Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
File:                     EX-dVYJrQkht_ITTXBpjpc6HUHw.mft (raw, json)
Hash identifier:          9aU05gwcvF5ccqxS3fyRe/hJSkfVFHeZ+ml+rm/S63c=
Subject key identifier:   65:C1:45:9F:AB:A4:60:50:76:4E:FA:88:50:94:A5:7A:95:C2:94:D3
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Certificate issuer:       /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial:       019CE259E32BA80AA54588DF02441542E67D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
Manifest number:          0B1D
Signing time:             Thu 12 Mar 2026 14:01:07 +0000
Manifest this update:     Thu 12 Mar 2026 14:01:07 +0000
Manifest next update:     Fri 13 Mar 2026 14:01:07 +0000
Files and hashes:         1: 0E3xILl8WVZPEgrYoNWZoMVkTpg.roa (hash: vQCOMzQ12V3c85FGpIjN0usTjxM0EfMLxP/m3PtHPDI=)
                          2: 4GFqVoHAvDJGSMikiQZjE6m3ycA.roa (hash: 3KzMwiSXOiNOWFGVkqOkBvCJJti1SV8n9AZF2X4+w0A=)
                          3: 89u9unREIWHzHaE6spWcBTF1lJo.roa (hash: 8xhdQpe85q4z4HC4KzOm7n7h5SGt2CLfQ4BpETrnUNI=)
                          4: A7H1tgL8F0JNM-wT3DtOlJr42CQ.roa (hash: +lATpBJei82aRdaABJ/OsdQoCTQWkmUoS+oR2diqRMc=)
                          5: EX-dVYJrQkht_ITTXBpjpc6HUHw.crl (hash: WaDndXLs4xgN6w7H345LFV5uAy3TuO3qR6zqhRHrZRk=)
                          6: FyMBoEGioj_dsmDJj-ikFJwt8rk.roa (hash: um7JctGs28pyaDiqpyjltt0/B/jCArUTgznU+S7I78U=)
                          7: GkQSlEUvi4fNNDdQ901XpFZgHGc.roa (hash: BPA4YpVmwzK85pZgbFRFxFl8S/GQjk30Xmm4tS0QUjA=)
                          8: Iq9lD_A_wVuXIGB9_YCE7m3U36k.roa (hash: st8orOWixkeCqgnnv2s4K71CFl64bN16idijAh1uNRg=)
                          9: SJ5lDIB3IGqaDmQaI30m-Ngpckk.roa (hash: utGuqYI8PGSeG8YzzGcnX5WML/j07lId3Gwa7KppOww=)
                          10: baD6BNxvBtAZt2bomqpQxEMkpqQ.roa (hash: FsrOSFA/yaAmgb8veo0ogll2yJD1vN0y0H3JklgTWeg=)
                          11: nvxQJqPj5xCQW67tgi211cFPXTQ.roa (hash: xfa8KDdjeEdqxYcvOvQdbP9fHGnZD3QGyADGsxwOr6I=)
                          12: oQ_KE9PwO8rtARvYNMIq29bG_kw.roa (hash: fD+hSNE7/TxZ3JitmRrU2Ab6kP20foK2b96iquwU1Z8=)
                          13: v_z54US9Vmz52vw7_c20ggObm9I.roa (hash: tUdF74bDSAZc0TUS9t0KZ7bOC/c/n0wIxweAiJZQRqw=)
                          14: wROyQ7eCk4vKyt_qosbSZQbCg6Q.roa (hash: msFAqkGBHCct32VvHQhjNj/X2yHNxatrSYDVfKZEtiA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 14:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e2:59:e3:2b:a8:0a:a5:45:88:df:02:44:15:42:e6:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
        Validity
            Not Before: Mar 12 14:01:07 2026 GMT
            Not After : Mar 13 14:01:07 2026 GMT
        Subject: CN=65c1459faba46050764efa885094a57a95c294d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:22:c2:9f:f7:9b:d3:85:80:e9:70:39:3f:f6:
                    73:8b:46:0f:db:49:fb:0d:77:ba:76:12:71:18:76:
                    7a:5f:9d:d1:6a:bf:e2:de:08:2f:5f:4b:4d:8e:5d:
                    0b:4a:93:ae:59:c5:24:62:44:a2:45:de:0b:ad:41:
                    27:29:c0:2a:ba:22:32:1f:f1:54:6e:5a:14:eb:40:
                    90:c7:d8:5f:84:fb:fe:85:8a:9c:05:96:8a:13:a4:
                    f5:13:10:78:76:57:52:cf:52:49:45:cb:b6:78:98:
                    15:b9:66:3b:b3:0c:85:1e:a2:cc:f4:5c:e6:17:ba:
                    8f:89:01:7e:74:4a:18:9c:a3:15:4b:f8:95:0c:a1:
                    a4:c2:90:4b:b9:94:2d:ee:02:13:c7:4f:f4:3e:26:
                    ce:42:be:70:4c:1b:49:e8:d8:fe:5a:01:95:b5:bb:
                    60:bd:ff:e9:b8:29:71:8b:86:65:21:c5:0b:fb:ee:
                    59:1c:13:b7:39:43:55:b7:93:00:83:43:d1:69:10:
                    f2:9d:f2:11:b5:48:a4:cf:74:68:92:2f:1f:2d:72:
                    80:2e:90:6b:a8:d4:b6:7b:3d:e6:49:16:f6:cf:7a:
                    b2:8a:e6:e7:be:fc:43:4a:5b:10:f3:2b:d2:4b:42:
                    a3:92:b9:39:ea:cb:d2:54:c4:b7:d5:6d:de:17:4e:
                    7b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C1:45:9F:AB:A4:60:50:76:4E:FA:88:50:94:A5:7A:95:C2:94:D3
            X509v3 Authority Key Identifier:
                keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:ea:c0:01:82:32:de:15:bc:e6:dd:28:8e:e4:73:72:9e:4a:
         48:79:b5:4b:22:6f:ce:b4:fb:60:63:8f:b8:5e:78:60:f3:ae:
         7a:b6:6d:57:7c:cd:83:90:1a:69:91:08:23:52:5d:54:15:7e:
         cb:c1:32:b7:ec:7c:09:ef:ff:49:41:6d:d3:89:8b:58:0d:95:
         72:a9:1f:ac:dc:5d:0d:0b:d1:ed:60:25:2b:48:b6:46:74:02:
         82:ee:cb:73:ee:b6:eb:23:29:42:2a:a5:2a:4a:2d:02:0a:98:
         f5:f6:eb:52:30:4c:3e:69:86:19:cc:f8:96:56:eb:b9:a8:15:
         ff:f2:07:08:17:bb:ed:21:40:83:4a:c8:b5:5a:e4:49:17:73:
         a2:b1:7a:6b:63:d6:78:bc:c4:7d:23:1a:1d:ef:3d:87:f0:36:
         7b:aa:04:87:c8:19:0b:85:f7:19:f3:cb:87:54:fd:af:73:07:
         67:9d:0a:9f:99:e6:7f:b7:6f:3a:81:05:4d:af:e3:a8:c4:57:
         4f:5d:4e:b3:1d:4f:a3:71:3f:8a:11:92:66:ae:da:ac:49:8f:
         38:56:44:30:6d:4e:2c:38:19:57:f1:2f:12:d4:16:b2:77:08:
         56:79:d3:9d:bc:91:68:9a:f6:2e:4e:fe:b8:40:2c:b4:2a:a7:
         ba:0b:03:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 20:39:51 2026 by rpki-client