Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
File:                     T4rqLwJfSVvqzufOWoggUZ3aE3A.mft (raw, json)
Hash identifier:          josCxCCQgKs5Yc/9v3OvzpTti/UaznnBTqfiPvNh7xc=
Subject key identifier:   3C:D8:0C:00:B4:F3:36:07:F6:88:B4:11:8A:F1:A7:09:37:1E:37:38
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Certificate issuer:       /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial:       019CAA5865E44DCDD0D125C5E39D800B0BED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
Manifest number:          18E5
Signing time:             Sun 01 Mar 2026 17:00:45 +0000
Manifest this update:     Sun 01 Mar 2026 17:00:45 +0000
Manifest next update:     Mon 02 Mar 2026 17:00:45 +0000
Files and hashes:         1: 1zpG2CVrxsMORx6-f7bFYATXDp8.roa (hash: ZOZ+1A/5qrE+UhYF92TopbAqYAeLlDGmriRx3ZRkiq8=)
                          2: 3DKyG4yqxD-RCxqPWmT7N7olh-A.roa (hash: PJ5W+9gaDI7CdrxxRKkNpvIJyqlsEgvjqhtTWlW7+xo=)
                          3: 4BT3ESnzNjCT2x59JVbAAXxSXAY.roa (hash: O8CcngTVUlHleqwd4kGt0w16qDAwdr4oH0nwRI5FfLI=)
                          4: 67Hu1VCqZOSeOiCM6FEEFd3iXlE.roa (hash: Him9pl9KpdgeG8GWKYKiLJdFav7i0xf6FzUlhcxDHRg=)
                          5: AQd6696DS58WSqKOJB3_PgGA6ww.roa (hash: LGXodTKuNu4kXpvG5ujn8tNfaAjmgD5yZwsMvUZmhpE=)
                          6: DFqAchiwJnzlSG4eyo-vOSeRNeI.roa (hash: N2RIPmZbJ5fy1derB4IMwjZbzNeDMo48frV/EdBPTzc=)
                          7: Ezkbpw5h6Yu188ximBXledMTyHY.roa (hash: EUfk52t0TP+il+Ji1SToM3ssr1h7ZowDd/it1ELPNV0=)
                          8: M96SaOtXf2BYyJPHvAneKZXSlX4.roa (hash: Fjx5Jib6Xzn9dBAanulC/6wjKgvgmy9B+Oq0M30jiGo=)
                          9: N0E_F_u9h5bIU-j9MGpdicwRJM4.roa (hash: 23BfC+EZdJUIXPiNf0+Gr0wVhGOB4qpNJ1OtcS1XZzc=)
                          10: NQ3alsbcYrDD3Id4_ZbBebDtKMQ.roa (hash: R7bDblUywN+L5+T5OsDfB/grAiWD1P3KTdK+6VLq0W8=)
                          11: Np-SgsMbvNtUeV1Q78-Ul_LgtAI.roa (hash: FpZOxRp9m2d8Wj5Wy6a90uOf4hQ5Liav+WcFTy+XdBk=)
                          12: T4rqLwJfSVvqzufOWoggUZ3aE3A.crl (hash: rNP/boa/hPPgZ5FBtBtnELdaykmXrnwZDxeAdZy4vkw=)
                          13: UW3uCirPlSHTXeq2kWhdNXEEF_A.roa (hash: SLhda1CULfByTMm1GHCHLQiMUOu4j8DhX2dtlcfjO6M=)
                          14: ZrACWZQMbi6NxGaCnX9YMBCOCN8.roa (hash: OlqjwKoWnqX+XWjymWXMgysC4FA6tYi6yFNdSVG5cWA=)
                          15: fEr16b1lvokT-7p2GF-BJ0nwjqw.roa (hash: 4kMeEbpMFnB2cA2N94f/QrIzzEsMpOa1QK/37ueLqzY=)
                          16: iGAec5WLgxQuZO87yGrv6vRcxNk.roa (hash: qbtBIjuoPTdaV1pke2Rgv7Qz00a7lyCwRwSyFcFeCb8=)
                          17: kSRDcXV5BduSfvL7CkkTWshA1dU.roa (hash: tuGJ9p+esAzUMHyIoxPT4iHzxY3yItPA7UzoeT2/0vQ=)
                          18: mkAVPuJI8QOGwHX046ylOVj6YeQ.roa (hash: cHuseTitZM61+PjKXgr2SvysGLK0bdK5xs/hORXpxOQ=)
                          19: okpXovGo8Qws_PPRtlsVVUmZZzA.roa (hash: 4oR/V429uTC5kWQN94QEJqxEv4CSp9VQuHnF9qGLwmM=)
                          20: qyFRBJyuib1PnIx-vXa3UO6rHbk.roa (hash: ttUZYHflFlcNbkH75tZXAFD7K0f4LBSVLHQuKhH+hJo=)
                          21: sZQD0TfJ8HC_2qGUYRIygeuNHq0.roa (hash: KOmrBoIDja+ViB1TQrWYGvEgnzLPHGkGzbBf9gl0eY0=)
                          22: wl3GFHoVFq2V6agPvVTqKcV6mcw.roa (hash: kC952UxlZ4u8JejZZo0O0+1EVkE3lenB3kDD7eQXlTY=)
                          23: xh9-cYUUKhW8R7RtZCiBjbPkinU.roa (hash: KHkDJpMlqbbJXAmtu6AWC6oa3xuKdiclk8iuepf/pBc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:58:65:e4:4d:cd:d0:d1:25:c5:e3:9d:80:0b:0b:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
        Validity
            Not Before: Mar  1 17:00:45 2026 GMT
            Not After : Mar  2 17:00:45 2026 GMT
        Subject: CN=3cd80c00b4f33607f688b4118af1a709371e3738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:43:4e:b3:25:af:e7:6a:7a:1a:cf:e1:46:e5:
                    00:66:41:63:19:1b:85:c6:80:c9:f3:4b:bc:b2:c2:
                    62:9c:b8:94:e8:e1:a1:38:23:0a:e4:3f:9d:a4:01:
                    8d:2a:d6:88:d9:d7:35:1b:91:56:59:04:02:5a:58:
                    19:a8:c8:85:1a:47:d9:98:c4:63:6f:45:83:ce:f3:
                    94:15:a0:8e:00:c7:52:1e:6a:dd:79:6e:47:58:77:
                    08:46:37:fb:24:59:36:c6:89:83:51:59:a8:b2:fa:
                    22:30:a9:83:e0:29:d9:f6:5b:11:24:3a:f1:dc:c0:
                    cb:a7:74:2b:71:db:57:0c:75:a1:bf:29:a3:e6:99:
                    00:05:27:bd:43:b1:50:05:a5:30:8b:15:63:3a:39:
                    9f:a5:d9:8a:bb:26:69:22:61:f3:db:29:50:3c:bc:
                    d4:c4:22:49:87:c0:f0:5e:c8:d6:f1:b8:98:28:91:
                    15:5b:44:7f:10:a3:5c:7b:39:be:45:9b:b8:75:34:
                    22:6c:87:20:d1:a1:ef:7a:d8:57:47:51:10:aa:21:
                    94:b5:e4:88:d9:35:74:fd:41:4a:55:3d:b3:66:31:
                    1a:2d:57:92:cc:9d:7b:ea:df:fe:f4:ef:9f:a3:69:
                    98:cd:71:05:59:8d:49:43:08:7d:1a:9a:13:88:30:
                    82:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D8:0C:00:B4:F3:36:07:F6:88:B4:11:8A:F1:A7:09:37:1E:37:38
            X509v3 Authority Key Identifier:
                keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:15:c2:99:69:e8:e8:45:5b:58:f5:72:2f:60:2c:2c:d2:04:
         6a:c3:37:e1:f1:a7:f9:20:a4:2a:e3:60:c4:ab:2d:9d:1a:24:
         1f:7e:c0:92:dc:8f:a7:55:8e:b1:8e:f2:4f:5f:69:9b:94:3a:
         c5:1d:d1:7a:07:99:5d:22:6a:57:8d:c6:5c:42:1a:46:dc:07:
         9c:79:87:66:71:17:b0:f3:b6:f2:0e:b1:31:3c:af:9c:96:a3:
         28:69:01:4b:48:1c:39:23:01:a0:a2:15:f0:1e:60:3e:bc:80:
         6b:a3:ba:84:c3:e6:dc:1d:15:0e:3e:a3:b5:f9:5d:ca:e3:bd:
         9e:66:3b:09:3b:db:41:ad:ad:ee:fb:f2:e7:e0:66:54:ae:c0:
         f6:f1:85:72:37:69:a5:b6:a9:80:38:fb:18:77:65:5e:94:90:
         9a:0b:50:a2:13:f9:6f:45:c6:44:91:10:05:8b:55:72:d3:a2:
         be:c4:e7:ce:c7:7a:76:b3:b1:79:06:ce:6c:21:a1:9f:a3:77:
         61:eb:81:33:2e:84:dc:14:f6:5b:64:b1:d9:f4:84:ad:32:6d:
         68:5f:b1:5b:d5:e9:7c:f4:28:78:09:e6:9e:18:ec:f1:0a:15:
         66:fa:fa:70:94:09:e2:6e:44:1f:4c:22:a7:e0:40:de:d2:e7:
         42:a3:b2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:46:21 2026 by rpki-client