Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
File:                     i992xUueaTXDCptMm6kwmsRw7AI.mft (raw, json)
Hash identifier:          ABo7axBcucZ32KMbC0g1NisQxvctrBO8696JAtPZezU=
Subject key identifier:   76:DF:F0:D9:98:F8:97:9D:3E:DD:53:8A:DD:CE:6E:74:03:78:7D:0B
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Certificate issuer:       /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial:       019D389BAFA6CDEAC22B5194794F29733350
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
Manifest number:          15D1
Signing time:             Sun 29 Mar 2026 08:00:20 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:20 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:20 +0000
Files and hashes:         1: FO34XpplAW7QlRa_nhaWh0bzK1M.roa (hash: OY8jMW/Q0/vSfJsf4E0K4jOzUbbQOka6dbLisQTbUTM=)
                          2: MHoXsCGkCviv_tamPQmmc_UIU2g.roa (hash: BvLZIMCUMEKg7RoFHDEe1S8EApTrbc82zqTvetdte5U=)
                          3: QAN7swOnI3Ff5VrqxOQMitejWug.roa (hash: 2Y2g+wJB1OvwtX1AmkRTWuOoQzygFkkQrXjxXMRfp4s=)
                          4: i992xUueaTXDCptMm6kwmsRw7AI.crl (hash: dIRMrvTji1NyxhXlDSjOB90k6puJsS7DoEapNcPqKBU=)
                          5: jeFbySBpHorY8gy4g9NbImjbiPQ.roa (hash: GEOrr5v0RnlYw8g2F/mQmGieOFOFv4tArrEv9TEQxlM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9b:af:a6:cd:ea:c2:2b:51:94:79:4f:29:73:33:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
        Validity
            Not Before: Mar 29 08:00:20 2026 GMT
            Not After : Mar 30 08:00:20 2026 GMT
        Subject: CN=76dff0d998f8979d3edd538addce6e7403787d0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:27:70:17:85:c9:91:13:ab:bf:1a:32:ce:ee:
                    57:8d:dd:64:5a:07:44:4b:f6:02:e5:02:d3:01:8e:
                    9c:98:39:53:96:93:74:95:22:19:7c:4a:0f:a0:d6:
                    32:ea:b7:3b:ad:67:e7:c6:5a:74:94:84:0e:4d:1c:
                    70:9c:2d:7b:e9:6c:c4:e4:ac:e1:1e:ff:b8:99:65:
                    47:3f:41:71:43:0d:33:fe:3d:e0:46:d8:a7:b0:1c:
                    05:be:55:2b:4b:3b:44:3d:13:75:94:ca:1e:7d:ef:
                    0c:51:d8:b7:e4:29:45:d5:6c:9a:f8:fd:3e:31:5a:
                    2a:71:28:2d:42:4f:c1:44:ce:3e:db:23:5a:d7:8b:
                    3b:f7:d1:01:99:f8:be:b4:5b:44:59:10:10:b2:a7:
                    fe:ac:6a:7c:ee:28:67:7b:c5:3d:a8:f7:ca:c9:af:
                    5f:9e:2b:49:42:77:0a:e4:e6:d6:b5:54:fc:ef:1e:
                    1d:78:7b:86:39:67:9b:bb:c2:09:8e:5e:f9:05:dd:
                    f7:ea:ad:0e:6b:d3:7a:13:f3:2a:40:43:45:5c:b7:
                    52:f2:94:93:88:ca:6b:1f:84:31:f1:2e:3e:51:03:
                    b8:07:c9:c9:a8:7b:f9:90:70:47:7e:56:c2:17:25:
                    95:1e:af:92:3b:5f:d0:fb:42:d4:28:95:4c:13:19:
                    21:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:DF:F0:D9:98:F8:97:9D:3E:DD:53:8A:DD:CE:6E:74:03:78:7D:0B
            X509v3 Authority Key Identifier:
                keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:be:ee:54:30:40:89:7e:a5:13:b6:ba:1f:f0:d1:0e:67:27:
         cb:21:16:2e:73:3b:98:72:56:e4:2e:67:20:f1:3d:b4:5b:dc:
         69:29:7c:cb:bd:5f:93:0a:33:78:18:84:9c:a4:11:1d:ab:3a:
         12:99:1a:89:d5:0b:74:95:3e:5f:e0:45:ab:26:d2:62:34:b9:
         2d:ec:62:be:38:be:4f:4b:02:c3:d6:5d:4f:a6:cb:e1:ab:f8:
         bd:95:61:97:ae:49:40:cb:8a:a0:fa:34:a9:d8:04:83:07:a2:
         22:37:80:cb:b4:66:af:15:95:50:12:45:e4:46:92:22:da:09:
         db:52:34:3f:fa:f5:4d:6c:f1:e8:68:4d:1f:1f:bf:01:53:bc:
         0f:6b:bb:09:09:22:d3:36:0b:43:11:d6:b3:64:b7:41:77:45:
         80:5c:d4:3b:7f:a3:86:f1:3e:84:7f:55:65:c4:cd:00:0a:c8:
         d3:5a:43:6d:2f:a6:11:97:00:f5:f2:9e:40:27:6e:48:ea:e6:
         c3:da:0f:7c:ea:fd:70:89:ef:5b:b6:79:51:a5:c1:fc:cd:db:
         04:b8:54:5b:30:0f:d2:b2:48:1a:8d:0f:ac:5f:35:c9:04:e4:
         34:81:54:22:02:72:8f:49:90:77:77:a9:e3:6b:c5:55:eb:e2:
         be:87:11:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m6+mzerCK1GUeU8pczNQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZGY3NmM1NGI5ZTY5MzVjMzBhOWI0YzliYTkzMDlhYzQ3
MGVjMDIwHhcNMjYwMzI5MDgwMDIwWhcNMjYwMzMwMDgwMDIwWjAzMTEwLwYDVQQD
Eyg3NmRmZjBkOTk4Zjg5NzlkM2VkZDUzOGFkZGNlNmU3NDAzNzg3ZDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCdwF4XJkROrvxoyzu5Xjd1kWgdE
S/YC5QLTAY6cmDlTlpN0lSIZfEoPoNYy6rc7rWfnxlp0lIQOTRxwnC176WzE5Kzh
Hv+4mWVHP0FxQw0z/j3gRtinsBwFvlUrSztEPRN1lMoefe8MUdi35ClF1Wya+P0+
MVoqcSgtQk/BRM4+2yNa14s799EBmfi+tFtEWRAQsqf+rGp87ihne8U9qPfKya9f
nitJQncK5ObWtVT87x4deHuGOWebu8IJjl75Bd336q0Oa9N6E/MqQENFXLdS8pST
iMprH4Qx8S4+UQO4B8nJqHv5kHBHflbCFyWVHq+SO1/Q+0LUKJVMExkhPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHbf8NmY+JedPt1Tit3ObnQDeH0LMB8GA1UdIwQY
MBaAFIvfdsVLnmk1wwqbTJupMJrEcOwCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTk5MnhVdWVhVFhEQ3B0TW02a3dtc1J3N0FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8yMTUxOWUtYjhkYy00MjQwLWFhNzgt
OGQyMTg2NjUwMjdkLzEvaTk5MnhVdWVhVFhEQ3B0TW02a3dtc1J3N0FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8yMTUxOWUtYjhkYy00MjQwLWFhNzgtOGQyMTg2NjUwMjdk
LzEvaTk5MnhVdWVhVFhEQ3B0TW02a3dtc1J3N0FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHb7uVDBA
iX6lE7a6H/DRDmcnyyEWLnM7mHJW5C5nIPE9tFvcaSl8y71fkwozeBiEnKQRHas6
EpkaidULdJU+X+BFqybSYjS5Lexivji+T0sCw9ZdT6bL4av4vZVhl65JQMuKoPo0
qdgEgweiIjeAy7RmrxWVUBJF5EaSItoJ21I0P/r1TWzx6GhNHx+/AVO8D2u7CQki
0zYLQxHWs2S3QXdFgFzUO3+jhvE+hH9VZcTNAArI01pDbS+mEZcA9fKeQCduSOrm
w9oPfOr9cInvW7Z5UaXB/M3bBLhUWzAP0rJIGo0PrF81yQTkNIFUIgJyj0mQd3ep
42vFVevivocR/g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:46:36 2026 by rpki-client