Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
File:                     kPwsEuoXAhuorOBiGJfwhW2sJVk.mft (raw, json)
Hash identifier:          nvJilYgP2PcK7bTUzVEl4wpKnyQpJLDr67tAdnWqDck=
Subject key identifier:   12:18:F4:84:E6:DA:6D:DB:FB:B8:5C:A5:13:96:63:B6:77:34:82:72
Authority key identifier: 90:FC:2C:12:EA:17:02:1B:A8:AC:E0:62:18:97:F0:85:6D:AC:25:59
Certificate issuer:       /CN=90fc2c12ea17021ba8ace0621897f0856dac2559
Certificate serial:       019CE4ECE99962A2F7C095330ACA448CFE4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
Manifest number:          07DE
Signing time:             Fri 13 Mar 2026 02:00:57 +0000
Manifest this update:     Fri 13 Mar 2026 02:00:57 +0000
Manifest next update:     Sat 14 Mar 2026 02:00:57 +0000
Files and hashes:         1: 41FDoFH6M2is1lsICkgfh5ITDqc.roa (hash: EewgyLxSVnO+QoRL7ntY20ccJSFgs1pW1bzWTclj1yE=)
                          2: BRDlyqeJrmrBAcGjXwsME96B8FA.roa (hash: jjDNz/Y1cZhGq2xfdDGq/oEMuXVbmPo8+lz5IqqCETc=)
                          3: kPwsEuoXAhuorOBiGJfwhW2sJVk.crl (hash: eL7LGJw+YwwtV0kaJwU8iYohbHh2MrtN5DUD96yiFh4=)
                          4: nXsgPSU5eo-g-H5HVGkbUxzs-M0.roa (hash: bHUY+9ATlshHA4NGy9V8O1pXq9p6uilZoEQtRA9DmuU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:ec:e9:99:62:a2:f7:c0:95:33:0a:ca:44:8c:fe:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90fc2c12ea17021ba8ace0621897f0856dac2559
        Validity
            Not Before: Mar 13 02:00:57 2026 GMT
            Not After : Mar 14 02:00:57 2026 GMT
        Subject: CN=1218f484e6da6ddbfbb85ca5139663b677348272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c8:48:4e:55:5e:7c:b3:65:be:41:c1:22:3d:
                    f5:0e:3c:9b:da:4f:53:fe:18:83:51:4f:be:56:b8:
                    3f:31:55:f1:53:3e:c1:f4:36:64:51:46:c6:ea:b5:
                    99:2b:96:18:49:c3:44:cf:14:60:32:e6:3a:43:b9:
                    96:4b:77:28:1a:1c:99:49:cf:e2:34:3a:86:3a:8a:
                    42:0b:92:14:8c:f4:81:6f:dc:9e:24:e9:b3:5a:8d:
                    56:92:8c:a4:fe:3e:ba:12:ba:b9:ec:98:57:af:cd:
                    d3:05:75:67:af:f7:1d:d0:af:e0:e3:40:8c:bc:37:
                    47:0a:bc:6c:9d:2f:da:08:c0:5b:bc:cd:84:39:aa:
                    7d:c0:71:e0:99:32:a6:44:b7:08:08:cd:85:22:78:
                    ce:6f:8c:97:68:1e:8e:21:f2:42:44:bf:8c:3b:05:
                    0b:47:ab:b9:17:5c:7f:4d:13:ba:45:01:ee:4b:ee:
                    4e:98:9d:f2:d0:da:dd:25:10:2e:ca:33:b7:38:93:
                    19:11:23:b3:4c:a3:eb:b0:00:00:19:05:e5:5d:90:
                    08:a3:93:3f:5e:32:c3:d6:15:31:78:94:f8:9e:96:
                    83:64:53:62:81:2a:a1:f6:9c:15:86:cd:37:ba:18:
                    80:bd:ff:85:98:da:d9:4a:c1:8f:39:90:33:9a:74:
                    fa:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:18:F4:84:E6:DA:6D:DB:FB:B8:5C:A5:13:96:63:B6:77:34:82:72
            X509v3 Authority Key Identifier:
                keyid:90:FC:2C:12:EA:17:02:1B:A8:AC:E0:62:18:97:F0:85:6D:AC:25:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:a0:a0:76:59:8a:66:6c:4d:62:43:c1:4a:f2:9c:db:21:22:
         1f:71:c1:99:46:6f:69:08:5c:19:ed:78:4a:9d:aa:98:f6:7e:
         5f:40:32:a4:ac:d0:b9:64:64:7b:ae:36:8f:73:e2:9b:bd:e8:
         77:a9:ce:43:11:b5:cb:4a:e3:2b:bf:db:77:04:ba:05:e9:56:
         94:2b:d0:49:7f:c4:31:73:ab:f6:4f:7c:de:9b:cb:df:b2:2c:
         ce:d6:e2:38:64:8b:3c:90:14:dc:02:9c:59:44:25:ea:c2:f9:
         d4:2f:dd:cf:69:02:8c:54:ee:90:3c:34:3b:d6:8e:a3:49:33:
         0a:9f:bd:3d:e3:bf:ca:96:3a:c3:2e:53:64:8c:d9:0d:48:45:
         6a:80:93:c5:c5:e2:10:07:fa:ef:a2:fa:20:25:e5:12:2d:f5:
         62:66:d9:dc:cf:fb:33:67:16:64:b1:bb:3c:76:ff:90:b1:cd:
         d0:d7:5a:bf:80:6b:38:b7:d3:aa:d2:1b:22:33:61:74:e8:32:
         17:b6:ae:16:c9:d2:af:40:6b:ab:d3:d4:65:e3:64:ae:c0:38:
         09:39:52:ab:2f:bb:26:9a:1b:56:a6:20:5b:66:e3:e5:76:66:
         12:67:ef:d2:50:ac:f8:77:25:89:16:6e:65:c8:f1:b8:6e:1b:
         09:9a:ec:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzk7OmZYqL3wJUzCspEjP5OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZmMyYzEyZWExNzAyMWJhOGFjZTA2MjE4OTdmMDg1NmRh
YzI1NTkwHhcNMjYwMzEzMDIwMDU3WhcNMjYwMzE0MDIwMDU3WjAzMTEwLwYDVQQD
EygxMjE4ZjQ4NGU2ZGE2ZGRiZmJiODVjYTUxMzk2NjNiNjc3MzQ4MjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8hITlVefLNlvkHBIj31Djyb2k9T
/hiDUU++Vrg/MVXxUz7B9DZkUUbG6rWZK5YYScNEzxRgMuY6Q7mWS3coGhyZSc/i
NDqGOopCC5IUjPSBb9yeJOmzWo1Wkoyk/j66Erq57JhXr83TBXVnr/cd0K/g40CM
vDdHCrxsnS/aCMBbvM2EOap9wHHgmTKmRLcICM2FInjOb4yXaB6OIfJCRL+MOwUL
R6u5F1x/TRO6RQHuS+5OmJ3y0NrdJRAuyjO3OJMZESOzTKPrsAAAGQXlXZAIo5M/
XjLD1hUxeJT4npaDZFNigSqh9pwVhs03uhiAvf+FmNrZSsGPOZAzmnT6vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBIY9ITm2m3b+7hcpROWY7Z3NIJyMB8GA1UdIwQY
MBaAFJD8LBLqFwIbqKzgYhiX8IVtrCVZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1B3c0V1b1hBaHVvck9CaUdKZndoVzJzSlZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85NTFiY2UtMjg1MC00OTQzLThmMDAt
ZGIyYzU3ZjRlZjE2LzEva1B3c0V1b1hBaHVvck9CaUdKZndoVzJzSlZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi85NTFiY2UtMjg1MC00OTQzLThmMDAtZGIyYzU3ZjRlZjE2
LzEva1B3c0V1b1hBaHVvck9CaUdKZndoVzJzSlZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC6CgdlmK
ZmxNYkPBSvKc2yEiH3HBmUZvaQhcGe14Sp2qmPZ+X0AypKzQuWRke642j3Pim73o
d6nOQxG1y0rjK7/bdwS6BelWlCvQSX/EMXOr9k983pvL37IsztbiOGSLPJAU3AKc
WUQl6sL51C/dz2kCjFTukDw0O9aOo0kzCp+9PeO/ypY6wy5TZIzZDUhFaoCTxcXi
EAf676L6ICXlEi31YmbZ3M/7M2cWZLG7PHb/kLHN0Ndav4BrOLfTqtIbIjNhdOgy
F7auFsnSr0Brq9PUZeNkrsA4CTlSqy+7JpobVqYgW2bj5XZmEmfv0lCs+HcliRZu
ZcjxuG4bCZrs7A==
-----END CERTIFICATE-----
Generated at Fri Mar 13 09:57:03 2026 by rpki-client