Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/e07cf7-50c1-4e18-8fae-1522f7537bcb/1/PhYwnSXRPOXHlqWhdOQsPNm8tes.mft
File:                     PhYwnSXRPOXHlqWhdOQsPNm8tes.mft (raw, json)
Hash identifier:          HCX7yg7R31e4pWUNyGiV4RFqujn5KWDNc1Q8WpC/ZH0=
Subject key identifier:   0D:5F:E3:15:6F:AE:98:8B:05:14:50:EC:9B:60:E7:D3:0A:48:AD:B2
Authority key identifier: 3E:16:30:9D:25:D1:3C:E5:C7:96:A5:A1:74:E4:2C:3C:D9:BC:B5:EB
Certificate issuer:       /CN=3e16309d25d13ce5c796a5a174e42c3cd9bcb5eb
Certificate serial:       019CEA81BFEA2283049F888A228DC6FC7BBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PhYwnSXRPOXHlqWhdOQsPNm8tes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/e07cf7-50c1-4e18-8fae-1522f7537bcb/1/PhYwnSXRPOXHlqWhdOQsPNm8tes.mft
Manifest number:          45
Signing time:             Sat 14 Mar 2026 04:01:37 +0000
Manifest this update:     Sat 14 Mar 2026 04:01:37 +0000
Manifest next update:     Sun 15 Mar 2026 04:01:37 +0000
Files and hashes:         1: PhYwnSXRPOXHlqWhdOQsPNm8tes.crl (hash: VWjZo3g4XYR5gdp0UW1aOY8yO0Sm5ZhM0OrdxyOcvsM=)
                          2: RfNBsHj8QcqkAL-Ye4KgxIRMAME.roa (hash: a3yGPg9Ldh+EVAvxaPgx65P1BWMxHy09aUciESjCmVY=)
                          3: UnaF_eoa9ROObjqYeTBIXsHw3Nw.asa (hash: oZG+a5/aGxOGxHi9FsasMcCsAqmNUBRZ44VQS9ERQa8=)
                          4: VFVPR_IRVw5BlqiNs1YWSmHiqsE.roa (hash: V8+sjv3juPFIm0G9xudc5DKK5HaQCguQbshspKidKdQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/e07cf7-50c1-4e18-8fae-1522f7537bcb/1/PhYwnSXRPOXHlqWhdOQsPNm8tes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/e07cf7-50c1-4e18-8fae-1522f7537bcb/1/PhYwnSXRPOXHlqWhdOQsPNm8tes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PhYwnSXRPOXHlqWhdOQsPNm8tes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Mar 2026 03:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ea:81:bf:ea:22:83:04:9f:88:8a:22:8d:c6:fc:7b:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e16309d25d13ce5c796a5a174e42c3cd9bcb5eb
        Validity
            Not Before: Mar 14 04:01:37 2026 GMT
            Not After : Mar 15 04:01:37 2026 GMT
        Subject: CN=0d5fe3156fae988b051450ec9b60e7d30a48adb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ad:d5:45:14:f5:26:34:ab:e3:27:45:12:e1:
                    ac:83:ae:05:fb:5f:f4:dc:95:e9:0f:d8:b6:9d:a9:
                    80:66:43:37:74:89:b0:23:05:c8:7f:8b:9d:bd:9e:
                    4d:a1:15:28:16:59:2e:a1:c5:5d:4e:00:bd:ec:db:
                    36:72:81:49:4d:3f:f8:84:df:07:0c:19:32:69:09:
                    2f:ed:9d:5f:90:41:67:92:7d:07:87:11:3b:df:b5:
                    7e:b1:d8:01:b6:c5:e2:94:a8:9f:fd:c4:eb:30:91:
                    e3:4a:ed:56:88:8b:89:58:36:2d:43:d9:b9:4d:a8:
                    c3:f4:56:e4:ab:6d:67:ac:86:1f:49:ae:8f:5a:ab:
                    df:33:4b:e6:b5:8e:59:ae:ea:71:42:74:8d:2b:24:
                    80:e9:4e:6e:11:f8:17:70:76:f2:f6:e3:d1:92:b6:
                    74:71:48:c9:b3:13:40:1a:e2:e4:71:4d:8d:2d:a4:
                    7d:d2:a8:a0:38:51:0f:a5:09:71:b9:59:b5:d0:d8:
                    b3:fb:f5:da:b1:d9:69:f0:e3:83:93:86:2d:d3:10:
                    80:6a:a1:4f:80:bd:5e:66:d6:fe:be:67:bc:09:05:
                    70:f1:ef:05:63:ce:0b:62:35:12:83:f7:ae:e8:3a:
                    c3:7a:90:4d:2b:dc:9a:be:2b:f9:e9:74:bb:fa:e6:
                    57:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5F:E3:15:6F:AE:98:8B:05:14:50:EC:9B:60:E7:D3:0A:48:AD:B2
            X509v3 Authority Key Identifier:
                keyid:3E:16:30:9D:25:D1:3C:E5:C7:96:A5:A1:74:E4:2C:3C:D9:BC:B5:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhYwnSXRPOXHlqWhdOQsPNm8tes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e07cf7-50c1-4e18-8fae-1522f7537bcb/1/PhYwnSXRPOXHlqWhdOQsPNm8tes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e07cf7-50c1-4e18-8fae-1522f7537bcb/1/PhYwnSXRPOXHlqWhdOQsPNm8tes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:67:8a:ab:f9:e2:95:a1:b4:bc:ad:30:05:4f:a6:1d:d5:fc:
         54:16:dd:b6:b8:65:9e:ec:65:46:23:7e:36:3e:6e:df:7b:e3:
         05:03:af:89:8d:14:dc:d6:26:ed:ff:8a:60:80:f8:22:73:dc:
         aa:4b:3a:1e:dd:95:c3:f0:fa:db:10:e6:52:62:f1:bc:c5:9e:
         13:1f:1c:86:91:17:ea:93:b0:42:2c:f9:a8:5d:fe:c4:b4:77:
         d9:f2:73:bc:92:47:fe:c7:85:61:b4:4c:c8:e6:a9:31:96:a5:
         fa:6c:05:ed:8d:7c:f0:62:ca:24:3b:bf:c4:89:6d:03:a0:53:
         04:13:08:c8:d6:02:a7:55:f0:c5:c7:fc:43:86:21:2b:0f:30:
         9d:ba:82:ca:a9:77:d2:ee:10:5d:56:66:33:19:f6:5d:1d:02:
         9d:ee:3a:3a:71:57:5c:e8:ef:db:b3:b4:84:83:cf:a6:66:4b:
         03:68:76:8f:01:67:06:3b:c7:73:44:23:94:30:31:fe:8b:16:
         bf:4b:bd:0c:cf:87:c6:29:a9:f3:f2:cd:da:74:fe:18:6d:e3:
         56:72:de:20:c0:f3:30:22:4a:68:40:6f:1b:6d:59:44:26:6a:
         1a:67:e2:be:d9:e2:ea:d9:73:84:f2:ed:81:b6:36:7a:45:19:
         8c:07:cb:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzqgb/qIoMEn4iKIo3G/Hu7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMTYzMDlkMjVkMTNjZTVjNzk2YTVhMTc0ZTQyYzNjZDli
Y2I1ZWIwHhcNMjYwMzE0MDQwMTM3WhcNMjYwMzE1MDQwMTM3WjAzMTEwLwYDVQQD
EygwZDVmZTMxNTZmYWU5ODhiMDUxNDUwZWM5YjYwZTdkMzBhNDhhZGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuK3VRRT1JjSr4ydFEuGsg64F+1/0
3JXpD9i2namAZkM3dImwIwXIf4udvZ5NoRUoFlkuocVdTgC97Ns2coFJTT/4hN8H
DBkyaQkv7Z1fkEFnkn0HhxE737V+sdgBtsXilKif/cTrMJHjSu1WiIuJWDYtQ9m5
TajD9Fbkq21nrIYfSa6PWqvfM0vmtY5ZrupxQnSNKySA6U5uEfgXcHby9uPRkrZ0
cUjJsxNAGuLkcU2NLaR90qigOFEPpQlxuVm10Niz+/Xasdlp8OODk4Yt0xCAaqFP
gL1eZtb+vme8CQVw8e8FY84LYjUSg/eu6DrDepBNK9yaviv56XS7+uZX9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA1f4xVvrpiLBRRQ7Jtg59MKSK2yMB8GA1UdIwQY
MBaAFD4WMJ0l0Tzlx5aloXTkLDzZvLXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGhZd25TWFJQT1hIbHFXaGRPUXNQTm04dGVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9lMDdjZjctNTBjMS00ZTE4LThmYWUt
MTUyMmY3NTM3YmNiLzEvUGhZd25TWFJQT1hIbHFXaGRPUXNQTm04dGVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9lMDdjZjctNTBjMS00ZTE4LThmYWUtMTUyMmY3NTM3YmNi
LzEvUGhZd25TWFJQT1hIbHFXaGRPUXNQTm04dGVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW2eKq/ni
laG0vK0wBU+mHdX8VBbdtrhlnuxlRiN+Nj5u33vjBQOviY0U3NYm7f+KYID4InPc
qks6Ht2Vw/D62xDmUmLxvMWeEx8chpEX6pOwQiz5qF3+xLR32fJzvJJH/seFYbRM
yOapMZal+mwF7Y188GLKJDu/xIltA6BTBBMIyNYCp1Xwxcf8Q4YhKw8wnbqCyql3
0u4QXVZmMxn2XR0Cne46OnFXXOjv27O0hIPPpmZLA2h2jwFnBjvHc0QjlDAx/osW
v0u9DM+Hximp8/LN2nT+GG3jVnLeIMDzMCJKaEBvG21ZRCZqGmfivtni6tlzhPLt
gbY2ekUZjAfL4w==
-----END CERTIFICATE-----
Generated at Sat Mar 14 10:29:49 2026 by rpki-client