Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.mft
File:                     cuv4F-GpLzzX9J32oxwmX_5HgAg.mft (raw, json)
Hash identifier:          CE0N6euVcrtt85PQA008Q7lx/ONKo6aIrUaIZbN0mkg=
Subject key identifier:   21:3B:DA:D1:EF:9C:22:15:9D:EF:90:CE:DC:18:57:BA:B2:B7:BC:82
Authority key identifier: 72:EB:F8:17:E1:A9:2F:3C:D7:F4:9D:F6:A3:1C:26:5F:FE:47:80:08
Certificate issuer:       /CN=72ebf817e1a92f3cd7f49df6a31c265ffe478008
Certificate serial:       019D051CF350F583BE85364628F79FC426ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cuv4F-GpLzzX9J32oxwmX_5HgAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.mft
Manifest number:          0155
Signing time:             Thu 19 Mar 2026 08:01:16 +0000
Manifest this update:     Thu 19 Mar 2026 08:01:16 +0000
Manifest next update:     Fri 20 Mar 2026 08:01:16 +0000
Files and hashes:         1: 1y5lvBRirf64QUUNUs-wPlahoEo.roa (hash: LhMcKD7g9vzXQej5bGx62E/rTFGZbxyNoCRC/nLvA8U=)
                          2: QV7nlixfPKhI7EyPWNfAD7Hr-34.roa (hash: RcoZUOLY0DZ86B3NQRroG5VCtYfjUx1K45ubhmkvdMY=)
                          3: cuv4F-GpLzzX9J32oxwmX_5HgAg.crl (hash: fgTgjJoZGAMHGsrKYcHBV7GYHxvQvfc/Xecr1ZJaSEk=)
                          4: gs8em47DaB3LrlDmXLkgpxaB21Q.roa (hash: cb+0Kb2KZEjJwHjkLW7WFeSKNJZu/ACiHcXkWiE0wNU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cuv4F-GpLzzX9J32oxwmX_5HgAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Mar 2026 08:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:05:1c:f3:50:f5:83:be:85:36:46:28:f7:9f:c4:26:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72ebf817e1a92f3cd7f49df6a31c265ffe478008
        Validity
            Not Before: Mar 19 08:01:16 2026 GMT
            Not After : Mar 20 08:01:16 2026 GMT
        Subject: CN=213bdad1ef9c22159def90cedc1857bab2b7bc82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:35:3c:50:99:4f:b0:fa:a6:54:65:a5:4a:88:
                    ec:0e:a5:b8:67:c2:36:24:ad:f5:dd:cf:9d:2b:8a:
                    5f:a1:f6:0a:7d:1c:50:4b:7c:d3:08:b1:64:60:b0:
                    f5:fd:09:d4:a3:31:cc:05:5b:90:57:24:e9:86:57:
                    b6:34:76:e6:79:3e:c5:64:24:16:ed:b6:ff:c8:62:
                    06:54:5b:a7:41:ad:82:5f:7c:2e:28:58:c9:a7:e9:
                    65:1b:88:a9:fa:2a:c7:a0:c3:69:d1:65:83:b3:79:
                    2b:c7:fa:cd:bb:44:5c:54:fe:ba:78:9e:7c:b2:c7:
                    77:5b:5d:94:7b:ef:85:c3:b7:0c:86:7f:05:db:e2:
                    a9:6a:51:64:28:9f:ce:35:c1:d8:d3:ea:42:3b:c7:
                    d9:8a:6f:ff:d2:ec:ca:5f:85:21:25:5f:52:56:71:
                    18:eb:a5:30:ca:05:d7:b9:85:db:e6:7b:04:c8:59:
                    7b:b5:81:d7:b8:2c:87:d3:80:34:f1:61:59:0b:22:
                    08:c8:20:90:26:62:48:69:34:0b:bc:e8:4c:27:c7:
                    02:94:43:e3:e3:d2:d2:5b:93:19:77:e6:a2:2b:96:
                    1f:c0:2a:d8:bd:5d:c0:d0:01:3f:3b:3d:6d:7e:56:
                    f7:f3:b1:dd:fc:2c:a2:ff:69:d0:81:3c:d8:68:9e:
                    68:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:3B:DA:D1:EF:9C:22:15:9D:EF:90:CE:DC:18:57:BA:B2:B7:BC:82
            X509v3 Authority Key Identifier:
                keyid:72:EB:F8:17:E1:A9:2F:3C:D7:F4:9D:F6:A3:1C:26:5F:FE:47:80:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuv4F-GpLzzX9J32oxwmX_5HgAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:60:ba:9e:e4:5f:9d:95:56:de:61:c1:25:e6:33:08:07:94:
         d9:4c:c9:e3:19:c5:3c:52:a4:d6:1f:f9:11:72:40:46:5c:ac:
         70:44:d0:dd:b8:2a:92:16:80:a5:3c:95:99:44:44:f3:22:50:
         18:7c:2f:3f:a1:ac:47:e6:0c:ba:3c:2c:d4:65:5e:29:d8:71:
         56:0a:de:cc:44:87:e9:a3:95:8f:3f:f6:2d:95:e7:42:13:a8:
         08:76:11:df:0b:3b:89:48:d9:38:80:20:2b:68:2b:e3:39:09:
         8c:f9:3c:64:69:65:80:49:3a:56:fb:51:58:8e:46:06:e0:52:
         86:27:6f:f0:fa:38:f4:7d:38:4f:80:46:79:e5:ef:f4:c1:dd:
         18:a7:57:43:6f:66:09:05:7b:74:2c:18:a1:5e:78:2a:a7:ab:
         70:19:7b:3d:ce:f7:33:fe:b4:c3:17:ee:bb:0d:df:9b:25:bc:
         bb:96:1b:7c:fc:86:0a:fa:80:cf:9e:c1:53:bd:24:18:1a:09:
         84:c5:98:de:fe:42:c7:9b:1f:de:b0:2c:b2:06:4a:d3:05:bd:
         c2:55:ad:6b:b7:46:41:be:58:20:73:50:a3:18:71:10:ea:9b:
         05:ee:8e:ef:cb:e1:47:af:1f:c0:82:d4:12:2f:64:cf:24:37:
         7b:4c:97:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 14:03:29 2026 by rpki-client