Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
File:                     vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft (raw, json)
Hash identifier:          ltxmh1jNtDiSqN6lJ4SbFm2Uwd8Z3tnt1czR3pBiKXE=
Subject key identifier:   B2:32:B3:46:35:69:9F:0E:E1:6A:D1:A0:30:1B:CE:35:DA:7D:08:4B
Authority key identifier: BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9
Certificate issuer:       /CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
Certificate serial:       019CE7B78272E5392BCB763D4AAF7CA6FBBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
Manifest number:          1683
Signing time:             Fri 13 Mar 2026 15:01:28 +0000
Manifest this update:     Fri 13 Mar 2026 15:01:28 +0000
Manifest next update:     Sat 14 Mar 2026 15:01:28 +0000
Files and hashes:         1: R-q6ieQ5ZRpyZAS3VuKsjP1lbqI.roa (hash: LE0wpmfemoMC71Up9yLLrAR45HiWA1m8U6namnoo6+E=)
                          2: RoC9yHrjkOJ0GiednXz9KzpBgEI.roa (hash: kugJughWaN4KyRcT9vU8DskQM03Ay2SChRmN27jdndQ=)
                          3: Uj9qErLJ7z3sRt5hNWIVbAoCTJU.roa (hash: XmHbyEYbwLMwHEMXeqgjX8MuDffCoDklGaGBFZdSn00=)
                          4: u_BnVwDhAa2ItOuzTxp9mi3OVGk.roa (hash: DT0/HarFisk4IStUU9LzkErJGL5WNt4QSQVHnd5C+vo=)
                          5: upv2bkah2kmcgwzii9vlsV1YYx0.roa (hash: DdoCoWJ4MAXwMUb9LrgBORU0OoZ8wqZEHBq3WjBn6lw=)
                          6: vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl (hash: WFTQV24dH3NmJnE5HgTgyh4/7lshGEHIM9MkJ9b6BhM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e7:b7:82:72:e5:39:2b:cb:76:3d:4a:af:7c:a6:fb:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
        Validity
            Not Before: Mar 13 15:01:28 2026 GMT
            Not After : Mar 14 15:01:28 2026 GMT
        Subject: CN=b232b34635699f0ee16ad1a0301bce35da7d084b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e5:99:3c:89:99:6a:01:eb:dd:59:07:53:d3:
                    d4:b1:24:fc:80:51:0d:53:10:a7:df:c2:34:28:23:
                    f3:d6:84:d5:d3:9e:ca:2a:db:09:5a:69:12:dd:57:
                    0a:6d:79:88:93:b1:9a:11:de:e0:a7:15:34:84:a0:
                    68:a8:11:a3:b6:d6:b9:fe:6d:04:f1:f0:4a:9c:ce:
                    e1:1a:e1:49:c5:99:20:6b:df:ad:fc:89:86:25:c3:
                    ee:e0:31:bd:f9:d2:e7:02:b1:6e:eb:27:49:15:eb:
                    fc:67:f3:20:8f:df:33:67:44:97:ef:76:50:3e:0c:
                    b6:3e:80:ee:47:18:43:a2:76:e2:a9:cf:78:24:89:
                    34:29:af:bb:f2:0c:76:38:d5:d7:85:a2:8e:15:2e:
                    82:b8:77:9d:32:ca:42:75:42:63:f4:09:fe:30:eb:
                    3b:34:07:87:c3:89:75:9d:d1:e3:27:2b:70:8e:4a:
                    30:3d:0c:81:d9:9b:1a:a5:d9:59:44:e3:2a:61:9c:
                    3b:59:90:e5:34:b2:48:b5:b1:35:5c:c6:26:9e:26:
                    75:9c:89:b9:9e:2f:19:38:98:0a:9e:40:62:d7:be:
                    2c:00:68:3a:c2:41:c3:ef:f0:6f:bf:10:52:c7:61:
                    32:01:05:93:ea:bc:f5:83:36:ff:df:32:fc:cd:6f:
                    65:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:32:B3:46:35:69:9F:0E:E1:6A:D1:A0:30:1B:CE:35:DA:7D:08:4B
            X509v3 Authority Key Identifier:
                keyid:BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:f5:c9:94:17:e8:0c:63:01:b2:b1:a1:b0:3b:bc:38:50:64:
         b8:b9:34:3b:74:60:d7:97:c4:4e:58:dd:8d:b3:92:4b:8b:19:
         7b:a2:b4:b8:54:44:72:90:be:b5:04:fe:ee:1b:5b:da:fc:6b:
         18:02:7f:6d:b8:9f:39:35:32:02:1a:9f:9b:f0:1c:aa:77:7c:
         8b:be:18:64:a4:aa:f0:dc:42:13:b0:49:4c:8d:c1:4a:ed:89:
         e9:73:92:1b:f6:db:c8:7f:bc:b9:8e:c9:0f:fd:c0:d6:81:5d:
         4a:34:5f:fd:d2:ba:95:62:63:52:9e:43:7f:ac:d4:38:64:06:
         06:a0:50:13:5e:72:1f:af:b9:e4:28:c2:58:48:a8:c3:b6:e1:
         cc:ff:25:4b:2b:d5:7b:a3:a3:38:8b:ef:01:02:06:4d:f0:05:
         5e:b2:11:21:3b:3a:93:01:a3:c2:e5:9e:21:0e:ae:05:35:f0:
         3c:5c:e2:a4:c5:ed:d3:fe:a9:e3:eb:76:b5:37:bc:bf:07:c2:
         37:13:0c:4d:c6:34:fb:04:65:24:cd:e1:6e:93:0c:3b:2e:a0:
         df:c1:fc:43:77:17:1f:d2:e1:65:b0:ec:9a:27:cd:2f:06:a6:
         b0:17:36:8a:c5:70:99:43:dd:9b:ab:d4:e6:d0:6f:42:21:cc:
         47:fe:45:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZznt4Jy5Tkry3Y9Sq98pvu9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNDlmYjE5MGY0YmQwZjU4MTVhOGU1NzlmMzY2YWQ1OGQ1
ZDQxZjkwHhcNMjYwMzEzMTUwMTI4WhcNMjYwMzE0MTUwMTI4WjAzMTEwLwYDVQQD
EyhiMjMyYjM0NjM1Njk5ZjBlZTE2YWQxYTAzMDFiY2UzNWRhN2QwODRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOWZPImZagHr3VkHU9PUsST8gFEN
UxCn38I0KCPz1oTV057KKtsJWmkS3VcKbXmIk7GaEd7gpxU0hKBoqBGjtta5/m0E
8fBKnM7hGuFJxZkga9+t/ImGJcPu4DG9+dLnArFu6ydJFev8Z/Mgj98zZ0SX73ZQ
Pgy2PoDuRxhDonbiqc94JIk0Ka+78gx2ONXXhaKOFS6CuHedMspCdUJj9An+MOs7
NAeHw4l1ndHjJytwjkowPQyB2ZsapdlZROMqYZw7WZDlNLJItbE1XMYmniZ1nIm5
ni8ZOJgKnkBi174sAGg6wkHD7/BvvxBSx2EyAQWT6rz1gzb/3zL8zW9lGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLIys0Y1aZ8O4WrRoDAbzjXafQhLMB8GA1UdIwQY
MBaAFL5J+xkPS9D1gVqOV582atWNXUH5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmtuN0dROUwwUFdCV281WG56WnExWTFkUWZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9iZDBkMTMtZTk4My00ZmY5LWI1MDct
NWU2NTZmMWI0ODc2LzEvdmtuN0dROUwwUFdCV281WG56WnExWTFkUWZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9iZDBkMTMtZTk4My00ZmY5LWI1MDctNWU2NTZmMWI0ODc2
LzEvdmtuN0dROUwwUFdCV281WG56WnExWTFkUWZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcvXJlBfo
DGMBsrGhsDu8OFBkuLk0O3Rg15fETljdjbOSS4sZe6K0uFREcpC+tQT+7htb2vxr
GAJ/bbifOTUyAhqfm/Acqnd8i74YZKSq8NxCE7BJTI3BSu2J6XOSG/bbyH+8uY7J
D/3A1oFdSjRf/dK6lWJjUp5Df6zUOGQGBqBQE15yH6+55CjCWEiow7bhzP8lSyvV
e6OjOIvvAQIGTfAFXrIRITs6kwGjwuWeIQ6uBTXwPFzipMXt0/6p4+t2tTe8vwfC
NxMMTcY0+wRlJM3hbpMMOy6g38H8Q3cXH9LhZbDsmifNLwamsBc2isVwmUPdm6vU
5tBvQiHMR/5FvQ==
-----END CERTIFICATE-----
Generated at Fri Mar 13 17:59:43 2026 by rpki-client