Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft
File:                     9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft (raw, json)
Hash identifier:          rWqAQar3kAmONgWL371h3WeqHBYgG4Xi2xH9TcS2h8o=
Subject key identifier:   C0:A3:38:FA:C1:EF:98:36:00:A4:6D:FE:B5:53:87:71:20:FD:E8:C2
Authority key identifier: F6:DE:34:6B:58:05:32:7B:BC:9D:F5:E4:9B:16:C9:97:EA:3A:12:54
Certificate issuer:       /CN=f6de346b5805327bbc9df5e49b16c997ea3a1254
Certificate serial:       019D0553BD84B22253428C30753422F72F3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft
Manifest number:          1872
Signing time:             Thu 19 Mar 2026 09:01:07 +0000
Manifest this update:     Thu 19 Mar 2026 09:01:07 +0000
Manifest next update:     Fri 20 Mar 2026 09:01:07 +0000
Files and hashes:         1: 9t40a1gFMnu8nfXkmxbJl-o6ElQ.crl (hash: z9iY750Mf0IyWRBFA9VN+0NL0CUUZOHi4Mtewwh8b0s=)
                          2: PTV1hUcFPrtTj8H3jV-0PBWi2aA.roa (hash: LVcltXxTmaC1wumCr9KKXzHWOb4BW8vwqUzLL/KaVfw=)
                          3: TCIlW-BlRgj9qm8sFvnqA1D_U0w.roa (hash: 3xQeUcgzW7NvDJ0rSLhKBh5bLuiyyVyOLX9rka6WNDc=)
                          4: pt0vpyYLtzmKEkPORjUEbfLrK04.roa (hash: aNfm1fqgMjkcUsOwar3uLSqc/xreSHXCvlrwdm4pI3s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Mar 2026 08:03:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:05:53:bd:84:b2:22:53:42:8c:30:75:34:22:f7:2f:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6de346b5805327bbc9df5e49b16c997ea3a1254
        Validity
            Not Before: Mar 19 09:01:07 2026 GMT
            Not After : Mar 20 09:01:07 2026 GMT
        Subject: CN=c0a338fac1ef983600a46dfeb553877120fde8c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f5:ae:51:34:17:25:35:48:eb:a8:e6:f8:cb:
                    90:b8:6b:9e:f5:42:6d:b2:b1:0f:2f:10:ad:2c:cc:
                    fd:5c:b8:be:dd:eb:44:10:1e:6f:d3:5a:b0:d4:14:
                    22:1e:b1:78:72:3f:33:0f:a0:fd:38:22:cb:d6:ba:
                    dc:fe:1f:30:7b:b2:ea:f8:20:68:06:67:3c:52:3f:
                    64:00:3d:9a:d5:a9:3c:16:94:d7:41:10:3d:2a:ba:
                    47:05:81:6f:d9:c1:89:20:f8:aa:ad:63:39:f0:2b:
                    d7:11:5a:e8:15:a9:05:ea:da:e2:3b:ec:4c:32:d4:
                    6e:a7:55:e6:b9:d8:37:ee:96:f8:02:be:9c:fb:9a:
                    cd:5c:68:57:f0:f8:55:a7:cf:31:6b:7d:18:23:fc:
                    39:01:8b:12:f6:7a:4d:28:94:ca:80:86:44:f0:e2:
                    a1:6d:b9:ef:03:7a:b2:65:c2:22:02:fc:d4:5b:2d:
                    e5:dd:32:06:16:91:f6:a3:81:b8:3d:2c:d6:4a:f2:
                    43:25:19:5f:ff:7f:ea:bc:84:a7:60:12:03:3b:02:
                    1b:98:53:28:fc:38:1d:1c:ec:4a:68:e6:e7:88:30:
                    6a:4f:97:80:a7:5d:9c:76:70:f9:b8:c7:2d:05:c6:
                    ce:35:fb:bb:b5:ed:23:13:5d:aa:0e:a9:36:b5:f3:
                    94:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A3:38:FA:C1:EF:98:36:00:A4:6D:FE:B5:53:87:71:20:FD:E8:C2
            X509v3 Authority Key Identifier:
                keyid:F6:DE:34:6B:58:05:32:7B:BC:9D:F5:E4:9B:16:C9:97:EA:3A:12:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:77:21:db:b5:17:12:06:e3:d7:3d:82:37:b5:7c:60:07:54:
         44:c1:bb:0b:6a:5a:90:a3:a1:ac:88:e5:ea:93:a8:03:fa:72:
         94:26:e6:17:ee:07:bf:68:0e:f7:65:75:12:29:7c:04:16:db:
         cb:ed:e1:fb:8e:b2:66:91:07:91:a9:bf:ea:e3:4d:95:c4:4a:
         bc:aa:f2:74:a0:23:23:24:b8:ef:10:f7:ea:94:0b:41:3a:df:
         b5:d1:e8:81:04:2e:ca:ca:04:e9:41:08:7c:3c:09:d6:37:e4:
         1a:43:3d:f2:03:29:e8:0e:22:23:35:ca:15:66:71:62:b2:de:
         83:a9:55:41:d2:01:b6:1c:64:45:ea:90:db:04:ea:8e:30:98:
         d2:66:5e:31:6b:3f:34:96:25:e9:05:ab:b6:d4:47:e4:cc:c0:
         34:f5:9e:e6:87:9e:af:f6:ee:74:a0:c1:d3:ec:81:89:d4:bf:
         8d:3a:99:69:b0:79:09:4e:d2:01:1c:b5:99:dc:bb:b7:67:95:
         d5:4c:78:b8:c7:2b:ab:c0:6e:ca:e4:ed:a4:e0:e6:e8:64:61:
         fd:cd:ec:17:49:a3:53:8b:8c:fd:74:da:ab:55:ad:71:05:ad:
         f2:2d:0c:1b:ed:23:14:7f:d7:bf:10:2f:60:87:34:14:01:66:
         b8:9e:55:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0FU72EsiJTQowwdTQi9y8+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2ZGUzNDZiNTgwNTMyN2JiYzlkZjVlNDliMTZjOTk3ZWEz
YTEyNTQwHhcNMjYwMzE5MDkwMTA3WhcNMjYwMzIwMDkwMTA3WjAzMTEwLwYDVQQD
EyhjMGEzMzhmYWMxZWY5ODM2MDBhNDZkZmViNTUzODc3MTIwZmRlOGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvWuUTQXJTVI66jm+MuQuGue9UJt
srEPLxCtLMz9XLi+3etEEB5v01qw1BQiHrF4cj8zD6D9OCLL1rrc/h8we7Lq+CBo
Bmc8Uj9kAD2a1ak8FpTXQRA9KrpHBYFv2cGJIPiqrWM58CvXEVroFakF6triO+xM
MtRup1Xmudg37pb4Ar6c+5rNXGhX8PhVp88xa30YI/w5AYsS9npNKJTKgIZE8OKh
bbnvA3qyZcIiAvzUWy3l3TIGFpH2o4G4PSzWSvJDJRlf/3/qvISnYBIDOwIbmFMo
/DgdHOxKaObniDBqT5eAp12cdnD5uMctBcbONfu7te0jE12qDqk2tfOUwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMCjOPrB75g2AKRt/rVTh3Eg/ejCMB8GA1UdIwQY
MBaAFPbeNGtYBTJ7vJ315JsWyZfqOhJUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXQ0MGExZ0ZNbnU4bmZYa214YkpsLW82RWxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8zYTg0NjQtMDcyNy00ZDFjLTg5MjUt
NzNhYjg1NjRiOWNhLzEvOXQ0MGExZ0ZNbnU4bmZYa214YkpsLW82RWxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8zYTg0NjQtMDcyNy00ZDFjLTg5MjUtNzNhYjg1NjRiOWNh
LzEvOXQ0MGExZ0ZNbnU4bmZYa214YkpsLW82RWxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbXch27UX
Egbj1z2CN7V8YAdURMG7C2pakKOhrIjl6pOoA/pylCbmF+4Hv2gO92V1Eil8BBbb
y+3h+46yZpEHkam/6uNNlcRKvKrydKAjIyS47xD36pQLQTrftdHogQQuysoE6UEI
fDwJ1jfkGkM98gMp6A4iIzXKFWZxYrLeg6lVQdIBthxkReqQ2wTqjjCY0mZeMWs/
NJYl6QWrttRH5MzANPWe5oeer/budKDB0+yBidS/jTqZabB5CU7SARy1mdy7t2eV
1Ux4uMcrq8BuyuTtpODm6GRh/c3sF0mjU4uM/XTaq1WtcQWt8i0MG+0jFH/XvxAv
YIc0FAFmuJ5Vcw==
-----END CERTIFICATE-----
Generated at Thu Mar 19 14:08:15 2026 by rpki-client