Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
File:                     d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft (raw, json)
Hash identifier:          EHVah0OcmR4x8Mu6kliXyYyNAcJdSwLJVtcJOh2HPb4=
Subject key identifier:   ED:56:85:8E:5B:C6:C7:17:67:17:63:76:0A:F3:CE:00:8A:38:AC:A3
Authority key identifier: 77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
Certificate issuer:       /CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Certificate serial:       019E1E3550D96610866327ECA1692841227C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
Manifest number:          10E3
Signing time:             Tue 12 May 2026 22:01:10 +0000
Manifest this update:     Tue 12 May 2026 22:01:10 +0000
Manifest next update:     Wed 13 May 2026 22:01:10 +0000
Files and hashes:         1: 0gkjksOno670ocIFMbRjSDKIvKQ.roa (hash: 7fdQyOsucl3w/CcG9UB31TgK1ZGG4pW/88lMHFnh6NI=)
                          2: 91KPHlggwTaeQm7B9Z-AqzP9EBQ.roa (hash: IkXK2vJL4pQnTxIekZE8OSCq0z8UL2BTuoyyjhTkN4c=)
                          3: QcWwPEpe-P-scFp6iy4Zd8jPfjk.roa (hash: n7+TsjKCJzLkUr9shTyI7r/icRNSvOD74GCCpk5ZSUI=)
                          4: SOoKX4cNuYJIPao636suM6QbecU.roa (hash: AmP+tcOlMZhqBPlPO/PnVy1DrGZoadzcvOYUXfRfWD8=)
                          5: Tz7z7nnpOo-_7_49pU8TRQgx4D4.roa (hash: fX3u4dH9kXlBUEKXajJ7/RMZrYzYaBeRsNw5GTo8Vhs=)
                          6: d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl (hash: enMtN8drpySwG9Bycqw79RKWvYD1he2s3iOWRgnCk/I=)
                          7: qBcLlywaD6m7lZXiWermZkxeWVc.roa (hash: auQTPfDUcRzWJ8RTz3z6nOVCI/Q9IjlAOX2YpbeFNMA=)
                          8: ve-jf9EP-jZkCjaun2Gx06psfDo.roa (hash: 5muddW+OaJvatwuoYErV6aaVeMSYh2Ga8iL+J5a6G3k=)
                          9: xdAaexAUdUDttJM21F7tUlAz2vs.roa (hash: VedRkQ44jOEPcPIUd0dHiyi/hpTJ8KF1xUzmzLpT6Aw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:50:d9:66:10:86:63:27:ec:a1:69:28:41:22:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77eda8f726a69b504de994943b0a5f2308c2a96b
        Validity
            Not Before: May 12 22:01:10 2026 GMT
            Not After : May 13 22:01:10 2026 GMT
        Subject: CN=ed56858e5bc6c717671763760af3ce008a38aca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:48:f2:90:cb:f9:2f:a9:5c:d0:b8:47:e7:22:
                    80:5e:2f:6d:1d:08:0d:1c:18:df:d0:c4:61:aa:13:
                    0e:8e:1a:7d:a7:3b:91:88:24:76:9a:b7:7a:70:4b:
                    00:03:28:96:6b:59:1e:9e:e5:ab:fc:5a:75:ac:b8:
                    23:18:23:2a:f6:6d:5f:54:0f:33:2d:4b:3c:f0:b5:
                    9b:81:92:b3:39:48:44:61:20:ef:63:43:7f:11:d7:
                    1f:20:78:7d:7a:d9:26:c3:ee:66:a9:26:95:c7:76:
                    77:2a:99:0e:52:0b:84:55:9c:69:8d:d6:a4:b8:b3:
                    3c:b3:9e:2e:20:21:ee:54:5f:cb:7d:ab:65:46:18:
                    77:c9:07:61:1f:05:05:92:6e:0d:61:5d:95:ce:1b:
                    ab:39:9d:6c:ca:91:68:07:17:48:57:e8:61:07:eb:
                    05:1a:6d:42:10:d3:c5:36:6f:d5:12:a6:5f:45:97:
                    1c:66:b2:cb:61:df:8d:46:0c:3b:0c:da:1e:3e:c4:
                    5a:f3:2b:bd:ec:44:bf:8e:7f:3a:15:f4:37:d2:d6:
                    14:26:4c:e6:20:c6:75:25:b4:4e:ff:95:f5:bb:28:
                    43:0b:c9:39:91:4e:b9:05:8f:28:0a:84:6d:77:c8:
                    51:1e:9c:3c:b6:08:9a:f7:6a:7f:ff:61:1f:13:1c:
                    fd:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:56:85:8E:5B:C6:C7:17:67:17:63:76:0A:F3:CE:00:8A:38:AC:A3
            X509v3 Authority Key Identifier:
                keyid:77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:ab:66:a0:c1:24:09:bc:ce:2b:c1:04:1f:10:82:f2:1a:98:
         6d:8a:c5:48:2b:a6:ec:ab:43:01:e9:02:de:4e:01:ec:63:5f:
         e2:d9:38:9b:07:69:9f:f5:15:64:80:71:03:2c:7b:41:fc:b5:
         37:65:c3:0b:2a:85:07:e1:ec:c1:61:ed:af:15:fc:4f:be:a9:
         c5:d0:17:9f:60:6b:ba:2d:5f:85:83:cd:98:38:20:0c:44:0c:
         c7:6e:9e:73:e5:84:e6:39:a0:89:83:e5:0e:87:b1:b2:a6:d7:
         95:2c:86:60:c2:37:51:0c:5f:8c:0b:33:7d:30:40:57:e5:79:
         90:61:7d:28:3b:59:e3:80:63:6c:9e:19:7c:73:94:1c:10:56:
         18:57:11:c8:44:e0:28:f4:55:55:9f:3a:07:a1:7e:06:47:ee:
         e2:be:87:fd:35:de:d2:1d:8c:56:26:80:f1:44:ae:58:31:0c:
         a3:d4:e5:69:6d:ff:8c:ad:c9:20:e2:53:36:c0:49:6b:a3:d6:
         5c:5e:9c:81:b9:f8:46:b5:c1:8b:d0:00:8a:d5:61:7d:d4:08:
         a0:27:36:b9:bd:e3:be:ec:85:da:80:61:90:c4:35:25:87:ac:
         63:2f:f2:45:1c:45:af:f4:7e:f6:cf:db:07:2e:4a:aa:da:39:
         f3:69:31:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:28:24 2026 by rpki-client