Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
File:                     x0xgresM1XaM91b1YrG1zFucGAo.mft (raw, json)
Hash identifier:          Lm+xn9RR/4SL7TB5jsSmnn7/8gU4mkWxe6c0wR+F4PU=
Subject key identifier:   0F:54:E6:7F:62:AA:14:67:39:67:6A:E8:3B:5D:4D:79:5B:1C:21:3A
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Certificate issuer:       /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial:       019E1D231CA4247AD73DE9D8EDCC9B12A1AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
Manifest number:          143F
Signing time:             Tue 12 May 2026 17:01:40 +0000
Manifest this update:     Tue 12 May 2026 17:01:40 +0000
Manifest next update:     Wed 13 May 2026 17:01:40 +0000
Files and hashes:         1: 0-d96R17ltUSy8fr0RUugwI-BVw.roa (hash: T+9pJSDxipOo4VQ90dksmKw5tDBPPo/BiqzTM/apWGc=)
                          2: 1RkuJiMIA6c-YKXkOiXgVUr3tk0.roa (hash: VMbTIDUnS0rJprZQrwM8fOUQBhB/Ygv1jHJEt/ApBqE=)
                          3: 6MXPr8n2FVwdA-Vt6oqBdRGu_Mg.roa (hash: NZX54zdIf0Wm5ZnYmNdMli+Cz2MVmUZnuyAev1D/9/E=)
                          4: 94VCH5-yUsBwicojbjgImHgRoJA.roa (hash: JkHlAtKE0WPUSQeAnVh91wdkspZbKJDK7LSBm6EyhHc=)
                          5: BFdJc-7yBxarSw_UwCSCI2_nZzY.roa (hash: Mfwh/Ri4oMFWHDOwaf0KLrBxq/7lyDjZHbminSO7kww=)
                          6: FlKDqhsB-kDJgOhLmCv4DNUnsd8.roa (hash: JZ21wYzfPfkSwGCQh1OtjrZna2xAaeFagGp1aClwZy0=)
                          7: GQwQ4NJBvyg0S5cirOINdsK2QUo.roa (hash: hPCA2eD/WAsZM79tgjhqtOTZx90myfRAeK+dN2Vg5Wo=)
                          8: GWOMCgc6frfuXzWmR3iYp-MVmSA.roa (hash: Anj9LGw2xp0TmbMPDVVyvGqohtYkFBACqEE6N9Y1dWM=)
                          9: KwEEYIOx6dCBO8O6EXuJrP2SxEA.roa (hash: FJXGRBaEUrnNNyE8GBPLymN44URpQA1gYBmnWCwP478=)
                          10: Opa484uAlsVB9CtOuyZoIiqmIy8.roa (hash: 6u4ASe0ldiNjEJ3vKFZgisfLG676P+RimGMZcC3Ur7M=)
                          11: Tx9FMpngkKKRbOgn_YsDb4v7X18.roa (hash: BOevx6RbQLerHQQRMHC1Yu0hT6Exer/t3dYk9fLXFik=)
                          12: XpQW9Vko4NnnhhqSe6YnUmv4WzE.roa (hash: 1hl0BmRk0nZLkQjPQnXw86SjORpjVK0UnQhzFB2uADI=)
                          13: YjIsM4Uno7ILYs53JtLji9bmdRM.roa (hash: T20Rm6nai402HDN+LFukerdCiUhxMnqEcLW4G63DHyI=)
                          14: _QfreQ9EqD9ss46rDX_UENkjJZk.roa (hash: zfUdwflwTagWZ9n75pKYGfQVwgMmnMON42g7fWb4fZ4=)
                          15: bjtqDJXlOz7pCpEjOBsxaBiuwec.roa (hash: NF7IuS5ng6fRX6mAKKyUm5b/IR1xDvuUmKt4bVjV978=)
                          16: c585sEb31KrksO5MlyuNt-hfuHU.roa (hash: fJ78hp+mIYgaOdDbv0g//N4rP8oKIJRANU6rLFZmpT4=)
                          17: e0CW_4oZRrryGAZlyRnhpcoXNPo.roa (hash: 7QHbtai0zkaLG8Cn4EhJepZwZsFysU2qR4KGXEevHnE=)
                          18: kd2-Thgfb2MvE6yw6VsCA8zzSfQ.roa (hash: yP3N4xFcOT8W3j9k2ZJ+fBiTsgbDKcU1wngastwJJcc=)
                          19: qOxZbeQcH3nmMujSCPVKvHl_hII.asa (hash: ASwjCTML65AJz8INpKtIJ9HsxUbvMPMUPCfyNp/UqwE=)
                          20: qu9muxyupj11J0vkCGd6UL4_YU8.asa (hash: ma8CUett5NKo6WA/WUa9lgNux61RUdveClhcObpC3iI=)
                          21: x0xgresM1XaM91b1YrG1zFucGAo.crl (hash: BaOlRqR8YFHX9Ope++O6udaQmKOxwzJkRtIwWsTzyIM=)
                          22: xIYF8mI26v6vzxb3X_nxcD6q9Q8.roa (hash: f2x35r/ZRXZy2klzCvK8jZiQ1j2C+y+64vR3ljojbc0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:23:1c:a4:24:7a:d7:3d:e9:d8:ed:cc:9b:12:a1:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
        Validity
            Not Before: May 12 17:01:40 2026 GMT
            Not After : May 13 17:01:40 2026 GMT
        Subject: CN=0f54e67f62aa146739676ae83b5d4d795b1c213a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:06:a9:46:e2:13:92:d9:36:50:ac:82:98:60:
                    51:6b:17:b6:45:97:c5:31:0d:60:c6:11:94:bb:05:
                    2b:01:89:bc:82:c5:f0:12:3a:23:49:9d:c8:c4:ee:
                    f8:89:c8:7c:ae:7d:f4:b1:74:5e:6d:32:26:3e:24:
                    49:3d:d1:04:9b:7e:32:b1:0e:3b:2f:34:d0:e6:2b:
                    29:89:bd:f9:34:ef:b9:05:77:2f:06:9f:a2:94:0f:
                    55:9d:0d:94:a9:42:c2:40:46:fd:b2:e6:23:ba:12:
                    2e:2c:5f:e2:71:dd:cc:20:71:96:cb:42:ef:ab:06:
                    56:09:bd:a1:f2:a1:01:e4:3a:bc:e3:59:de:ec:89:
                    18:c9:f2:eb:c1:d6:9c:96:a6:5e:23:20:6d:4c:9e:
                    16:fd:af:1f:de:29:aa:dc:d9:25:cb:96:8f:29:17:
                    f1:54:99:06:6e:e6:d5:34:c2:8e:9f:93:84:01:a9:
                    36:0b:43:da:42:4c:a4:41:db:3c:48:73:fc:4b:be:
                    45:1d:5d:24:5e:d0:39:23:6e:bf:ff:6e:31:b0:37:
                    e2:db:e5:b0:7c:79:03:8d:a8:a4:5e:75:6d:01:b7:
                    17:1d:c2:4d:a5:e2:7a:1e:65:9e:d7:d4:c5:a7:7c:
                    ef:de:47:8d:3e:a4:ca:61:a1:aa:04:e5:c9:5b:72:
                    52:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:54:E6:7F:62:AA:14:67:39:67:6A:E8:3B:5D:4D:79:5B:1C:21:3A
            X509v3 Authority Key Identifier:
                keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:9a:5c:b6:9c:27:32:64:7a:03:86:41:75:17:b7:98:47:60:
         9a:ae:92:63:1e:06:37:d2:b3:c6:72:32:27:a8:6d:b7:03:9e:
         30:c1:75:a6:be:64:e0:6a:fe:24:df:92:b8:a4:37:69:0d:fa:
         1d:fb:b9:c9:8e:c5:1f:1a:73:f5:7b:b3:2e:9d:c0:60:6b:8c:
         c0:ae:9d:16:05:cb:b9:28:5a:25:90:b5:dc:93:16:bc:94:8f:
         95:80:7a:ac:79:c5:5b:b8:59:d9:6e:c7:e6:03:27:58:9c:04:
         46:2d:6d:df:a4:b5:ff:e3:4d:d8:9e:b3:78:e0:c6:0f:99:cf:
         09:69:ca:3f:b9:f0:9b:f2:ef:ad:a5:8b:c1:a3:c9:5c:e3:7d:
         ba:72:07:39:b4:c2:ed:e3:b6:cf:ea:66:1a:b6:2b:d5:58:71:
         19:9b:91:3f:c9:cc:bb:45:cd:d2:bc:db:be:cc:4c:6b:9b:d3:
         e6:ad:b3:ef:df:cf:92:9a:38:19:f9:3c:60:f1:9d:30:38:a7:
         18:b8:be:c5:6a:c7:87:f7:be:94:15:23:dd:c7:84:49:4e:ca:
         90:37:5c:4a:b0:36:ba:52:4d:ce:a0:0c:62:7b:8f:9b:54:57:
         40:f0:87:f7:86:d2:18:b8:42:eb:6a:b5:6a:a1:15:7f:8d:1b:
         93:45:67:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:19:38 2026 by rpki-client