Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft
File:                     E5Mngu53WJkEBPocz7CewjqGEj8.mft (raw, json)
Hash identifier:          WiQj7AsWE+yQswSLKZiWxUbkUPcGHfGu/tFvU11gReE=
Subject key identifier:   32:8D:6E:71:C9:0D:58:E7:4F:EC:C7:01:CA:0C:FC:E9:4A:7F:13:40
Authority key identifier: 13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F
Certificate issuer:       /CN=13932782ee7758990404fa1ccfb09ec23a86123f
Certificate serial:       019CAD902AC6787C1F1BB414AE4CF0205E47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft
Manifest number:          1495
Signing time:             Mon 02 Mar 2026 08:00:32 +0000
Manifest this update:     Mon 02 Mar 2026 08:00:32 +0000
Manifest next update:     Tue 03 Mar 2026 08:00:32 +0000
Files and hashes:         1: 0Q84qOO4ry7FkxPcizoEKZ6DKC8.roa (hash: tXRjTxM4LPMCnq48NDLgFh3fKsng+M+yxheQCDwbdAY=)
                          2: 8TnB_Z89mvNE4vBXTZiFEl23tYE.roa (hash: 2ClpJ+kajbpfZOtIDtzImmEyyO+3DqegmuU+x4tETNI=)
                          3: E5Mngu53WJkEBPocz7CewjqGEj8.crl (hash: FrrtQcx0ZhgJqFKp3Sa0hNEP5AzDHKAuCoibqraPL0o=)
                          4: LZPVWazUJHKsVwXB0Q5QFOX_U4I.roa (hash: e8wyE9wUQVdgZv92jtZNgewyht9dy7i4a6DuplyRPmE=)
                          5: MND_dKAKKJnBQ5YOgdUUordUHkc.roa (hash: sZmYkAqh1xIbLU4926/2tbMnM7Gkt1Cig6oktdNYObA=)
                          6: _LkpRRARlMX2HSdxwIO5dOZICSc.roa (hash: J2+f3Tq3pA1xUwTt3sMx5nZNmV2E6UloLE/wFxA+mpU=)
                          7: yw4JQH3GwSpr0HqMrPTktCoX9Yc.roa (hash: C5hf4s/QdWtojHyCQ9hOA8bfaE8MjslJ2kdsyGmhhwc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:90:2a:c6:78:7c:1f:1b:b4:14:ae:4c:f0:20:5e:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13932782ee7758990404fa1ccfb09ec23a86123f
        Validity
            Not Before: Mar  2 08:00:32 2026 GMT
            Not After : Mar  3 08:00:32 2026 GMT
        Subject: CN=328d6e71c90d58e74fecc701ca0cfce94a7f1340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0b:ed:a6:8c:23:f1:f4:c4:19:79:92:63:dc:
                    4f:f9:93:79:51:9c:f0:b6:5f:d2:db:47:00:c2:05:
                    cc:46:24:09:1d:61:25:82:f5:1b:27:0c:0b:1b:6c:
                    bb:91:4b:8e:38:0b:83:2c:f1:7e:fe:30:e4:21:51:
                    d0:23:e5:ed:90:48:15:f6:eb:c4:df:01:8c:09:0c:
                    93:38:6c:ce:05:21:3d:d5:bd:c4:38:0a:11:c6:b4:
                    0c:7a:89:19:f5:71:61:52:46:d0:3f:86:fb:f4:29:
                    57:d9:6e:77:6d:d4:f5:12:d0:3d:0a:c4:de:f6:f5:
                    b1:aa:15:0b:5d:6d:af:7e:90:0d:c6:6a:a6:a0:e4:
                    7a:fa:92:ca:27:5b:f9:9c:d9:bc:9e:7c:98:6c:03:
                    3c:c2:4a:7a:07:db:3b:c3:d5:5b:1a:30:0a:03:71:
                    dc:32:63:80:21:c1:3f:19:ba:5a:66:1b:7e:2e:ef:
                    22:68:99:3f:51:7a:04:59:52:61:93:db:28:bc:79:
                    48:b4:20:45:6c:fa:79:ad:64:21:68:41:1f:e6:70:
                    07:01:c6:70:8d:43:34:bb:5d:51:82:cc:57:dc:cc:
                    5d:3c:90:0b:07:eb:ea:1a:c0:9e:23:3c:d1:55:ac:
                    66:d0:c0:9f:2d:ef:52:9e:5a:5b:b4:4f:aa:bf:a2:
                    c9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:8D:6E:71:C9:0D:58:E7:4F:EC:C7:01:CA:0C:FC:E9:4A:7F:13:40
            X509v3 Authority Key Identifier:
                keyid:13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:1e:5e:f1:b7:40:d0:94:5a:60:db:ab:b2:89:d9:c4:7c:9d:
         93:d0:ac:fc:fe:13:66:9f:90:e7:e0:51:b0:86:c0:80:d4:7d:
         ed:90:4d:5b:d8:58:10:0d:ef:dd:54:53:8d:56:66:67:0b:86:
         aa:ed:a7:10:f3:f7:94:4a:de:37:c4:29:1b:97:59:40:6f:aa:
         22:9c:2f:cf:c6:05:d5:05:04:d6:9f:ce:ad:b4:71:8c:81:78:
         92:8d:c5:4f:ca:76:e4:b9:03:cb:b2:d1:bf:d5:87:cd:d2:0d:
         65:77:7e:84:73:a1:da:46:f2:fe:74:e9:7c:b6:d4:09:9b:4a:
         2d:56:df:cf:71:6f:f6:ef:ce:a9:e1:bf:70:af:ac:3c:b0:5b:
         37:8c:ae:76:00:8c:5f:a2:ff:1e:0b:89:ef:2e:d8:67:a4:17:
         86:a9:fb:0c:0d:b9:ca:9e:28:c7:ae:61:e1:a2:b1:c5:db:be:
         60:b8:7d:0a:63:4e:16:74:01:62:48:8f:e7:dd:3e:2c:ec:3a:
         8c:a1:23:bb:28:a3:17:1d:82:4b:5a:b0:0b:a4:1e:87:8e:20:
         06:cb:ae:ae:c8:ff:9c:2b:7a:79:c1:47:55:d2:57:91:45:9c:
         fc:08:6f:54:ea:4f:a2:9b:31:09:ab:d4:9c:5b:39:90:ff:07:
         6d:ae:2b:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytkCrGeHwfG7QUrkzwIF5HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzOTMyNzgyZWU3NzU4OTkwNDA0ZmExY2NmYjA5ZWMyM2E4
NjEyM2YwHhcNMjYwMzAyMDgwMDMyWhcNMjYwMzAzMDgwMDMyWjAzMTEwLwYDVQQD
EygzMjhkNmU3MWM5MGQ1OGU3NGZlY2M3MDFjYTBjZmNlOTRhN2YxMzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwvtpowj8fTEGXmSY9xP+ZN5UZzw
tl/S20cAwgXMRiQJHWElgvUbJwwLG2y7kUuOOAuDLPF+/jDkIVHQI+XtkEgV9uvE
3wGMCQyTOGzOBSE91b3EOAoRxrQMeokZ9XFhUkbQP4b79ClX2W53bdT1EtA9CsTe
9vWxqhULXW2vfpANxmqmoOR6+pLKJ1v5nNm8nnyYbAM8wkp6B9s7w9VbGjAKA3Hc
MmOAIcE/GbpaZht+Lu8iaJk/UXoEWVJhk9sovHlItCBFbPp5rWQhaEEf5nAHAcZw
jUM0u11RgsxX3MxdPJALB+vqGsCeIzzRVaxm0MCfLe9SnlpbtE+qv6LJYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDKNbnHJDVjnT+zHAcoM/OlKfxNAMB8GA1UdIwQY
MBaAFBOTJ4Lud1iZBAT6HM+wnsI6hhI/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTVNbmd1NTNXSmtFQlBvY3o3Q2V3anFHRWo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS84Mjg2NTItYWRkZi00ZmU4LTlmZTYt
NGIxZjYxNjUzZjNkLzEvRTVNbmd1NTNXSmtFQlBvY3o3Q2V3anFHRWo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS84Mjg2NTItYWRkZi00ZmU4LTlmZTYtNGIxZjYxNjUzZjNk
LzEvRTVNbmd1NTNXSmtFQlBvY3o3Q2V3anFHRWo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmB5e8bdA
0JRaYNursonZxHydk9Cs/P4TZp+Q5+BRsIbAgNR97ZBNW9hYEA3v3VRTjVZmZwuG
qu2nEPP3lEreN8QpG5dZQG+qIpwvz8YF1QUE1p/OrbRxjIF4ko3FT8p25LkDy7LR
v9WHzdINZXd+hHOh2kby/nTpfLbUCZtKLVbfz3Fv9u/OqeG/cK+sPLBbN4yudgCM
X6L/HguJ7y7YZ6QXhqn7DA25yp4ox65h4aKxxdu+YLh9CmNOFnQBYkiP590+LOw6
jKEjuyijFx2CS1qwC6Qeh44gBsuursj/nCt6ecFHVdJXkUWc/AhvVOpPopsxCavU
nFs5kP8Hba4rOQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:11:40 2026 by rpki-client