Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/1d4994-cfe3-46df-b02d-f776c92207b7/1/k61uOZkaLowJwa3lO-WV-LipQl4.mft
File:                     k61uOZkaLowJwa3lO-WV-LipQl4.mft (raw, json)
Hash identifier:          +jGA5nEYSlBFosrz0g/2M8OFif5G9jEFUa/gLQNVrXQ=
Subject key identifier:   4D:21:0D:EC:0D:24:D4:4D:E9:54:B0:F4:75:96:37:A2:AF:31:92:9B
Authority key identifier: 93:AD:6E:39:99:1A:2E:8C:09:C1:AD:E5:3B:E5:95:F8:B8:A9:42:5E
Certificate issuer:       /CN=93ad6e39991a2e8c09c1ade53be595f8b8a9425e
Certificate serial:       019D37C11FBDB5A9ECC8124C4D487FC183CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k61uOZkaLowJwa3lO-WV-LipQl4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/1d4994-cfe3-46df-b02d-f776c92207b7/1/k61uOZkaLowJwa3lO-WV-LipQl4.mft
Manifest number:          0691
Signing time:             Sun 29 Mar 2026 04:01:36 +0000
Manifest this update:     Sun 29 Mar 2026 04:01:36 +0000
Manifest next update:     Mon 30 Mar 2026 04:01:36 +0000
Files and hashes:         1: XZK8ESeU017UcTyLosKrMbmvFu4.roa (hash: QOupiUPzPs9rkbCndSp1pJv9yzcYmDSFdBLs7abwVV0=)
                          2: k61uOZkaLowJwa3lO-WV-LipQl4.crl (hash: W95fkE7hephI5Vcld33CUlDWocpe4lb8lVIDCXD5x9Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/1d4994-cfe3-46df-b02d-f776c92207b7/1/k61uOZkaLowJwa3lO-WV-LipQl4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/1d4994-cfe3-46df-b02d-f776c92207b7/1/k61uOZkaLowJwa3lO-WV-LipQl4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k61uOZkaLowJwa3lO-WV-LipQl4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c1:1f:bd:b5:a9:ec:c8:12:4c:4d:48:7f:c1:83:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93ad6e39991a2e8c09c1ade53be595f8b8a9425e
        Validity
            Not Before: Mar 29 04:01:36 2026 GMT
            Not After : Mar 30 04:01:36 2026 GMT
        Subject: CN=4d210dec0d24d44de954b0f4759637a2af31929b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d2:1d:e9:3e:b9:a9:d1:89:e9:92:b6:81:97:
                    25:15:48:99:c7:a7:d5:90:dc:67:3c:8a:ec:1a:83:
                    11:3c:85:fc:38:3f:26:e5:5f:b2:0d:8d:64:35:60:
                    f0:f0:c2:aa:aa:2a:36:36:fe:12:b9:a6:17:05:e9:
                    73:a4:35:88:09:70:55:c6:6d:52:4b:47:81:5d:5a:
                    c8:28:29:bb:cb:ba:7c:b7:d5:28:68:76:2a:49:d9:
                    9f:13:15:2c:2e:bb:90:a9:85:62:e0:2c:6b:41:0c:
                    de:89:8f:e8:4e:6a:cd:4b:1b:00:bb:8c:69:59:79:
                    5f:8e:da:53:e3:60:44:33:78:62:51:f5:e6:ad:67:
                    53:e6:bf:11:08:89:3f:00:83:fc:a3:25:f9:14:4e:
                    19:c8:05:eb:3f:62:3f:3c:ad:bc:4a:d8:9e:88:3a:
                    55:dd:53:fc:36:8e:ca:a3:3d:8f:6a:04:87:0e:1a:
                    6f:0c:bb:7a:63:df:2c:94:12:b2:76:4a:89:2c:95:
                    7c:9f:93:3a:41:68:a8:75:ca:38:af:f5:33:d4:4a:
                    93:65:b6:7a:3c:ee:60:74:83:1a:ef:04:92:41:db:
                    56:f3:3f:db:ae:67:55:49:11:b7:15:fe:bd:7e:78:
                    e0:c3:0f:39:ad:19:97:4c:6c:a2:44:60:cf:61:55:
                    81:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:21:0D:EC:0D:24:D4:4D:E9:54:B0:F4:75:96:37:A2:AF:31:92:9B
            X509v3 Authority Key Identifier:
                keyid:93:AD:6E:39:99:1A:2E:8C:09:C1:AD:E5:3B:E5:95:F8:B8:A9:42:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k61uOZkaLowJwa3lO-WV-LipQl4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1d4994-cfe3-46df-b02d-f776c92207b7/1/k61uOZkaLowJwa3lO-WV-LipQl4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1d4994-cfe3-46df-b02d-f776c92207b7/1/k61uOZkaLowJwa3lO-WV-LipQl4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:50:f6:c0:85:33:35:c6:f5:2b:80:75:86:cd:7b:77:69:2b:
         df:30:29:12:3c:ec:ec:f1:76:a1:a0:8d:44:82:11:ed:c5:ac:
         c4:7d:dd:dd:97:0d:ee:ab:c5:3f:06:c4:39:14:de:d2:88:14:
         8d:c2:aa:f6:ca:5e:d6:c0:3b:71:08:0d:02:69:09:6f:e5:30:
         0b:95:1f:1d:73:7b:df:11:ce:85:46:ef:79:f0:b8:0b:5a:b7:
         02:2b:bf:62:94:7c:44:79:c7:0a:94:08:99:1a:18:7e:1e:27:
         f2:ee:8c:91:a1:98:bc:99:44:73:c0:cc:d5:fd:6b:0f:6a:30:
         fa:2d:19:90:79:dd:d7:78:a2:76:3c:19:ec:40:26:b5:96:df:
         29:f0:1b:14:78:d2:c5:23:22:a2:fd:7d:0e:8a:96:05:64:a3:
         b7:d1:1e:86:75:b1:58:69:5e:5d:95:2a:16:cb:fc:c4:6c:aa:
         87:b5:27:0e:2e:eb:b5:36:30:1e:4d:3f:40:fc:a2:8f:fa:f6:
         d5:f8:e5:44:a9:fe:0f:24:5f:68:c2:0e:b9:97:5c:0f:58:2d:
         ee:2d:ae:b0:c4:2d:e8:d2:a2:36:c4:a9:ea:60:9b:a8:db:e4:
         4d:ef:85:f1:9e:9b:ea:74:e7:04:b9:4e:56:15:32:c2:a4:78:
         11:66:35:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wR+9tansyBJMTUh/wYPLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYWQ2ZTM5OTkxYTJlOGMwOWMxYWRlNTNiZTU5NWY4Yjhh
OTQyNWUwHhcNMjYwMzI5MDQwMTM2WhcNMjYwMzMwMDQwMTM2WjAzMTEwLwYDVQQD
Eyg0ZDIxMGRlYzBkMjRkNDRkZTk1NGIwZjQ3NTk2MzdhMmFmMzE5MjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNId6T65qdGJ6ZK2gZclFUiZx6fV
kNxnPIrsGoMRPIX8OD8m5V+yDY1kNWDw8MKqqio2Nv4SuaYXBelzpDWICXBVxm1S
S0eBXVrIKCm7y7p8t9UoaHYqSdmfExUsLruQqYVi4CxrQQzeiY/oTmrNSxsAu4xp
WXlfjtpT42BEM3hiUfXmrWdT5r8RCIk/AIP8oyX5FE4ZyAXrP2I/PK28StieiDpV
3VP8No7Koz2PagSHDhpvDLt6Y98slBKydkqJLJV8n5M6QWiodco4r/Uz1EqTZbZ6
PO5gdIMa7wSSQdtW8z/brmdVSRG3Ff69fnjgww85rRmXTGyiRGDPYVWBvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0hDewNJNRN6VSw9HWWN6KvMZKbMB8GA1UdIwQY
MBaAFJOtbjmZGi6MCcGt5Tvllfi4qUJeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazYxdU9aa2FMb3dKd2EzbE8tV1YtTGlwUWw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8xZDQ5OTQtY2ZlMy00NmRmLWIwMmQt
Zjc3NmM5MjIwN2I3LzEvazYxdU9aa2FMb3dKd2EzbE8tV1YtTGlwUWw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8xZDQ5OTQtY2ZlMy00NmRmLWIwMmQtZjc3NmM5MjIwN2I3
LzEvazYxdU9aa2FMb3dKd2EzbE8tV1YtTGlwUWw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWVD2wIUz
Ncb1K4B1hs17d2kr3zApEjzs7PF2oaCNRIIR7cWsxH3d3ZcN7qvFPwbEORTe0ogU
jcKq9spe1sA7cQgNAmkJb+UwC5UfHXN73xHOhUbvefC4C1q3Aiu/YpR8RHnHCpQI
mRoYfh4n8u6MkaGYvJlEc8DM1f1rD2ow+i0ZkHnd13iidjwZ7EAmtZbfKfAbFHjS
xSMiov19DoqWBWSjt9EehnWxWGleXZUqFsv8xGyqh7UnDi7rtTYwHk0/QPyij/r2
1fjlRKn+DyRfaMIOuZdcD1gt7i2usMQt6NKiNsSp6mCbqNvkTe+F8Z6b6nTnBLlO
VhUywqR4EWY1eQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:53 2026 by rpki-client