Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
File:                     3t6RoPsfTdF5ANBttuiDNveLXAU.mft (raw, json)
Hash identifier:          0eAWEQIzzPPyhzRPyhX/69GB1YQFrr/yrnt9lwsSizw=
Subject key identifier:   74:50:9D:68:9A:73:DE:3B:B2:2B:68:69:92:C5:C3:55:AC:10:5A:DE
Authority key identifier: DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
Certificate issuer:       /CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Certificate serial:       019CAE6C625EF46CFDB187A8C9512A0B873C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
Manifest number:          0F0C
Signing time:             Mon 02 Mar 2026 12:01:04 +0000
Manifest this update:     Mon 02 Mar 2026 12:01:04 +0000
Manifest next update:     Tue 03 Mar 2026 12:01:04 +0000
Files and hashes:         1: 3t6RoPsfTdF5ANBttuiDNveLXAU.crl (hash: HqvYuANefxCT6ThVavwcQZCRtGl9JHAShvxGJiGYd6g=)
                          2: 48gsZW50uLUlR46Ix3iYOx-Oil4.roa (hash: +bihXv/kdSh2a1W6VuWuSak9s9bbT1dvAV94HrBufKM=)
                          3: 7qlkFJrqlJHjJMafd1z2Ovx1xMg.roa (hash: /c/xy57bwbSPlEYy8aSToJUMaj9SVT1GxDFV+ZgmcDw=)
                          4: IBrDKx3-hL2m6eK_AnO4AvBHD7U.roa (hash: pmaFE96hLCvpJgnKb9xAQ3FBHDszY3+MnDTKdmd2aBc=)
                          5: J_MD5SMm_jnNcFzVAMqw1B15u58.roa (hash: FIwpk+45oiJmLelvUMKgCrOAF5Q6jpI+BLL5TNzUe60=)
                          6: KF_n2gzTBU6uDy1SMMT5K8iX9bA.roa (hash: NLc5HhxgKVru6o+xJI4sk97DQHit528jxpHdpZSMptc=)
                          7: PINsz1ecwdVhJzpxv6fsByeh4kA.roa (hash: ANLsT4S8VzVYj7/i5GCBTF2gWzdZH5BQdzxufPePg5s=)
                          8: fCh5cSZ1ojcXI4Uub3fOR46Ltrs.roa (hash: kJ7GyNYmLyOwu5BhWIvecFe90tFPLUPeOlUI+nps5x8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:6c:62:5e:f4:6c:fd:b1:87:a8:c9:51:2a:0b:87:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
        Validity
            Not Before: Mar  2 12:01:04 2026 GMT
            Not After : Mar  3 12:01:04 2026 GMT
        Subject: CN=74509d689a73de3bb22b686992c5c355ac105ade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:57:9f:cf:cf:3d:03:3d:dd:d3:7a:71:de:d3:
                    34:44:7b:27:e1:23:e4:8d:7f:cb:4b:48:43:ce:07:
                    39:a8:e9:c4:b1:66:0e:9b:2e:7f:79:0b:3d:0e:6d:
                    7f:47:f4:d7:cb:ac:1d:63:3e:0f:1c:d5:ae:60:d1:
                    3f:4e:72:28:90:2b:bb:a0:59:bb:c6:66:fb:78:0d:
                    c9:6c:8a:69:fe:20:43:9f:52:c9:49:8a:3b:d1:d5:
                    c0:68:37:c6:f8:34:3b:77:62:e6:95:4d:e3:e0:f8:
                    57:7a:d3:38:83:4f:02:6a:6f:8d:15:24:4a:be:40:
                    b9:1c:7c:4e:fc:19:52:d5:de:e2:37:35:3b:7c:6f:
                    38:10:29:bf:7f:a2:c8:2c:98:84:13:d3:0a:36:41:
                    97:94:3e:45:ae:a7:c0:02:36:16:0f:1a:1d:36:83:
                    f2:dc:e1:d8:29:be:d0:ad:0f:3e:40:f8:6c:cc:9c:
                    ab:98:ca:05:c1:57:da:64:91:b1:41:b1:cb:75:9c:
                    81:4d:5b:f6:d0:71:4a:e9:74:28:2d:5b:04:cc:68:
                    e2:f7:d4:7f:6b:e6:8f:ae:44:2e:dc:61:56:24:e9:
                    6d:68:c5:81:ca:fe:e7:63:4f:06:ea:71:e5:d4:1a:
                    4a:ec:2c:b3:ac:4b:ce:2c:e8:41:03:9d:c1:d6:95:
                    56:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:50:9D:68:9A:73:DE:3B:B2:2B:68:69:92:C5:C3:55:AC:10:5A:DE
            X509v3 Authority Key Identifier:
                keyid:DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:ca:06:f3:b6:e4:a0:63:f3:d5:17:62:76:ed:45:6f:98:bd:
         32:04:73:8a:c7:69:35:1e:da:91:56:f0:91:7a:17:2a:e5:65:
         a4:fa:4c:4b:8b:22:dc:84:dc:b5:de:6e:fe:2b:1a:f6:4e:15:
         98:af:f8:2f:28:8f:e0:75:d3:45:76:42:53:f9:0e:bd:41:ce:
         cc:32:06:ee:0e:01:31:be:09:e3:f0:ef:ce:8d:83:aa:5f:34:
         ee:a3:a7:80:29:3b:f9:90:4b:8f:43:8b:73:46:85:4f:1f:d4:
         a8:c7:1f:58:7e:86:19:0d:54:85:63:74:19:30:f3:1b:6a:bb:
         fd:1e:65:24:43:bb:d5:5f:34:ed:5b:f5:71:57:ab:4c:d8:6b:
         77:fb:25:a5:7c:d8:cb:0f:92:40:5c:62:5a:35:21:1b:97:b7:
         5a:1e:d6:48:5a:b2:4c:f3:30:2b:2f:af:d1:f9:0d:a9:9c:ca:
         b0:c7:01:62:84:20:5e:af:f9:4e:82:8b:f0:2c:d5:9b:d1:ef:
         ca:9c:84:7c:ab:5e:ac:75:53:02:71:d2:3e:ba:f1:81:74:cc:
         a5:cc:95:46:a9:07:50:16:df:f2:0b:e7:ce:f5:d3:02:43:ac:
         e6:6f:43:b1:3c:f5:a0:e0:f4:93:75:62:28:68:87:e3:f5:83:
         fa:2f:27:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyubGJe9Gz9sYeoyVEqC4c8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZGU5MWEwZmIxZjRkZDE3OTAwZDA2ZGI2ZTg4MzM2Zjc4
YjVjMDUwHhcNMjYwMzAyMTIwMTA0WhcNMjYwMzAzMTIwMTA0WjAzMTEwLwYDVQQD
Eyg3NDUwOWQ2ODlhNzNkZTNiYjIyYjY4Njk5MmM1YzM1NWFjMTA1YWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1efz889Az3d03px3tM0RHsn4SPk
jX/LS0hDzgc5qOnEsWYOmy5/eQs9Dm1/R/TXy6wdYz4PHNWuYNE/TnIokCu7oFm7
xmb7eA3JbIpp/iBDn1LJSYo70dXAaDfG+DQ7d2LmlU3j4PhXetM4g08Cam+NFSRK
vkC5HHxO/BlS1d7iNzU7fG84ECm/f6LILJiEE9MKNkGXlD5FrqfAAjYWDxodNoPy
3OHYKb7QrQ8+QPhszJyrmMoFwVfaZJGxQbHLdZyBTVv20HFK6XQoLVsEzGji99R/
a+aPrkQu3GFWJOltaMWByv7nY08G6nHl1BpK7CyzrEvOLOhBA53B1pVWGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHRQnWiac947sitoaZLFw1WsEFreMB8GA1UdIwQY
MBaAFN7ekaD7H03ReQDQbbbogzb3i1wFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8yMzIxZDYtYmQ2Yy00YjJhLWFmODMt
MjFhNzAwYzcxMTlmLzEvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS8yMzIxZDYtYmQ2Yy00YjJhLWFmODMtMjFhNzAwYzcxMTlm
LzEvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWsoG87bk
oGPz1Rdidu1Fb5i9MgRzisdpNR7akVbwkXoXKuVlpPpMS4si3ITctd5u/isa9k4V
mK/4LyiP4HXTRXZCU/kOvUHOzDIG7g4BMb4J4/Dvzo2Dql807qOngCk7+ZBLj0OL
c0aFTx/UqMcfWH6GGQ1UhWN0GTDzG2q7/R5lJEO71V807Vv1cVerTNhrd/slpXzY
yw+SQFxiWjUhG5e3Wh7WSFqyTPMwKy+v0fkNqZzKsMcBYoQgXq/5ToKL8CzVm9Hv
ypyEfKterHVTAnHSPrrxgXTMpcyVRqkHUBbf8gvnzvXTAkOs5m9DsTz1oOD0k3Vi
KGiH4/WD+i8n8g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:28:22 2026 by rpki-client