Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.mft
File:                     mnCwUeXN-WLbwms1JIjQgxvfmjw.mft (raw, json)
Hash identifier:          VTFA5nrioUPOnqEOlMJuZTZu0Rjo9aAqO/j3XvxekhE=
Subject key identifier:   4B:01:D3:64:65:DA:8F:C0:E3:FB:56:B5:04:19:DF:2B:0D:A2:90:57
Authority key identifier: 9A:70:B0:51:E5:CD:F9:62:DB:C2:6B:35:24:88:D0:83:1B:DF:9A:3C
Certificate issuer:       /CN=9a70b051e5cdf962dbc26b352488d0831bdf9a3c
Certificate serial:       019D389C08570CE274CE4D9C2ABEF8FCFFFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mnCwUeXN-WLbwms1JIjQgxvfmjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.mft
Manifest number:          1549
Signing time:             Sun 29 Mar 2026 08:00:42 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:42 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:42 +0000
Files and hashes:         1: R96emqY6ncQoUAU51OVYuWj0FD4.roa (hash: DJiJZV+nXxqVKXP60yIaGjvvzDv5GqmmKMPLo4GDtRA=)
                          2: mjZAX8OpHY1dvjSloL-p6ZB6YvA.roa (hash: UjqoTpMMczna/METwrK97MJ304NWBJz6gI+TWhRdCgs=)
                          3: mnCwUeXN-WLbwms1JIjQgxvfmjw.crl (hash: E+YM7nfFKLcGpIG/zjz+9s86IIocEARNh2q78qGOqVo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mnCwUeXN-WLbwms1JIjQgxvfmjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9c:08:57:0c:e2:74:ce:4d:9c:2a:be:f8:fc:ff:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a70b051e5cdf962dbc26b352488d0831bdf9a3c
        Validity
            Not Before: Mar 29 08:00:42 2026 GMT
            Not After : Mar 30 08:00:42 2026 GMT
        Subject: CN=4b01d36465da8fc0e3fb56b50419df2b0da29057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:24:05:a5:72:0d:3a:9d:b4:b2:8a:61:bc:06:
                    7b:b0:49:08:45:9b:73:96:a7:2f:28:ea:d5:8e:5f:
                    56:01:06:c0:52:60:30:bc:53:10:c4:88:c4:58:cb:
                    8a:e4:a1:ab:33:63:11:06:82:62:cc:65:f9:ad:80:
                    bd:0f:1c:ab:4a:b7:fb:ae:66:2a:ef:00:a0:da:70:
                    fb:f8:1c:ef:02:20:8a:4d:72:95:aa:ac:a4:69:dc:
                    aa:9d:02:e2:72:84:e7:87:fa:32:7a:a9:f9:5c:c5:
                    35:d8:11:15:7f:d5:bd:67:ae:ae:db:58:1b:4f:6e:
                    90:9c:0e:7c:a8:21:dc:3a:c7:2e:9b:cf:fb:32:bc:
                    57:29:95:2d:5a:cb:e4:d2:90:e0:9d:28:ab:e9:3f:
                    99:e9:d2:c6:68:bf:4c:cf:85:25:d8:fb:4d:5f:fe:
                    a5:6f:64:f4:b2:ba:04:75:2c:44:8a:53:43:b1:b9:
                    83:78:a6:e0:a6:b7:0b:a9:74:cf:f1:39:14:09:67:
                    00:18:79:f2:c8:2b:ec:4e:d4:40:4f:57:f0:36:bb:
                    eb:ed:64:4c:e7:eb:d7:03:f7:1f:95:c7:35:dc:76:
                    42:f3:66:00:0c:f5:10:9b:ab:7b:78:94:0f:1d:11:
                    8b:46:4a:41:27:30:f4:69:b6:43:cc:0e:0a:b9:f5:
                    73:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:01:D3:64:65:DA:8F:C0:E3:FB:56:B5:04:19:DF:2B:0D:A2:90:57
            X509v3 Authority Key Identifier:
                keyid:9A:70:B0:51:E5:CD:F9:62:DB:C2:6B:35:24:88:D0:83:1B:DF:9A:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnCwUeXN-WLbwms1JIjQgxvfmjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:56:65:fd:94:16:f1:65:7e:1c:24:ba:6a:2a:2e:d9:55:c7:
         27:5a:2f:99:6f:49:ff:2b:8e:b7:da:24:9d:3a:d1:2d:f3:2c:
         2e:cb:f6:c7:be:e5:91:ed:fc:b9:c7:87:5e:ae:fc:fe:71:33:
         77:53:9e:b4:65:4d:f4:ae:ab:32:df:9c:ad:f3:82:3b:a6:ec:
         74:bd:e1:35:79:fd:18:17:b1:6f:c4:f1:30:64:12:6b:55:66:
         47:3b:80:20:4a:d6:59:3c:16:d7:e1:30:e9:93:01:d2:64:84:
         cd:52:82:d8:7f:bb:c6:7f:86:3b:9e:b9:2f:4e:44:6a:0a:5f:
         08:60:a8:dd:a6:49:f3:f7:7f:2d:0a:f1:d6:44:ac:45:2c:fe:
         ae:55:b5:b9:43:92:64:fd:e7:dc:b0:d9:51:e2:55:ea:dd:13:
         b2:30:b0:df:cf:17:d6:77:eb:67:a1:6d:24:ce:0f:f3:fe:e6:
         b1:46:df:5b:e2:0f:41:ca:60:ef:30:13:c3:e6:53:aa:b4:67:
         1b:49:e4:6e:7a:d4:db:21:75:5c:ff:89:3b:7d:8f:e9:71:d9:
         33:06:34:f6:fe:22:13:f9:1b:f0:52:e4:9e:cd:83:de:8b:de:
         09:7e:e9:17:55:e0:d0:5d:45:4a:81:3c:4a:e6:dd:e6:9b:b1:
         e7:7b:1a:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nAhXDOJ0zk2cKr74/P//MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNzBiMDUxZTVjZGY5NjJkYmMyNmIzNTI0ODhkMDgzMWJk
ZjlhM2MwHhcNMjYwMzI5MDgwMDQyWhcNMjYwMzMwMDgwMDQyWjAzMTEwLwYDVQQD
Eyg0YjAxZDM2NDY1ZGE4ZmMwZTNmYjU2YjUwNDE5ZGYyYjBkYTI5MDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSQFpXINOp20sophvAZ7sEkIRZtz
lqcvKOrVjl9WAQbAUmAwvFMQxIjEWMuK5KGrM2MRBoJizGX5rYC9DxyrSrf7rmYq
7wCg2nD7+BzvAiCKTXKVqqykadyqnQLicoTnh/oyeqn5XMU12BEVf9W9Z66u21gb
T26QnA58qCHcOscum8/7MrxXKZUtWsvk0pDgnSir6T+Z6dLGaL9Mz4Ul2PtNX/6l
b2T0sroEdSxEilNDsbmDeKbgprcLqXTP8TkUCWcAGHnyyCvsTtRAT1fwNrvr7WRM
5+vXA/cflcc13HZC82YADPUQm6t7eJQPHRGLRkpBJzD0abZDzA4KufVzlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEsB02Rl2o/A4/tWtQQZ3ysNopBXMB8GA1UdIwQY
MBaAFJpwsFHlzfli28JrNSSI0IMb35o8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW5Dd1VlWE4tV0xid21zMUpJalFneHZmbWp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9mOTY5MWQtYWZiMi00MWYyLThkMjIt
ZmE0NmI0ZjlhMjBjLzEvbW5Dd1VlWE4tV0xid21zMUpJalFneHZmbWp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9mOTY5MWQtYWZiMi00MWYyLThkMjItZmE0NmI0ZjlhMjBj
LzEvbW5Dd1VlWE4tV0xid21zMUpJalFneHZmbWp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP1Zl/ZQW
8WV+HCS6aiou2VXHJ1ovmW9J/yuOt9oknTrRLfMsLsv2x77lke38uceHXq78/nEz
d1OetGVN9K6rMt+crfOCO6bsdL3hNXn9GBexb8TxMGQSa1VmRzuAIErWWTwW1+Ew
6ZMB0mSEzVKC2H+7xn+GO565L05EagpfCGCo3aZJ8/d/LQrx1kSsRSz+rlW1uUOS
ZP3n3LDZUeJV6t0TsjCw388X1nfrZ6FtJM4P8/7msUbfW+IPQcpg7zATw+ZTqrRn
G0nkbnrU2yF1XP+JO32P6XHZMwY09v4iE/kb8FLkns2D3oveCX7pF1Xg0F1FSoE8
Subd5pux53sa8A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:28 2026 by rpki-client