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzYewRgmKATkOf7+vsfWCq1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNTgzNmRkZTliOWRhZWYzNWE4YTdmNzRkNjMyNmY2YjQy
ZGE3NGQwHhcNMjYwMzEwMTYwMTA2WhcNMjYwMzExMTYwMTA2WjAzMTEwLwYDVQQD
EygwNmEwNDZiY2ZjNjIzMDIwOGQyOGQyNmJiMTZmYTU3MmM1YmY1Y2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPuH7dScBPvHQotAZHvVQQHPQTo7
CrdkeNA6GV3tjGNxFLmqO87qMGk8qIflSSCqpZFDuxwtWwqIWtWcgAOj1JUY6UQe
/vuXsab/R9YCSH8Bzg0ZaVp54G653Xdrn3li+tYTgS+k1X8uGUUlhD3sGSZCTRfn
QAkkeCrxv2vNyQFhGaexIInKtvr9xG2VN1kYmO5pDZfeyK2Zd1p8G6sUm6f4+3Ig
NSthiAMSXIbM9beZ9HBa4k5rjCYz/9fBvQMCzhSn5SU2bMlnGUQwFfqXmfF1LY0j
tRH4Uw1tU9+skQeWeeD69FcQsfLpaoNJ37t4d1aS2FpGXIbSQPCNkzX8iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAagRrz8YjAgjSjSa7FvpXLFv1yxMB8GA1UdIwQY
MBaAFGpYNt3pudrvNain901jJva0LadNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUt
YzE5OTQyNzM3ZTZkLzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUtYzE5OTQyNzM3ZTZk
LzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQNwv3TuM
XKyR7FJicO2qhXX06CQMsxQTr2ViSgxf5T3beW9nL2Fzh+JmN8o0ceTEiGohwWaK
5bGEx/VaLZoGwkUtksyDYwVQTVhwv4Pzo2jdc9/V2o88265jZMBADYe50InxAKjh
eqJrfLgMTs2XU9drY0vBmDLWw1UU3z2itgdCtkuR/PTSFaupCtbODb2aOnafjJPG
gN4QNWhhQp5eoW2Eh/R3wBhtSWob9K8+RHT+2+6eXUfWF2tOYb7MDtcWGqKGFXsV
yvln/+jwFUiCIZB4BezKR/ZyUHZn1fh7y2aWrsPZh9oXYZjB4HGvaaIoy9AUYPLs
JmkiGfNHf6ql+Q==
-----END CERTIFICATE-----
Generated at Wed Mar 11 01:12:05 2026 by rpki-client