Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.mft
File:                     rMSPelkSBYjUFw6igV5q5RvmvP8.mft (raw, json)
Hash identifier:          PHDV6zt6Bx5dDeE3YuRHvJaNGIxk7bYciaf+C0py1pw=
Subject key identifier:   FF:70:99:5B:AC:D2:A3:90:BE:20:39:F1:79:4C:EA:68:42:84:EA:98
Authority key identifier: AC:C4:8F:7A:59:12:05:88:D4:17:0E:A2:81:5E:6A:E5:1B:E6:BC:FF
Certificate issuer:       /CN=acc48f7a59120588d4170ea2815e6ae51be6bcff
Certificate serial:       019D29613D749E80DA67173FCFBB65C677C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rMSPelkSBYjUFw6igV5q5RvmvP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.mft
Manifest number:          091E
Signing time:             Thu 26 Mar 2026 09:02:11 +0000
Manifest this update:     Thu 26 Mar 2026 09:02:11 +0000
Manifest next update:     Fri 27 Mar 2026 09:02:11 +0000
Files and hashes:         1: ALJo2VNkRBohxnFTRb76HQlek4w.roa (hash: oL6ieDNpqz/DwLKJF9Y4lrQM4pX1GlcAf2nFecyaNSM=)
                          2: CuL1FtDvKUET0Va4MczyQRNitSg.roa (hash: B1PuvgUekTJwx+aEl2KBPhFT8zf9S+xcyLzD5s+DNJ4=)
                          3: HC7tyOvxboDjqwx-hgqeRMBVpMU.roa (hash: Oz5SaZbGS2ERy2H8xd9OcxKLPUZL5L8TnBN+RGFNYFc=)
                          4: csyaDpxp-qaEn_l9rVIAGfKG0Fs.roa (hash: 5QfFyBjLv9B3y4ndXnMzTJt//5iA5RA3jDs8H4cBXBI=)
                          5: dJyXOvb9Sr_md9UabI56Iqgc9jc.roa (hash: Jp93biw+G61x1KGOGNadD/xDlSoqq+aMm/ZN8I5dsuE=)
                          6: rMSPelkSBYjUFw6igV5q5RvmvP8.crl (hash: qUNocJ4zGlW3Oi3/LjLkZQVO5+nGeJSMTHR9H9BjHbI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rMSPelkSBYjUFw6igV5q5RvmvP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:61:3d:74:9e:80:da:67:17:3f:cf:bb:65:c6:77:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acc48f7a59120588d4170ea2815e6ae51be6bcff
        Validity
            Not Before: Mar 26 09:02:11 2026 GMT
            Not After : Mar 27 09:02:11 2026 GMT
        Subject: CN=ff70995bacd2a390be2039f1794cea684284ea98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0a:d0:28:da:72:52:f9:c2:c0:e4:53:cc:bb:
                    ae:af:24:d1:2b:42:8c:bf:3f:c7:75:f9:02:87:b5:
                    c4:c2:04:c0:f3:f6:c9:17:7f:f2:ec:e0:5a:7c:3f:
                    5a:73:9b:7f:f9:5c:27:1d:7b:1b:63:00:58:9a:da:
                    7f:36:9f:7d:63:75:80:f1:9d:3b:e0:64:e4:d0:6d:
                    4f:5c:86:fd:d6:39:be:05:e7:db:a6:82:0e:0f:79:
                    dd:bd:bb:3d:a8:0b:3f:8e:f6:7f:48:f2:d9:9d:6e:
                    b5:08:ae:24:d5:6a:a3:e4:04:16:61:3c:a2:47:12:
                    1b:a1:f6:bb:7b:e9:03:5f:17:46:6e:23:cb:65:53:
                    85:6d:0b:20:05:1d:8b:a9:a0:c8:68:9c:95:7d:98:
                    be:08:a8:9a:fe:07:ea:14:29:eb:f1:67:8b:b9:a5:
                    7b:95:93:4a:c7:30:17:17:29:05:81:ec:e7:57:12:
                    fa:53:58:9b:57:6d:75:fb:67:7b:22:23:ef:c4:a0:
                    bf:7a:9c:04:02:42:31:d8:a3:0f:25:a3:e0:36:bc:
                    48:55:0a:b7:ee:26:31:1c:d5:70:c0:23:08:31:36:
                    f3:8f:99:a3:1e:f0:82:4f:17:b6:50:0c:4a:50:d6:
                    09:49:f3:5b:68:4e:9b:12:f6:32:fd:ad:24:68:e8:
                    eb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:70:99:5B:AC:D2:A3:90:BE:20:39:F1:79:4C:EA:68:42:84:EA:98
            X509v3 Authority Key Identifier:
                keyid:AC:C4:8F:7A:59:12:05:88:D4:17:0E:A2:81:5E:6A:E5:1B:E6:BC:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMSPelkSBYjUFw6igV5q5RvmvP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:28:e6:af:c7:76:8b:ac:a8:99:8d:c4:13:dd:b5:20:72:be:
         a7:32:8f:52:c8:a2:08:ca:0e:1d:1d:3f:bf:a8:38:15:93:9b:
         b0:dc:e9:90:a9:cc:96:73:06:3c:8e:1a:52:85:72:38:44:de:
         50:1d:b5:38:da:b1:e7:4c:97:2e:eb:53:2d:14:04:5d:90:bf:
         0a:f8:93:b2:a9:4c:17:53:94:f5:61:5d:cc:a0:b4:6a:50:eb:
         40:5c:b6:c0:a3:b4:57:dd:2b:8d:d6:ff:98:63:c2:3b:11:02:
         21:6b:4c:d6:94:2c:74:07:9f:e0:50:b6:d3:68:85:e2:d2:68:
         41:26:8d:ca:1d:d6:99:c6:e3:35:52:4c:35:97:a0:3f:be:a9:
         2e:67:71:d1:55:02:0d:42:a0:77:7f:76:55:43:0c:74:44:3f:
         9e:bb:a6:5a:26:6b:74:29:cf:2d:d9:b1:fb:1a:e8:8f:d3:b4:
         0d:a6:9d:78:1e:f9:6b:4d:aa:2a:c9:b2:8a:4c:c0:ac:5f:3e:
         77:a0:07:de:4a:7e:fc:32:00:ec:9a:9d:4f:a8:7a:ca:37:56:
         78:7e:45:f9:eb:c2:a0:52:ce:48:b2:bc:6d:d3:e5:cd:47:87:
         34:67:42:b6:30:94:16:66:48:8d:fe:a8:5f:21:14:76:3b:cc:
         87:a8:68:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:55:39 2026 by rpki-client