Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
File:                     H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft (raw, json)
Hash identifier:          1NSzgVp880UfhCG/Le0xj9S6L1vlYAVreBBTB9qZJ4U=
Subject key identifier:   3A:5C:6D:C5:33:7F:E5:BD:F5:9A:0D:64:2D:57:1F:1B:75:E9:0C:55
Authority key identifier: 1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34
Certificate issuer:       /CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
Certificate serial:       019CAA21A3EA9F09106C099F0FDC3AFC7A23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
Manifest number:          1860
Signing time:             Sun 01 Mar 2026 16:00:57 +0000
Manifest this update:     Sun 01 Mar 2026 16:00:57 +0000
Manifest next update:     Mon 02 Mar 2026 16:00:57 +0000
Files and hashes:         1: BMPT7NzV-DRi_JSyLfbyEmpeKTA.asa (hash: 15wpV31R6UH9KqtLpqrDAtPxo5M+xz55jsCaBxJ8PWk=)
                          2: H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl (hash: z0gIjgaGogsnupAYb9ra1RRSJnZssB9LqwqRbP7AMEg=)
                          3: RoJCbChu4UCP6HbU25IvOtcjfaQ.roa (hash: ZExXuwYNhboyV3wplBFPIwIw4SZUYPtrZTHjOMct0iE=)
                          4: TCMNO3-CS_Nx-NPlLu6HlbDn--Y.roa (hash: JY2kbXROkO8FWfujlDIjurbZxxm0qrKzSX4v6ycpeWY=)
                          5: X5485C7ZqsWTqkySl5Kn8ckUA60.roa (hash: w+70iAnq3DeMprlSCHwSgxGyujS0yHyNG0DURrrh5ls=)
                          6: Zl6fGzQYTOHjw4PolDvPxgAOgoQ.roa (hash: GhUA9dcCQFJ4Ezs37D2x3nBwq7ffRWZrt0wbE9KxdKY=)
                          7: aPxKVSvNRXkuueNUo0oD6qVAbdI.roa (hash: 61RoVPH2gZzr7aCEfyXLcJOn37DXu2XNDfa7Kms2beA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 09:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:21:a3:ea:9f:09:10:6c:09:9f:0f:dc:3a:fc:7a:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
        Validity
            Not Before: Mar  1 16:00:57 2026 GMT
            Not After : Mar  2 16:00:57 2026 GMT
        Subject: CN=3a5c6dc5337fe5bdf59a0d642d571f1b75e90c55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d7:5e:e2:f6:d7:3a:99:b1:7e:61:09:ec:2e:
                    cb:5c:4b:8d:eb:57:c0:0d:20:e7:fb:e3:2e:f3:fe:
                    ea:6f:8a:50:9d:46:0f:fb:bf:3e:45:c7:76:03:44:
                    08:c9:fe:24:69:c5:20:bd:f8:dd:b1:e5:29:4e:c4:
                    c6:cd:0e:71:7f:17:80:39:56:80:af:18:b6:4d:88:
                    05:cd:98:15:e8:66:bf:b9:e1:57:fd:31:a1:4f:df:
                    b2:fa:b0:2a:0c:82:cb:a8:a8:77:83:5b:08:32:04:
                    14:db:88:c4:27:41:df:f1:bc:d5:61:1a:00:eb:f4:
                    31:fa:96:cc:6d:74:63:49:8f:30:7b:8d:ef:93:6e:
                    fa:f6:49:1c:03:0e:4e:ca:2b:72:75:62:f0:87:14:
                    e9:f5:32:1f:96:e2:df:2b:61:a4:f1:e3:35:a9:8d:
                    d2:87:67:36:92:1c:e7:d2:fd:59:a1:3a:24:70:88:
                    c0:79:0d:2e:3b:89:d4:37:7f:22:8b:8f:2a:2a:3a:
                    10:a9:07:16:dc:24:6b:cd:1a:b1:a8:09:b9:1e:39:
                    85:f6:35:09:f2:bd:99:91:21:6f:5d:13:a9:32:57:
                    ee:c4:05:78:96:5c:a4:46:e1:00:fc:e8:08:c0:94:
                    d7:6e:c7:6b:3e:9a:f3:95:6b:64:ae:0f:7d:41:a1:
                    f4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:5C:6D:C5:33:7F:E5:BD:F5:9A:0D:64:2D:57:1F:1B:75:E9:0C:55
            X509v3 Authority Key Identifier:
                keyid:1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:a3:60:b0:5d:06:c3:0a:0e:7c:5e:79:4d:69:c3:da:2b:f2:
         07:bb:fa:76:01:40:29:29:d4:f3:4d:12:ff:67:a6:25:1e:09:
         32:c7:7d:49:00:81:c6:0e:ad:80:ea:0a:ef:1c:a7:d5:9a:42:
         67:74:d4:ac:8a:20:1d:94:bd:4d:27:5a:f1:f0:25:32:a1:c7:
         8c:68:70:81:2a:d4:28:d7:02:d3:dd:26:55:b4:3e:27:f6:37:
         34:56:7f:8f:bb:92:5f:b9:29:85:ee:da:be:ba:90:5d:f9:3d:
         e9:71:e3:08:aa:d5:29:4a:20:93:1e:97:de:c5:07:ee:ae:90:
         10:cf:0b:95:fb:31:2a:1e:9b:5a:16:c3:c6:ac:3f:f6:79:38:
         61:ea:b4:ea:37:b8:af:20:d3:a8:9e:3b:22:b8:09:9b:a9:1c:
         51:8d:d9:8c:5c:3e:1e:08:58:02:d6:26:dc:d6:34:14:42:93:
         db:20:68:15:e4:2c:34:a0:3a:6d:77:ee:e5:2f:68:f5:32:9e:
         a7:b0:ae:56:d1:f0:05:b5:64:ff:21:af:c4:5e:31:9b:33:f6:
         01:f0:54:32:8d:ed:fc:d5:48:7c:da:da:1e:77:da:7f:41:b0:
         a9:82:7b:b1:f2:f3:4f:19:be:c7:1b:07:19:3f:e6:15:20:2e:
         1d:1e:82:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIaPqnwkQbAmfD9w6/HojMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNjFhYTVkMWJlZmQ3YTBmZTNlNGRmZTNhYThkYTczZWZj
ZmJhMzQwHhcNMjYwMzAxMTYwMDU3WhcNMjYwMzAyMTYwMDU3WjAzMTEwLwYDVQQD
EygzYTVjNmRjNTMzN2ZlNWJkZjU5YTBkNjQyZDU3MWYxYjc1ZTkwYzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdde4vbXOpmxfmEJ7C7LXEuN61fA
DSDn++Mu8/7qb4pQnUYP+78+Rcd2A0QIyf4kacUgvfjdseUpTsTGzQ5xfxeAOVaA
rxi2TYgFzZgV6Ga/ueFX/TGhT9+y+rAqDILLqKh3g1sIMgQU24jEJ0Hf8bzVYRoA
6/Qx+pbMbXRjSY8we43vk2769kkcAw5OyitydWLwhxTp9TIfluLfK2Gk8eM1qY3S
h2c2khzn0v1ZoTokcIjAeQ0uO4nUN38ii48qKjoQqQcW3CRrzRqxqAm5HjmF9jUJ
8r2ZkSFvXROpMlfuxAV4llykRuEA/OgIwJTXbsdrPprzlWtkrg99QaH0FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDpcbcUzf+W99ZoNZC1XHxt16QxVMB8GA1UdIwQY
MBaAFB9hql0b79eg/j5N/jqo2nPvz7o0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDJHcVhSdnYxNkQtUGszLU9xamFjLV9QdWpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wYWQ0MTQtM2RmMS00YjM4LTg2OWUt
YzYyMWU4ZGY5NWZmLzEvSDJHcVhSdnYxNkQtUGszLU9xamFjLV9QdWpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8wYWQ0MTQtM2RmMS00YjM4LTg2OWUtYzYyMWU4ZGY5NWZm
LzEvSDJHcVhSdnYxNkQtUGszLU9xamFjLV9QdWpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ6NgsF0G
wwoOfF55TWnD2ivyB7v6dgFAKSnU800S/2emJR4JMsd9SQCBxg6tgOoK7xyn1ZpC
Z3TUrIogHZS9TSda8fAlMqHHjGhwgSrUKNcC090mVbQ+J/Y3NFZ/j7uSX7kphe7a
vrqQXfk96XHjCKrVKUogkx6X3sUH7q6QEM8LlfsxKh6bWhbDxqw/9nk4Yeq06je4
ryDTqJ47IrgJm6kcUY3ZjFw+HghYAtYm3NY0FEKT2yBoFeQsNKA6bXfu5S9o9TKe
p7CuVtHwBbVk/yGvxF4xmzP2AfBUMo3t/NVIfNraHnfaf0GwqYJ7sfLzTxm+xxsH
GT/mFSAuHR6CGA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:28:51 2026 by rpki-client