Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
File:                     9LdppT3YY1LTRA8iK9-QfPCcLbo.mft (raw, json)
Hash identifier:          QnYvvCBfikMoE0JvukoMm+vcevZNJVJpWGAr/HW+SWQ=
Subject key identifier:   8C:D8:63:D9:3B:F1:DD:CB:A5:52:B7:AC:C6:CE:6A:91:F6:C7:E2:F7
Authority key identifier: F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
Certificate issuer:       /CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Certificate serial:       019CAAFD3B5DB3E02B335FB2167CEAC26C94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
Manifest number:          1865
Signing time:             Sun 01 Mar 2026 20:00:48 +0000
Manifest this update:     Sun 01 Mar 2026 20:00:48 +0000
Manifest next update:     Mon 02 Mar 2026 20:00:48 +0000
Files and hashes:         1: 9LdppT3YY1LTRA8iK9-QfPCcLbo.crl (hash: mZF5aKVuSOCjUJISTbBNALJR0kLIqyMa4QyBfKm8LKo=)
                          2: NUHMSZ91VQ9aijP6NP65PNKnp5g.roa (hash: yD96gdBLazMXGrH4L/cZUia8UrghJkd3RyMhoxg7K64=)
                          3: VUzs5PHBwv_IZAQ0YfQuuthXe9o.roa (hash: VhBI1T/5AecSPfuyckIzymKWt28IdtuZyGt1Fke7X9o=)
                          4: caVc06HNLW27H40D2ZS_Rm7EWak.roa (hash: fii3aeyQKBbFgN7LjEGw9LVQBRaholnm8HqVAqTYdaM=)
                          5: jXiR7XjXhvI9XgVtJlQtRoEQEuY.roa (hash: KVbYTEO9c7jfQrSlpqs7ND4XndUrbw5w4184ONdqawM=)
                          6: xqtPQpmSw8BM5RyqcwITHIfXLSc.roa (hash: hGp4Jg8lf+rbg8QFIZWOCXC5lP9F5Y5cQtGXi8sQzqY=)
                          7: zweolzwrHnk3xZX75Vx487OApyI.roa (hash: fsFWViG1G306jQcDvI1DY5zG2KP6QpQyeNFqGF9udOI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 20:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fd:3b:5d:b3:e0:2b:33:5f:b2:16:7c:ea:c2:6c:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
        Validity
            Not Before: Mar  1 20:00:48 2026 GMT
            Not After : Mar  2 20:00:48 2026 GMT
        Subject: CN=8cd863d93bf1ddcba552b7acc6ce6a91f6c7e2f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:76:3c:db:52:d1:99:12:fb:33:46:ff:84:f5:
                    7a:1c:c4:a8:55:b8:09:5a:5d:06:49:df:69:90:45:
                    aa:7e:58:c4:16:78:f9:8c:fe:8d:3b:dc:7b:8b:b1:
                    30:e7:a5:dc:23:7e:58:4c:f7:9d:78:1b:e7:b8:a6:
                    8e:82:1f:7c:bc:42:ef:75:99:59:11:2c:41:3c:b8:
                    b2:fc:56:16:09:15:e9:35:72:e5:4a:55:f9:25:9c:
                    07:ae:97:ea:2b:02:94:63:32:98:77:bd:bd:1c:ff:
                    19:03:c6:09:80:19:da:c6:67:ab:26:52:64:79:65:
                    e0:96:ab:65:1f:2b:94:3a:6a:53:12:0e:9c:fe:a3:
                    1e:46:82:da:50:f5:a9:c8:9f:45:64:77:06:80:e9:
                    50:84:3e:73:be:bb:3d:d2:da:cb:a4:5b:0e:92:50:
                    af:78:03:a2:ed:91:d5:8a:8c:61:8c:19:ac:80:f8:
                    48:00:0b:09:af:b7:ec:84:4f:b5:fb:61:93:e0:b4:
                    07:d1:5d:5e:38:7e:05:4d:62:72:7b:3b:0f:53:ef:
                    73:70:3d:33:95:c2:39:1c:24:04:e8:f2:e7:36:a7:
                    e6:72:f4:dc:53:d7:4f:b5:27:9d:f8:55:8c:85:47:
                    18:a7:d4:74:4e:e9:6c:a1:37:38:a7:bf:ea:53:78:
                    60:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D8:63:D9:3B:F1:DD:CB:A5:52:B7:AC:C6:CE:6A:91:F6:C7:E2:F7
            X509v3 Authority Key Identifier:
                keyid:F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:4a:bb:9a:0b:97:f4:35:31:a4:19:1b:27:2f:66:4a:35:a2:
         c2:c7:93:d1:55:b5:ce:b3:3f:a6:df:db:91:52:35:02:8d:69:
         c3:0d:26:d7:7c:13:e4:10:c5:a4:d9:87:23:6c:41:31:d8:88:
         39:fe:4e:86:f1:3a:1c:7e:29:5e:c9:5a:0f:b2:08:1b:47:aa:
         30:aa:5b:64:c8:ca:23:ef:ef:fb:1b:ca:cc:28:5d:21:ba:03:
         a6:4b:a0:01:35:32:c8:b0:1d:6a:56:e7:fa:22:13:43:c8:c7:
         16:c7:d9:36:7b:bf:17:ac:e8:3b:43:a9:5e:2f:b4:73:21:1a:
         7f:2d:0d:15:9e:13:cc:9d:d3:d1:f2:32:01:e5:42:26:b2:fa:
         c6:5e:f0:c8:7d:35:ce:6c:d9:f4:f9:da:2f:dc:d2:6f:03:47:
         ef:fa:f8:7d:d6:7f:70:5a:58:04:51:46:c5:05:3c:f7:0e:ba:
         d0:d9:b6:ab:41:c8:61:cf:c4:2f:63:bd:26:8f:eb:3f:72:c5:
         d3:54:ae:40:ab:4b:c5:2c:1b:9a:3d:3c:45:2f:63:b9:f0:74:
         0c:56:b5:de:3f:91:9d:9f:d3:82:11:03:e7:4f:7e:0c:cf:44:
         21:14:04:f3:af:62:b9:44:22:2f:26:98:07:51:28:14:44:29:
         2a:dd:50:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/Ttds+ArM1+yFnzqwmyUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0Yjc2OWE1M2RkODYzNTJkMzQ0MGYyMjJiZGY5MDdjZjA5
YzJkYmEwHhcNMjYwMzAxMjAwMDQ4WhcNMjYwMzAyMjAwMDQ4WjAzMTEwLwYDVQQD
Eyg4Y2Q4NjNkOTNiZjFkZGNiYTU1MmI3YWNjNmNlNmE5MWY2YzdlMmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3Y821LRmRL7M0b/hPV6HMSoVbgJ
Wl0GSd9pkEWqfljEFnj5jP6NO9x7i7Ew56XcI35YTPedeBvnuKaOgh98vELvdZlZ
ESxBPLiy/FYWCRXpNXLlSlX5JZwHrpfqKwKUYzKYd729HP8ZA8YJgBnaxmerJlJk
eWXglqtlHyuUOmpTEg6c/qMeRoLaUPWpyJ9FZHcGgOlQhD5zvrs90trLpFsOklCv
eAOi7ZHVioxhjBmsgPhIAAsJr7fshE+1+2GT4LQH0V1eOH4FTWJyezsPU+9zcD0z
lcI5HCQE6PLnNqfmcvTcU9dPtSed+FWMhUcYp9R0TulsoTc4p7/qU3hgowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIzYY9k78d3LpVK3rMbOapH2x+L3MB8GA1UdIwQY
MBaAFPS3aaU92GNS00QPIivfkHzwnC26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83MGQ1MGYtZmYzYy00ZjYzLThkZWMt
ZDdjMzZjMjdjMDg3LzEvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83MGQ1MGYtZmYzYy00ZjYzLThkZWMtZDdjMzZjMjdjMDg3
LzEvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlEq7mguX
9DUxpBkbJy9mSjWiwseT0VW1zrM/pt/bkVI1Ao1pww0m13wT5BDFpNmHI2xBMdiI
Of5OhvE6HH4pXslaD7IIG0eqMKpbZMjKI+/v+xvKzChdIboDpkugATUyyLAdalbn
+iITQ8jHFsfZNnu/F6zoO0OpXi+0cyEafy0NFZ4TzJ3T0fIyAeVCJrL6xl7wyH01
zmzZ9PnaL9zSbwNH7/r4fdZ/cFpYBFFGxQU89w660Nm2q0HIYc/EL2O9Jo/rP3LF
01SuQKtLxSwbmj08RS9jufB0DFa13j+RnZ/TghED509+DM9EIRQE869iuUQiLyaY
B1EoFEQpKt1QvA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:47:06 2026 by rpki-client