Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
File:                     yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft (raw, json)
Hash identifier:          7Z0TuRAjFtXP/QE99VxQH8hBj1yZaAJEdjdW/KDC4qE=
Subject key identifier:   23:10:5A:A4:CA:99:CE:3A:1A:3A:56:68:96:26:5D:68:F1:BA:23:39
Authority key identifier: C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94
Certificate issuer:       /CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94
Certificate serial:       019E20C831032979110839ABE9135E3E762F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
Manifest number:          157B
Signing time:             Wed 13 May 2026 10:00:50 +0000
Manifest this update:     Wed 13 May 2026 10:00:50 +0000
Manifest next update:     Thu 14 May 2026 10:00:50 +0000
Files and hashes:         1: Q9Bl2Y8XynFhwHzSJcPaVyeQxvU.roa (hash: PqOxTXkE1hZGBT5c4H4bbRh8w/mimKAW3aD/Vceb+Hg=)
                          2: SHeQcX4koxBQRv_Fnf7btNJU99g.roa (hash: 8unaGmLOmfi1pzpYrPstmZfA+HzBWFpq+VVnPVsq10I=)
                          3: gpyVlC0l_arGjmVVCGk8FwUeXCo.roa (hash: atjXbXi2DUOCPxkI2GIM/Oz+gbwXdF8QQwJzid/42jw=)
                          4: yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl (hash: WlljR2W/BN7B+Pa9nmpfTqSOlS6kMn62UzbyB/zS178=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:c8:31:03:29:79:11:08:39:ab:e9:13:5e:3e:76:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94
        Validity
            Not Before: May 13 10:00:50 2026 GMT
            Not After : May 14 10:00:50 2026 GMT
        Subject: CN=23105aa4ca99ce3a1a3a566896265d68f1ba2339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:af:a7:5a:e7:58:f1:a7:66:2d:5a:cd:cb:f2:
                    cd:be:e2:49:f9:68:23:bf:b7:fd:80:e6:23:4e:51:
                    d1:bd:1b:cd:f9:31:5c:21:d1:2c:04:e4:c6:af:3c:
                    a7:db:1e:55:a3:55:8e:1b:7e:df:74:22:8e:7b:b4:
                    2c:04:8e:0d:4d:e5:8d:10:5a:f4:87:0f:19:74:7e:
                    18:6f:88:7b:47:0d:5a:56:de:81:aa:12:a6:1a:ea:
                    e4:7f:80:c5:17:78:fa:2e:8f:bc:20:2e:0c:78:bc:
                    e2:79:2f:e8:71:e0:4b:2d:72:97:59:ff:b4:83:c8:
                    5a:5c:fe:4f:50:ec:9d:cc:f1:78:b3:86:d1:13:59:
                    74:39:cf:93:3f:5a:f5:b5:7c:a7:cd:b5:40:88:26:
                    83:0b:db:aa:40:c0:55:e8:64:d3:86:fc:f0:0b:b9:
                    5f:ef:67:99:22:f3:44:b2:e6:53:fb:e8:78:d9:a3:
                    0b:4b:8b:ca:ca:a9:6d:5d:4b:6f:4c:2d:ce:e8:5c:
                    cf:62:6b:c7:28:bf:30:da:fb:a4:e7:ad:cf:9c:10:
                    ce:1c:24:9b:12:33:5d:5d:87:1b:03:85:8e:81:24:
                    8c:2f:83:62:f0:f8:23:50:c8:c5:ea:03:b5:e8:da:
                    bb:5d:32:34:ac:e7:df:7b:a9:ba:3d:c0:5f:a9:29:
                    db:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:10:5A:A4:CA:99:CE:3A:1A:3A:56:68:96:26:5D:68:F1:BA:23:39
            X509v3 Authority Key Identifier:
                keyid:C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:73:ef:a0:51:68:4a:f8:1f:2e:2b:20:fb:09:6e:f1:24:9b:
         db:dd:07:18:f8:68:b5:4f:aa:9f:0f:b2:2c:3d:10:51:4d:ec:
         26:a5:5b:ba:60:e5:59:23:fa:01:e1:0f:60:9f:25:1f:6a:b7:
         bc:cf:1a:41:8d:a5:b0:88:25:0f:f2:09:a7:98:48:b6:f2:1a:
         86:9a:7a:b5:13:c8:d3:ae:56:51:16:82:6e:69:23:61:8d:96:
         f4:39:ae:ac:98:ff:e2:b5:64:e5:f4:d0:47:c8:e3:2a:15:47:
         22:03:db:aa:5f:b2:79:09:2a:d7:2a:be:7a:02:dc:79:0c:24:
         d1:58:c3:39:f3:9d:6e:8b:c1:10:4e:62:61:2b:4c:2d:7f:b2:
         2b:b7:a4:a4:48:b4:c5:00:60:4f:f1:4a:1c:91:f5:62:b0:4e:
         4b:88:47:4f:60:ea:3c:5f:71:37:87:f6:78:06:04:04:8d:3a:
         4a:3c:a0:3c:7e:9b:0a:c9:6d:71:22:73:47:5c:55:e0:98:af:
         28:10:dc:dc:bb:ce:9a:af:bc:b2:14:e0:82:3d:f9:0a:00:2a:
         60:6c:cf:0f:f8:f8:6c:b1:7b:63:b4:74:83:b6:46:2e:46:96:
         31:aa:c8:01:0f:0e:51:fb:94:47:54:27:60:9a:88:8c:1b:d2:
         9a:a6:49:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:25:57 2026 by rpki-client