Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
File:                     alg23em52u81qKf3TWMm9rQtp00.mft (raw, json)
Hash identifier:          fofntY/2ZbMn77qFt4PvqY6oT7ipDZmJGMVKpoDDjqg=
Subject key identifier:   AB:34:38:1F:20:05:72:9C:DD:0A:0C:A1:34:32:1B:98:A9:DB:AE:1E
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Certificate issuer:       /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial:       019D34F5D9E34841946F4CCFDE6B94123902
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
Manifest number:          0F51
Signing time:             Sat 28 Mar 2026 15:00:20 +0000
Manifest this update:     Sat 28 Mar 2026 15:00:20 +0000
Manifest next update:     Sun 29 Mar 2026 15:00:20 +0000
Files and hashes:         1: 2wOulV0vAbQf8biJXAnQkgGArPI.roa (hash: 7hYlyThHw9PBylpjQHX2//RefihYkxx++H9IszVVhRo=)
                          2: 588PNHg6CncRbEovNSIqaa8i5LI.roa (hash: cKLcHrzYxurc879bXkmUn4CshZz0QJYPGDzoguXub1Y=)
                          3: 8tE1XoXALCHY82O8b8qmwszNbGs.roa (hash: Wenx4p8ARt+i0JB3aRNXys0FukN+g6qNblR6qJZ7KAY=)
                          4: G8BPphhm9oFoNoaDVHCDJOi1A1I.roa (hash: o25EiApUpZto47Wgp7aaZGTEkqSv5P2WX51MC5xNgcg=)
                          5: M0vUEBMIUgT4jDZek6CAIPYaSIg.roa (hash: PIpybvqNjJxeWjfkr7UEGiD+MMuADppLXWFHDY6S5Vc=)
                          6: MZRQk6tT-Iy_0EmbTY5ZwDElyos.roa (hash: pr7kUc7XXbghgioDyj2+ehsGl4rvR5Ny0ZhIypP6qnE=)
                          7: PRl542vKWzERjZy8INPb-TgkXr4.roa (hash: EnUZ2TcojekWId1tvYvvKcumXfp94C7iBeo+v/ZBk5c=)
                          8: alg23em52u81qKf3TWMm9rQtp00.crl (hash: gKPQLuakwMe09321HhHJPKJAZOMUL4Zfbihc8I3tl/w=)
                          9: cx2hNcUqecSEJqe3n2yH1nbkzcQ.roa (hash: VM9cV3NpEOzoGjoegWLpfoVKjMdeb/qreQ0du+7oLuc=)
                          10: mSzzMA6L5QbhcWeV8GJlOnBN0cM.roa (hash: KFpvmdmXJzfhj/vqjMViv2cspmTTL885sm48c0BNhjc=)
                          11: pcGsYQ6WmjLQ7fW-l50FaHq8fAw.roa (hash: OyCY6h+GWUv+mGKdOjMTfLCqD3xuf3tOl0/vrW+coks=)
                          12: pnFO1a6gizeUc-Mp5yF3aD9GKrY.roa (hash: 12+yB/uNotyYBuazoRPVxuRnI9x9XM3niLtRN4n27c0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 13:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:34:f5:d9:e3:48:41:94:6f:4c:cf:de:6b:94:12:39:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
        Validity
            Not Before: Mar 28 15:00:20 2026 GMT
            Not After : Mar 29 15:00:20 2026 GMT
        Subject: CN=ab34381f2005729cdd0a0ca134321b98a9dbae1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c3:17:03:fb:f6:2b:04:c2:79:46:ad:8a:03:
                    de:12:42:7e:0b:76:fa:1b:14:57:43:21:6c:c5:6e:
                    9a:1b:95:bd:74:0b:96:c0:96:25:95:80:ef:7a:66:
                    66:11:4f:d6:29:ad:4e:47:98:6b:46:92:bf:bd:55:
                    2b:b8:93:dd:dd:91:e0:19:73:43:46:96:b1:f1:d2:
                    1b:a2:62:ed:4d:17:1f:3a:84:d1:37:f5:a7:47:33:
                    5d:95:0b:67:06:e5:c4:59:a3:94:d2:fe:d0:ee:44:
                    bf:13:63:1c:b6:56:89:c4:68:7e:f9:a7:44:27:13:
                    11:d3:fe:48:c3:6d:bd:c9:fe:9e:37:43:4e:83:69:
                    a9:81:5e:70:cc:7d:8c:af:cf:ba:b5:a0:94:1a:20:
                    a3:5f:69:e2:c8:4d:5a:97:72:3e:f8:1e:9d:42:43:
                    7e:9f:3d:ed:9d:c3:c4:27:28:ee:05:ce:65:42:35:
                    c4:ce:90:f2:dc:66:63:09:71:3a:01:f4:c0:99:64:
                    7d:48:94:c9:af:b7:b2:db:70:d2:e4:55:6f:14:4c:
                    cc:3c:ca:21:09:da:ef:9f:80:f3:9c:69:e6:e0:a3:
                    47:9d:ed:da:ef:cc:b2:3a:10:dd:87:a8:17:42:7c:
                    c9:13:94:7b:cd:0d:9f:34:95:2e:c7:39:23:63:b4:
                    20:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:34:38:1F:20:05:72:9C:DD:0A:0C:A1:34:32:1B:98:A9:DB:AE:1E
            X509v3 Authority Key Identifier:
                keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:ac:36:95:e2:b0:fa:6e:5e:c4:25:c7:3b:59:e1:ec:21:9e:
         fb:4f:00:e8:73:c7:69:ac:c8:88:58:92:92:90:75:01:01:3c:
         fc:13:49:69:49:a6:84:97:3c:9f:17:70:04:a9:e0:1e:9f:57:
         e2:cc:52:e5:b0:20:dd:6e:5a:1a:23:42:8d:7d:e4:e0:31:ac:
         b0:4e:b9:4f:b4:9e:99:bf:0d:6e:a2:2e:ad:11:56:78:b5:fe:
         c4:98:bb:29:8c:c2:a5:4a:2e:18:66:c7:db:a2:b2:96:a6:ab:
         2b:89:0b:7f:3e:9f:24:c6:e9:c4:c2:0c:9d:77:3e:4a:34:9f:
         b1:72:b0:0f:1a:66:a9:bd:62:7a:d6:bc:1d:f5:75:3a:a5:c1:
         94:67:74:2f:9c:ec:48:99:e4:43:a1:57:31:48:e7:4b:26:01:
         b0:82:00:a1:17:f5:04:7e:86:35:49:fe:3c:83:be:0e:0f:3b:
         79:7b:56:ef:2f:67:2e:6c:68:b5:bf:fc:1b:ab:54:a2:9f:ad:
         b5:4b:ec:64:9c:51:ca:49:8b:fd:5f:28:0d:c3:15:28:7d:31:
         0a:a5:f0:49:75:ab:77:65:20:88:fb:46:a1:ae:dc:e7:f4:1d:
         13:0d:22:6b:f7:11:47:7c:fa:3d:89:fe:09:60:20:0f:ec:2f:
         e3:36:d0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 19:33:48 2026 by rpki-client