Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
File:                     0As3tvS0RWReaZOpxexghJJCXw4.mft (raw, json)
Hash identifier:          68WcyHnXbno12h5ElyWDAo9ALwLhouGSAm+lg6KcDG8=
Subject key identifier:   79:C9:BD:AF:AD:D1:EA:AD:C4:B5:67:91:A2:83:A9:B1:CC:E9:8A:FD
Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
Certificate issuer:       /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Certificate serial:       019CE47EFE1A2A0C667CC11FB9BDE27206B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
Manifest number:          0C14
Signing time:             Fri 13 Mar 2026 00:00:53 +0000
Manifest this update:     Fri 13 Mar 2026 00:00:53 +0000
Manifest next update:     Sat 14 Mar 2026 00:00:53 +0000
Files and hashes:         1: 0As3tvS0RWReaZOpxexghJJCXw4.crl (hash: K9sSq2kTVaT5mHTOIt5dxVqPVUZqAi4rH0B5opMbVkc=)
                          2: A895E3Nb3C65o8ijPlK8Lorwh00.roa (hash: tqCw5dUoNXqxDnqcOXcynHp1qTbqM0KgkUMFlaWbuSQ=)
                          3: GBY268elKXl97npV4jXZBGsnzcw.roa (hash: puRSSX8DZwtYE+mawU0837aHCzln32Frk5qp7mgeh8Y=)
                          4: NCC353pQrNx8eGiSxSQfU2T_0X8.roa (hash: x5reXqO96nT5gM2bNozGLs+YENzOaeTSR3ek69LYolg=)
                          5: XX639XievMdqJ8SDTTjke_CjH90.roa (hash: eFHYg4wIZNajc7SdejcYRKfEHVh83hlLOw8omNGRsMs=)
                          6: bQ2Z3MpaRAN6Ght6WnEtUcjPZgg.roa (hash: 5jTz/OfVAorDmvszopQ0R2vKYBjIj8qCbrV2KmrXO8I=)
                          7: gs6phYuCPMyOMTxhcDdZ3qJlA9I.roa (hash: 5oHY1r24RUQH5fxNUDlPxQ1Hw8bNGQ4ZLPSvu4mNt/E=)
                          8: llhcsYDLkm4Ou2uZaJyDW3EMdA0.roa (hash: v77F3OYndH+vxoqA2hOKsJpKUx5tr3Ki2/ZCUFpENYI=)
                          9: uGQWNyg5237Zm0UUhjGg8gARmn0.roa (hash: li0m/zbSxgzFDwh2iasmSHBN8irzYLoTvtgSIVNzWfI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:7e:fe:1a:2a:0c:66:7c:c1:1f:b9:bd:e2:72:06:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
        Validity
            Not Before: Mar 13 00:00:53 2026 GMT
            Not After : Mar 14 00:00:53 2026 GMT
        Subject: CN=79c9bdafadd1eaadc4b56791a283a9b1cce98afd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0b:35:08:ef:87:2d:ad:f5:8b:77:dd:16:b0:
                    83:a4:e4:6f:cc:2e:23:5d:a0:72:a7:6c:1b:b6:ac:
                    9b:5e:7d:39:38:dd:7f:09:26:c6:d4:78:c9:1e:b1:
                    6d:d9:20:48:62:a0:0e:85:d9:c8:ee:7e:c9:e1:4e:
                    2c:c5:59:70:65:e6:5f:fb:f1:90:2a:5d:a6:5e:b1:
                    13:4d:e1:48:74:3e:82:86:64:2b:28:74:48:5e:f4:
                    19:3a:14:63:01:02:ba:6c:62:16:f7:36:da:76:3a:
                    d8:2e:50:77:7f:3b:60:0c:e1:78:1d:b4:ec:8d:e1:
                    6c:66:a5:c4:f8:26:85:4a:e4:e7:b1:f8:8e:53:93:
                    4b:c3:72:b6:a4:31:a0:b4:97:69:1e:56:ac:fa:58:
                    67:cc:b0:e7:c0:67:51:2d:82:de:9f:f5:3a:3e:ad:
                    f6:e6:c4:ef:bf:ec:86:2e:91:d5:c8:fb:a6:71:34:
                    a3:a5:df:c1:01:eb:e5:91:17:43:7d:a3:89:bd:44:
                    8a:46:59:90:dd:2b:fb:b1:63:8b:2d:53:c8:15:f2:
                    46:16:93:b0:03:6c:f5:62:32:db:6d:10:95:a3:c6:
                    08:22:4e:67:04:b5:9c:ab:93:aa:c9:6e:c0:a3:e2:
                    23:04:6e:3c:0e:5c:04:d1:eb:50:27:48:1a:38:40:
                    8c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C9:BD:AF:AD:D1:EA:AD:C4:B5:67:91:A2:83:A9:B1:CC:E9:8A:FD
            X509v3 Authority Key Identifier:
                keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:c0:43:70:04:4e:b9:bf:e7:d1:91:2d:96:82:22:b9:93:13:
         0f:fd:eb:46:31:a7:00:67:c4:8d:f5:76:b1:87:a7:93:13:4d:
         07:cd:09:c5:41:a7:88:de:4d:9c:09:69:0b:9b:0b:ef:a3:d2:
         ed:17:35:7b:c6:62:6d:7a:59:dc:d6:ac:03:ec:a3:57:60:fb:
         c2:3e:aa:83:6e:0d:f2:91:40:ae:04:5e:f3:17:c0:0e:85:a1:
         c1:05:cc:fb:54:55:42:ff:25:51:67:af:fd:8c:7f:87:57:e3:
         b3:6b:6d:64:e7:1e:36:8a:79:ba:98:d6:55:93:54:9b:e0:39:
         fe:3c:a2:c8:98:00:cb:b1:59:1c:bb:8e:ad:44:93:b7:68:d3:
         70:b1:dc:1e:b7:18:e9:53:c8:21:47:6e:ca:34:ba:94:a4:19:
         d3:2c:68:f9:08:4f:cb:50:81:5b:11:72:da:27:9b:8a:bf:51:
         58:96:d7:01:cd:e1:41:49:4d:24:ee:65:a2:66:33:a8:3a:97:
         5c:bd:dd:64:a9:2a:86:53:c3:72:53:ed:e2:91:79:fe:6d:72:
         e6:8a:44:86:c1:e2:04:16:b1:4f:94:50:f9:d6:82:f8:7a:61:
         ca:c5:fa:c8:71:7d:ef:9c:e8:10:a2:eb:49:15:3d:ea:5a:62:
         a0:03:c0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 04:18:16 2026 by rpki-client