Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft
File:                     IMXuAtLgWGHdkG_gazhE8E03jHM.mft (raw, json)
Hash identifier:          psR4ihovd4dF3PVG+COy8FW0iO7qvEs6Eke7MP34biA=
Subject key identifier:   92:A3:4B:71:2E:38:D7:65:73:44:13:B2:97:FF:58:BF:DA:BF:1A:82
Authority key identifier: 20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73
Certificate issuer:       /CN=20c5ee02d2e05861dd906fe06b3844f04d378c73
Certificate serial:       019CE5234ED387F5FDE0846BB2E0E3700D5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft
Manifest number:          072F
Signing time:             Fri 13 Mar 2026 03:00:22 +0000
Manifest this update:     Fri 13 Mar 2026 03:00:22 +0000
Manifest next update:     Sat 14 Mar 2026 03:00:22 +0000
Files and hashes:         1: 8Ljz3seCOU0SNV0gsb7nbyE1us8.roa (hash: 5mxn00L/BkHAVIffiKEwefaUdNGKUinwbPLnGWN/DNs=)
                          2: HTNIDhfSROtaHMuo_vWuWis3hqY.roa (hash: RQQdIjVdjQlrkYAZGuleXhNiBkw7L08DLK2ngoHAF8E=)
                          3: IMXuAtLgWGHdkG_gazhE8E03jHM.crl (hash: Ok0FRXGfO0hnQVR9HfoI6sCM/FKU2XdKoLoUB7Obk28=)
                          4: LnCR0arWZWYp2eBdFpI9H-Lvr3Y.roa (hash: Bfa23AAQWStpV7GkB8TThtChQsiaP0XNU0Hs970PLeI=)
                          5: OMB5Jk9mgdmm1VNa_o3p8h7PRuU.roa (hash: prRMihbXIXK3A+UL2foFns/7v1HOYLiNh02wiqqOfKo=)
                          6: QWEGxPaeYQn0uBOxZiupBOKlr0U.roa (hash: GLwyZ+wAbuSreUejAWX/k5Bcy9X7pS8PLxayzPw9L8s=)
                          7: fBVDV8nwXQdpQ_rHZ7agKc1r0QY.roa (hash: MVq6Psg4hS5MltjuluEalJmzG7hJZP0WRHHEPcHhyK0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:23:4e:d3:87:f5:fd:e0:84:6b:b2:e0:e3:70:0d:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20c5ee02d2e05861dd906fe06b3844f04d378c73
        Validity
            Not Before: Mar 13 03:00:22 2026 GMT
            Not After : Mar 14 03:00:22 2026 GMT
        Subject: CN=92a34b712e38d765734413b297ff58bfdabf1a82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4f:f5:61:e7:92:92:85:75:33:46:ce:9e:45:
                    5c:60:1b:54:42:2a:8b:c6:3b:ae:bd:6e:7b:9a:d9:
                    ce:3e:82:bb:af:d7:c3:45:ab:b8:62:88:0b:8c:22:
                    06:a7:5f:59:61:e1:ab:56:6b:6c:76:74:27:af:49:
                    f6:15:c2:c5:17:16:99:b5:ce:35:8c:6b:2e:f0:06:
                    af:a0:a5:da:e1:88:57:d9:00:13:42:4d:71:36:12:
                    93:8b:6f:d4:dc:95:f9:25:65:f8:58:a8:bc:cf:4f:
                    40:01:59:f8:16:d4:f0:db:fd:bd:bd:87:df:ad:5a:
                    e5:d2:3d:af:a9:a3:24:8e:eb:15:a8:7a:50:10:4c:
                    48:fd:c5:26:72:03:b2:bc:e8:02:f9:f6:3d:6e:af:
                    b1:08:2f:61:67:c5:6c:e9:26:6c:05:04:ab:17:82:
                    5b:20:01:09:81:78:03:f4:ca:b6:3d:9a:a4:a4:8a:
                    f0:86:ee:40:8f:de:93:0a:fc:82:4d:36:f5:7e:54:
                    86:f7:0e:b4:c7:d6:e2:5b:64:88:74:ca:c0:5b:b7:
                    07:24:4e:5d:75:99:08:8f:3d:7f:92:af:2a:79:96:
                    25:b0:a9:ff:42:15:53:fe:3c:db:1a:36:99:fd:42:
                    85:36:f1:fe:7c:67:f1:08:a6:98:65:6d:5d:c4:10:
                    97:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A3:4B:71:2E:38:D7:65:73:44:13:B2:97:FF:58:BF:DA:BF:1A:82
            X509v3 Authority Key Identifier:
                keyid:20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:94:bc:88:e6:e8:b6:b5:ce:83:66:f4:b1:bc:61:34:31:4f:
         62:8a:81:cb:fb:70:27:17:26:10:50:d9:fe:2f:bb:56:f5:b7:
         4c:59:33:3b:2c:1c:08:a7:cd:8e:3f:ce:c5:12:a4:f3:8f:04:
         1e:a7:ef:9e:6c:35:44:5f:87:c9:d8:82:8e:63:81:8c:b4:66:
         32:0c:cf:ec:14:69:9e:51:3c:d2:3d:86:fc:a5:9c:bd:cd:da:
         e1:a8:48:0e:5d:92:90:fb:76:6d:08:b1:cc:11:81:dc:f5:9f:
         8c:70:b3:56:ce:ec:55:19:45:9b:ea:87:d7:d4:32:c3:9d:23:
         79:b0:f6:bb:9b:56:26:de:92:27:0d:34:3f:15:4b:49:59:6d:
         b1:c5:6f:1c:d2:47:30:2d:43:1e:09:6f:5b:3f:5c:6d:b2:bc:
         50:3b:f1:9c:2f:aa:a9:96:f3:a7:9b:fe:4a:dc:14:89:07:f6:
         0d:7f:31:12:81:4d:5c:97:7b:09:ab:c3:d3:ad:f3:eb:4f:97:
         d6:d7:39:d0:42:6c:ae:df:ae:38:12:33:55:ca:72:44:7b:37:
         74:2e:a4:c9:84:56:43:bd:88:03:9a:b0:8b:f7:e8:ce:49:1f:
         1c:9c:39:fd:9c:69:a8:6e:f3:27:ff:09:a3:a2:29:aa:5c:2c:
         a6:d5:93:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:57:27 2026 by rpki-client