Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
File:                     M1ylITYiJtA8GCkAPYHUmKqDjzM.mft (raw, json)
Hash identifier:          A8kWPLDtZXfmNYAaBbXqDoJKfcdSBMrrSc96gzQ8v+Q=
Subject key identifier:   74:DA:95:FB:E6:06:6D:A3:A5:2F:21:F9:34:D2:9B:DC:62:F4:76:39
Authority key identifier: 33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33
Certificate issuer:       /CN=335ca521362226d03c1829003d81d498aa838f33
Certificate serial:       019E1E360107ED6D58D98A9883419B18C685
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
Manifest number:          128A
Signing time:             Tue 12 May 2026 22:01:56 +0000
Manifest this update:     Tue 12 May 2026 22:01:56 +0000
Manifest next update:     Wed 13 May 2026 22:01:56 +0000
Files and hashes:         1: 9aA3iLX_dTChIPCO6PgksQti4b4.roa (hash: fqGRMmb2kUR03lGLsFWhMcKnX+bdih5acXmK3pBtYbE=)
                          2: Exg0UvgeAfe-AZQtA_LavkNZKKU.roa (hash: gKA++u4Fw/ljBBOhyevOEbxsqlYiJYqc2cMPG6ua8TU=)
                          3: M1ylITYiJtA8GCkAPYHUmKqDjzM.crl (hash: kzEqsftsuvtQXN4zjBLMHqVnWyzEXjPSQ28h730lRGg=)
                          4: XvuMMh6_b9Q_-y9zoflvfhhJ8cU.roa (hash: arKO35haYoOypMHOByST819307xwbCJtuXRuiew9430=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:36:01:07:ed:6d:58:d9:8a:98:83:41:9b:18:c6:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=335ca521362226d03c1829003d81d498aa838f33
        Validity
            Not Before: May 12 22:01:56 2026 GMT
            Not After : May 13 22:01:56 2026 GMT
        Subject: CN=74da95fbe6066da3a52f21f934d29bdc62f47639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b7:5f:ef:62:d6:1d:18:d2:82:26:84:ee:f6:
                    5f:a7:7e:da:35:8c:a2:e4:df:17:b1:10:d0:aa:98:
                    09:54:49:49:69:24:3e:76:e1:bd:35:5e:22:cc:23:
                    b5:71:59:52:f8:de:c2:6f:ea:11:70:2c:cf:43:5d:
                    4f:af:c7:62:a7:11:44:26:89:a3:14:b9:3f:eb:cb:
                    70:3a:d2:62:bd:81:07:08:99:fd:e6:4f:ba:9c:ee:
                    40:cd:fa:c7:45:f5:44:02:16:8b:7a:d0:d3:df:70:
                    c2:f2:72:36:89:2c:b6:c3:9b:99:69:6c:81:52:2c:
                    a7:77:e8:b1:25:5d:5c:1d:52:55:56:73:83:d2:b5:
                    c7:88:08:0e:bb:95:9a:a5:68:2e:89:a7:7b:ff:54:
                    c2:c8:cd:f4:09:f3:d1:79:b7:43:f6:9e:ee:59:be:
                    fc:db:99:44:d7:8c:21:b9:9f:0f:31:30:8f:68:6c:
                    d1:dc:c1:36:ff:a5:3b:14:f1:f3:2e:26:09:7b:75:
                    33:3c:29:b5:12:1c:dc:af:13:5a:70:5c:33:e7:aa:
                    12:60:0b:f2:02:1b:ed:a4:62:ca:62:44:ec:32:8e:
                    a9:a4:4d:ed:24:5c:62:6b:c1:74:b0:cd:7e:f9:27:
                    1a:d0:61:eb:64:ce:cb:f8:2b:be:93:ce:da:28:dc:
                    5d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:DA:95:FB:E6:06:6D:A3:A5:2F:21:F9:34:D2:9B:DC:62:F4:76:39
            X509v3 Authority Key Identifier:
                keyid:33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:29:e1:d0:ad:dc:b1:ee:15:3d:9d:12:10:54:e0:da:90:37:
         71:48:d0:57:36:d5:30:12:be:c3:8c:64:d6:81:b1:54:41:e8:
         08:e2:d5:f8:f4:9f:1b:af:97:b1:14:bf:39:03:1b:0c:2c:8a:
         1a:b0:97:9e:9a:73:e7:ae:2b:ef:e5:12:d1:d4:2c:eb:ea:46:
         3c:ba:4f:cb:6d:b0:4a:59:5b:29:4b:d0:44:25:04:06:a1:6b:
         7c:98:69:de:37:83:c4:3c:1b:bf:f2:f0:4b:0c:e6:c7:78:22:
         06:fc:4c:53:82:2e:68:4f:f0:c3:4f:76:e8:eb:f8:1d:f3:83:
         ee:80:26:bd:f6:a5:c9:90:97:53:44:bc:f6:61:e4:db:57:5f:
         50:e0:4c:0e:e2:c6:26:43:83:59:65:b2:a8:98:b9:ae:27:6b:
         32:f7:91:17:d7:d0:c9:bd:ee:e9:2f:0c:31:88:02:ba:41:b7:
         92:92:22:d2:6d:af:74:03:91:39:e9:0c:1b:2c:49:0c:6e:51:
         b8:dd:49:38:5e:be:de:c6:7a:13:21:32:fb:53:3d:e1:b1:ef:
         dd:74:8a:0f:7f:94:58:15:64:92:d2:91:3e:d1:b4:df:85:50:
         f1:37:99:bd:04:9b:c5:d9:e8:d4:43:40:9a:1c:96:75:6a:b8:
         0d:58:59:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:19:08 2026 by rpki-client