Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft
File:                     miM7vd_kOGRvWG8IXl3w15vfufw.mft (raw, json)
Hash identifier:          5cOgyxBLg4RnyuvBGo8bpq6h5TM3QKMV0tsQgmDlrN4=
Subject key identifier:   E5:AA:A9:E7:90:0C:74:A3:F0:25:B7:85:CE:03:0A:AA:B8:8B:74:79
Authority key identifier: 9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC
Certificate issuer:       /CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc
Certificate serial:       019E1F10FE2A5A66EAC78D5E8134152C4F07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft
Manifest number:          07FD
Signing time:             Wed 13 May 2026 02:01:07 +0000
Manifest this update:     Wed 13 May 2026 02:01:07 +0000
Manifest next update:     Thu 14 May 2026 02:01:07 +0000
Files and hashes:         1: M1ruMNKluNAuiHKd8f6PvAhDGEs.roa (hash: FWsTJhEBrkq8kPBWZ62T1F7ClTwy4cYS4tWh5TLbeTA=)
                          2: XNKWPCMOPLauToaa-Vtz2zcauoc.roa (hash: luJuVPoWx92bH75pBWbCMtwrgqr+Km6/eamqOW1HDZc=)
                          3: dyhz1TfOcl672ykR-umzk8d_7AQ.roa (hash: i2scR6hBPf9EaO7J0DMnFp1+UeNi6vv8mMyfEjaxgaY=)
                          4: miM7vd_kOGRvWG8IXl3w15vfufw.crl (hash: 6JjmDiWLTWbyiuiVHDdzq+nJSTCDAqSv5wVs6eW6SCQ=)
                          5: nl8rJp2Gx045j4pPDWegyHxSDoU.roa (hash: 2GNCXLXhx5YXmc3JB/+CLbWieU0ZOSqkjHUYlGnPA30=)
                          6: vhhE0LlaMoAC65mEN3TyEobLF50.roa (hash: Us5rGsyQlFj4bRY6YlCqwzJno3k3/qLxqTpPkFS4SJ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:fe:2a:5a:66:ea:c7:8d:5e:81:34:15:2c:4f:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc
        Validity
            Not Before: May 13 02:01:07 2026 GMT
            Not After : May 14 02:01:07 2026 GMT
        Subject: CN=e5aaa9e7900c74a3f025b785ce030aaab88b7479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c2:a9:7d:82:39:ce:d5:af:f3:d4:60:05:04:
                    ed:e6:29:f2:e4:02:10:2a:25:ec:23:4e:c4:5e:2f:
                    51:a8:16:97:d2:ed:a4:ff:4a:aa:ad:42:22:12:35:
                    d4:9a:a5:9e:7c:2e:32:64:0a:50:cc:6f:ee:d1:cd:
                    13:4e:87:d2:e6:f3:08:77:4c:a3:16:fb:6c:a1:ce:
                    4d:cb:f4:90:38:d9:d3:f4:07:90:f6:81:21:0e:14:
                    76:c3:b4:3b:59:9a:4b:0c:9f:a6:d5:ff:6f:12:f4:
                    86:7e:77:52:71:10:7f:ca:d4:f3:cf:d3:bb:b1:e7:
                    08:c0:c3:48:08:26:94:14:b0:ae:e4:98:6b:bd:2f:
                    17:8b:fd:51:60:31:b6:89:64:01:fa:60:0f:0b:8c:
                    5d:2f:f3:57:1f:50:53:70:9f:f6:e1:74:bf:d8:5c:
                    9a:a2:75:e0:5d:7b:8e:61:9b:d8:0c:61:d6:8e:78:
                    ea:ee:22:75:54:f1:10:e8:f1:95:5f:0f:e8:a9:58:
                    6c:ef:3d:2c:34:5b:b6:8f:87:55:79:a2:86:b2:17:
                    47:f9:d5:17:73:d5:21:06:e9:ba:7e:f2:fb:e0:38:
                    71:24:8e:74:a6:9d:16:06:62:8c:22:03:77:ca:9d:
                    19:47:26:2d:30:ae:19:03:2e:92:31:1b:e8:3e:0b:
                    ac:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:AA:A9:E7:90:0C:74:A3:F0:25:B7:85:CE:03:0A:AA:B8:8B:74:79
            X509v3 Authority Key Identifier:
                keyid:9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:97:aa:61:02:72:f8:5c:24:ab:9e:4f:5e:65:7b:ca:ec:79:
         2b:4e:d3:dd:6f:38:23:8a:e2:e9:17:ca:37:b3:b9:e7:c6:17:
         8f:4a:93:fb:d9:88:77:08:80:88:42:18:9f:2a:99:4d:55:a5:
         38:31:82:9f:74:cb:49:56:67:0f:96:cd:67:0a:f5:1e:72:9e:
         d0:6f:48:f6:3a:c2:d2:db:f6:6e:cc:64:ad:a5:7b:d0:58:e7:
         af:a8:64:30:4c:87:e3:63:62:1b:a4:0f:e1:49:ca:50:e6:4a:
         d9:84:94:58:b7:a4:8b:a0:0a:af:6d:a6:ba:5e:57:45:96:e0:
         cf:d5:7c:dd:e6:05:d0:9e:8f:5e:73:b8:28:64:44:3a:b5:d1:
         5a:e9:d8:cf:1c:f9:eb:13:ac:2a:63:f7:17:3a:d1:53:12:55:
         75:6c:ad:6e:3b:11:df:6d:ba:d7:33:e1:06:2a:f3:7d:cc:0b:
         90:af:a4:0c:b5:2f:a9:f8:c2:1c:f6:32:79:6a:50:49:8e:e1:
         dc:8c:a1:79:bf:f5:c1:97:9d:35:bd:1e:78:3a:f8:cd:c9:6e:
         7a:3f:93:da:08:ba:50:e9:0f:ed:b6:05:3e:a7:eb:40:0c:41:
         4e:fa:93:d0:58:d8:58:7f:9a:e7:7f:f9:1d:70:6e:4a:3a:d3:
         ff:78:49:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:42:21 2026 by rpki-client