Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
File:                     RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft (raw, json)
Hash identifier:          92x5k8vv7k8sFnoZ5hX97hOSK7j2CBhLbLnE5+4kj+I=
Subject key identifier:   D7:2B:0F:B7:1C:D6:33:4C:5E:5D:A9:FE:0E:7F:56:13:25:73:79:D5
Authority key identifier: 46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4
Certificate issuer:       /CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
Certificate serial:       019CAC46F6BCB6D08742D488E2493FDAE605
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
Manifest number:          1849
Signing time:             Mon 02 Mar 2026 02:00:57 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:57 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:57 +0000
Files and hashes:         1: 1-gvD7al892cvZ4RIDuyKy9oaP8E.roa (hash: 3YuUrQDhY5WtE8QXyn7md8vc7m27H9qU1hbbb54ZWaY=)
                          2: 5Lz9w0B7jrAzPI5acoujGxqoJpE.roa (hash: MZNW6RIYVz1iqV9FFYEQ74EZU6o1FnMQFNeyud+QFNQ=)
                          3: RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl (hash: cRaXrZuetYcMbkdv5mLNj+dwwA5QGQ1vsXA7BKwobW4=)
                          4: U7F_EGMPuOTUwMrEIvZDG6D8FL0.roa (hash: Msu3UEjWnFS+f8ETYG9dtK80xmHaVMz/zqoRDxDt/JM=)
                          5: Zd_S7TX7KyLf91f92bM72Q5m1hg.roa (hash: cE/CxwAeAo553C8FvYX71S7+9eLctivX+ScLAuru1fI=)
                          6: m2jS2YkNTUHRPi6h3Lkhe67p9k0.roa (hash: +y6I9Y8FOJyplIOWWLmZd1y7Nvbup46rof3V4cdi8+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 02:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:f6:bc:b6:d0:87:42:d4:88:e2:49:3f:da:e6:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
        Validity
            Not Before: Mar  2 02:00:57 2026 GMT
            Not After : Mar  3 02:00:57 2026 GMT
        Subject: CN=d72b0fb71cd6334c5e5da9fe0e7f5613257379d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3f:4c:6e:30:85:cf:10:4e:53:37:5f:c0:d0:
                    8d:88:c1:a1:9e:65:3f:a9:8b:6c:a1:1d:68:46:15:
                    3a:ad:05:ce:d2:23:e6:ff:a0:65:83:e7:1e:01:22:
                    ea:c4:32:39:d6:92:f3:a4:23:71:0b:44:cb:2c:6d:
                    cf:27:84:13:39:44:1c:ae:fc:07:8c:2b:34:2d:20:
                    6c:34:ad:5a:7f:a3:a9:15:e4:61:c6:14:30:20:75:
                    2b:e8:8e:61:1d:00:4a:47:3b:cc:cd:8c:5b:d4:bf:
                    27:ff:31:30:f1:f7:30:d9:83:ef:74:1d:f2:5f:cc:
                    71:a1:43:31:24:20:8e:85:7f:0e:73:74:7a:f6:e2:
                    a8:7b:1c:b4:44:7a:75:3a:ea:85:36:f5:ed:db:c4:
                    be:ea:ae:ce:71:1a:21:6d:33:a9:bc:38:86:26:2c:
                    ce:f9:7d:93:43:22:1d:78:94:73:b4:12:7a:d1:32:
                    02:ab:5b:f0:9b:31:22:00:06:11:7e:6e:6e:b2:bc:
                    11:57:2d:7c:30:9f:53:03:9d:2d:51:67:ed:c9:8e:
                    f9:9e:95:bf:ac:af:2e:f4:3a:5a:84:83:a9:0d:35:
                    b5:9e:2a:6a:e9:c1:aa:21:5f:0b:81:94:1f:3c:f9:
                    c6:93:df:90:4a:e6:7f:03:a8:23:a1:55:7e:2b:40:
                    ca:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:2B:0F:B7:1C:D6:33:4C:5E:5D:A9:FE:0E:7F:56:13:25:73:79:D5
            X509v3 Authority Key Identifier:
                keyid:46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:ff:9e:49:61:5a:98:a3:2b:91:bc:c0:c9:fd:1a:fe:d2:57:
         ee:4c:55:9e:2e:36:50:b7:20:39:45:da:e2:98:12:f1:39:b4:
         83:70:f0:cb:c4:d5:89:62:6d:02:d7:a1:6f:34:4e:30:39:ff:
         18:18:37:2e:e5:ed:f7:b1:07:29:39:30:e2:a2:ca:18:76:da:
         a0:a9:0e:d9:69:f9:13:ae:15:a8:c0:ea:e3:9f:b1:aa:9a:df:
         54:5a:1c:b8:e4:5a:49:a6:f6:f0:da:b5:7f:38:f1:35:c3:41:
         ff:ba:24:71:98:54:ff:d3:10:38:06:38:c9:92:a0:f1:11:fa:
         74:37:29:38:9a:dc:ba:76:3e:26:0f:1e:77:1c:ce:2e:94:db:
         1d:34:fd:81:cb:b3:81:06:d9:43:55:5b:9a:90:3d:cc:a5:23:
         8f:60:35:cc:54:d4:af:7d:ae:85:84:45:38:a6:cd:39:8d:4c:
         87:6a:f3:0a:b5:36:e1:09:da:ce:37:72:a2:8a:08:18:be:50:
         4a:3e:75:a1:11:13:20:f8:89:e5:a5:7c:6e:86:5c:74:84:67:
         ed:bb:55:d9:05:5e:c4:cb:dd:63:2a:71:90:de:bf:5d:66:d5:
         e5:60:fc:14:26:24:fc:fb:25:a3:21:97:f2:a4:04:71:6c:fd:
         ed:bd:13:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRva8ttCHQtSI4kk/2uYFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZDlhMGE0YjU3YTBlZWM3YzRlNTJhMTE5ZGI0YjFjNjU2
ZjRkYjQwHhcNMjYwMzAyMDIwMDU3WhcNMjYwMzAzMDIwMDU3WjAzMTEwLwYDVQQD
EyhkNzJiMGZiNzFjZDYzMzRjNWU1ZGE5ZmUwZTdmNTYxMzI1NzM3OWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArD9MbjCFzxBOUzdfwNCNiMGhnmU/
qYtsoR1oRhU6rQXO0iPm/6Blg+ceASLqxDI51pLzpCNxC0TLLG3PJ4QTOUQcrvwH
jCs0LSBsNK1af6OpFeRhxhQwIHUr6I5hHQBKRzvMzYxb1L8n/zEw8fcw2YPvdB3y
X8xxoUMxJCCOhX8Oc3R69uKoexy0RHp1OuqFNvXt28S+6q7OcRohbTOpvDiGJizO
+X2TQyIdeJRztBJ60TICq1vwmzEiAAYRfm5usrwRVy18MJ9TA50tUWftyY75npW/
rK8u9DpahIOpDTW1nipq6cGqIV8LgZQfPPnGk9+QSuZ/A6gjoVV+K0DKYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNcrD7cc1jNMXl2p/g5/VhMlc3nVMB8GA1UdIwQY
MBaAFEbZoKS1eg7sfE5SoRnbSxxlb020MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnRtZ3BMVjZEdXg4VGxLaEdkdExIR1Z2VGJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS82NzNiMWQtNmQxNC00ZGY1LTk5YWQt
MmVlMmI3Mjk1ZGZmLzEvUnRtZ3BMVjZEdXg4VGxLaEdkdExIR1Z2VGJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS82NzNiMWQtNmQxNC00ZGY1LTk5YWQtMmVlMmI3Mjk1ZGZm
LzEvUnRtZ3BMVjZEdXg4VGxLaEdkdExIR1Z2VGJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASv+eSWFa
mKMrkbzAyf0a/tJX7kxVni42ULcgOUXa4pgS8Tm0g3Dwy8TViWJtAtehbzROMDn/
GBg3LuXt97EHKTkw4qLKGHbaoKkO2Wn5E64VqMDq45+xqprfVFocuORaSab28Nq1
fzjxNcNB/7okcZhU/9MQOAY4yZKg8RH6dDcpOJrcunY+Jg8edxzOLpTbHTT9gcuz
gQbZQ1VbmpA9zKUjj2A1zFTUr32uhYRFOKbNOY1Mh2rzCrU24QnazjdyoooIGL5Q
Sj51oRETIPiJ5aV8boZcdIRn7btV2QVexMvdYypxkN6/XWbV5WD8FCYk/PsloyGX
8qQEcWz97b0TZw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:21:30 2026 by rpki-client