Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft
File:                     sHplogTjx5n7GDuevkc2L6fP6MQ.mft (raw, json)
Hash identifier:          Wl38L74GEycNe3Ii5KjSOQbDgdem+9RG+5QlpOKwrZM=
Subject key identifier:   CF:A2:B9:44:31:54:7F:A5:E0:33:10:81:BD:A1:94:F2:A3:B4:97:4F
Authority key identifier: B0:7A:65:A2:04:E3:C7:99:FB:18:3B:9E:BE:47:36:2F:A7:CF:E8:C4
Certificate issuer:       /CN=b07a65a204e3c799fb183b9ebe47362fa7cfe8c4
Certificate serial:       019CE6365F475B4AE1DDC0E0EBE85650069D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sHplogTjx5n7GDuevkc2L6fP6MQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft
Manifest number:          02AA
Signing time:             Fri 13 Mar 2026 08:00:48 +0000
Manifest this update:     Fri 13 Mar 2026 08:00:48 +0000
Manifest next update:     Sat 14 Mar 2026 08:00:48 +0000
Files and hashes:         1: 0HI-hYUQzf4SnFU50ilapMC-N0M.roa (hash: OXBTJCBE8s4VmNGyaynb87VbRk7167Q44yiSXd1oMkw=)
                          2: sHplogTjx5n7GDuevkc2L6fP6MQ.crl (hash: z+WfnqomThqS+uuyo+vuqEc9TsQP9QKDZJnPJZ/QApM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sHplogTjx5n7GDuevkc2L6fP6MQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 08:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e6:36:5f:47:5b:4a:e1:dd:c0:e0:eb:e8:56:50:06:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b07a65a204e3c799fb183b9ebe47362fa7cfe8c4
        Validity
            Not Before: Mar 13 08:00:48 2026 GMT
            Not After : Mar 14 08:00:48 2026 GMT
        Subject: CN=cfa2b94431547fa5e0331081bda194f2a3b4974f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ac:3e:00:7a:5c:0b:cc:6d:31:cd:2d:b5:2d:
                    10:f9:c2:95:d5:c3:c8:ef:24:2f:f0:38:80:61:9e:
                    46:e5:89:a8:55:24:67:8c:26:59:00:9e:24:ae:09:
                    2a:e5:8c:5d:07:d5:28:b7:24:7e:7f:a5:ba:38:15:
                    f8:29:70:36:6d:c3:8c:4b:8b:0e:90:59:61:35:57:
                    73:6b:fb:41:2f:93:21:3a:a3:82:d3:bd:65:0c:a5:
                    f8:3a:32:e7:b0:c3:5f:41:66:b5:a8:e9:45:67:4e:
                    b1:ad:85:10:2b:52:a6:4b:55:f8:61:93:58:5c:24:
                    3a:1d:69:fc:57:02:c9:e8:80:57:c3:53:0d:a8:7e:
                    3a:46:58:1b:8c:ec:5e:4f:8e:68:c1:0f:45:f3:e8:
                    08:b0:24:5e:63:15:e1:92:36:1f:3b:a2:af:5e:1c:
                    fd:27:33:80:8e:0d:04:fb:2d:87:eb:72:64:3d:f0:
                    14:4f:c8:5e:e5:02:90:a3:cd:98:7c:28:9c:8e:d4:
                    eb:66:7a:16:93:66:d2:38:ff:0d:6d:87:08:dc:69:
                    1f:19:c8:60:66:f3:6c:bb:01:75:73:b5:ac:6b:5f:
                    4c:54:f9:9e:ca:2d:62:e7:27:c6:ef:82:00:36:69:
                    6b:4c:51:fa:4a:a9:bb:2d:a0:f2:95:c8:2f:48:84:
                    82:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A2:B9:44:31:54:7F:A5:E0:33:10:81:BD:A1:94:F2:A3:B4:97:4F
            X509v3 Authority Key Identifier:
                keyid:B0:7A:65:A2:04:E3:C7:99:FB:18:3B:9E:BE:47:36:2F:A7:CF:E8:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHplogTjx5n7GDuevkc2L6fP6MQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:57:2d:4c:40:a9:cd:8b:b4:c3:79:f6:a2:18:05:15:82:19:
         78:35:68:82:2b:99:3a:4e:ae:98:65:90:e1:26:09:6b:7a:c0:
         07:60:be:bc:bd:18:55:c0:1c:75:a7:b1:a2:fe:b2:05:b7:d3:
         0b:d7:5f:53:28:f7:b9:c0:3f:7e:e0:5b:5c:83:68:b5:29:70:
         ae:0b:1b:d5:82:52:6b:66:dd:5a:86:72:fe:4d:3d:37:5f:c2:
         54:a3:32:c8:16:55:58:f3:52:c9:0d:26:fb:4d:5a:ab:48:58:
         41:06:cd:d9:ef:13:65:d1:ae:59:8a:f2:fe:07:0c:5d:7d:3e:
         16:93:6d:2f:26:31:bf:97:34:fe:78:ef:f2:4c:de:52:52:78:
         51:05:58:b3:c3:ea:c5:5f:a5:b5:55:09:3b:58:37:13:75:c1:
         32:61:3e:3a:15:e5:00:3a:f1:0f:8d:d4:34:5d:85:31:00:d0:
         4a:28:07:26:0d:ec:20:83:5c:d8:a4:6a:32:a9:3b:56:8c:3b:
         ea:58:7e:9a:1e:14:78:f1:ac:cb:7b:ec:6b:eb:3e:9a:11:f8:
         9e:0f:47:dc:8f:72:13:13:17:20:ac:f8:ac:1f:5d:b2:5c:92:
         8b:f9:ac:78:63:59:66:2d:01:19:4b:a1:d3:2a:ac:86:a8:3d:
         7d:0e:31:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzmNl9HW0rh3cDg6+hWUAadMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwN2E2NWEyMDRlM2M3OTlmYjE4M2I5ZWJlNDczNjJmYTdj
ZmU4YzQwHhcNMjYwMzEzMDgwMDQ4WhcNMjYwMzE0MDgwMDQ4WjAzMTEwLwYDVQQD
EyhjZmEyYjk0NDMxNTQ3ZmE1ZTAzMzEwODFiZGExOTRmMmEzYjQ5NzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qw+AHpcC8xtMc0ttS0Q+cKV1cPI
7yQv8DiAYZ5G5YmoVSRnjCZZAJ4krgkq5YxdB9UotyR+f6W6OBX4KXA2bcOMS4sO
kFlhNVdza/tBL5MhOqOC071lDKX4OjLnsMNfQWa1qOlFZ06xrYUQK1KmS1X4YZNY
XCQ6HWn8VwLJ6IBXw1MNqH46RlgbjOxeT45owQ9F8+gIsCReYxXhkjYfO6KvXhz9
JzOAjg0E+y2H63JkPfAUT8he5QKQo82YfCicjtTrZnoWk2bSOP8NbYcI3GkfGchg
ZvNsuwF1c7Wsa19MVPmeyi1i5yfG74IANmlrTFH6Sqm7LaDylcgvSISCgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+iuUQxVH+l4DMQgb2hlPKjtJdPMB8GA1UdIwQY
MBaAFLB6ZaIE48eZ+xg7nr5HNi+nz+jEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0hwbG9nVGp4NW43R0R1ZXZrYzJMNmZQNk1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8yZWY5MDAtZWYyNS00MmE0LTllZGQt
NDVlNmNkNmUzMjBlLzEvc0hwbG9nVGp4NW43R0R1ZXZrYzJMNmZQNk1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8yZWY5MDAtZWYyNS00MmE0LTllZGQtNDVlNmNkNmUzMjBl
LzEvc0hwbG9nVGp4NW43R0R1ZXZrYzJMNmZQNk1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH1ctTECp
zYu0w3n2ohgFFYIZeDVogiuZOk6umGWQ4SYJa3rAB2C+vL0YVcAcdaexov6yBbfT
C9dfUyj3ucA/fuBbXINotSlwrgsb1YJSa2bdWoZy/k09N1/CVKMyyBZVWPNSyQ0m
+01aq0hYQQbN2e8TZdGuWYry/gcMXX0+FpNtLyYxv5c0/njv8kzeUlJ4UQVYs8Pq
xV+ltVUJO1g3E3XBMmE+OhXlADrxD43UNF2FMQDQSigHJg3sIINc2KRqMqk7Vow7
6lh+mh4UePGsy3vsa+s+mhH4ng9H3I9yExMXIKz4rB9dslySi/mseGNZZi0BGUuh
0yqshqg9fQ4x/w==
-----END CERTIFICATE-----
Generated at Fri Mar 13 14:08:16 2026 by rpki-client