Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
File:                     mryiPS4rrR-1eI3bX1pvx6tiyiA.mft (raw, json)
Hash identifier:          RvMCqpKuHn+6u8qQz+WfqWASlymJNEUfhRE6++ajyn4=
Subject key identifier:   84:69:56:9B:CE:DA:20:09:BA:C0:90:CC:76:52:02:A4:E7:F7:DC:64
Authority key identifier: 9A:BC:A2:3D:2E:2B:AD:1F:B5:78:8D:DB:5F:5A:6F:C7:AB:62:CA:20
Certificate issuer:       /CN=9abca23d2e2bad1fb5788ddb5f5a6fc7ab62ca20
Certificate serial:       019E1F10A8B16E3566479AACB72E294B3DA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
Manifest number:          02D7
Signing time:             Wed 13 May 2026 02:00:45 +0000
Manifest this update:     Wed 13 May 2026 02:00:45 +0000
Manifest next update:     Thu 14 May 2026 02:00:45 +0000
Files and hashes:         1: cAKVqYBd9IcAL6r2ZvxM_Qj1ndI.roa (hash: XqFaKsdiSRNsnwScS0QPlL53huZcp/xfhEBOIjWXbkk=)
                          2: mryiPS4rrR-1eI3bX1pvx6tiyiA.crl (hash: rvIvzfiX3HSO1hjs+Ic3lk6liH2bcKsDFjKICK2zqq0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:a8:b1:6e:35:66:47:9a:ac:b7:2e:29:4b:3d:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9abca23d2e2bad1fb5788ddb5f5a6fc7ab62ca20
        Validity
            Not Before: May 13 02:00:45 2026 GMT
            Not After : May 14 02:00:45 2026 GMT
        Subject: CN=8469569bceda2009bac090cc765202a4e7f7dc64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:62:d7:a8:94:39:ec:a4:d1:74:3a:c8:83:45:
                    5f:92:f8:d4:7d:f7:ab:4a:06:f6:1c:e1:47:8a:e1:
                    24:56:90:02:c7:f5:ea:6c:f1:c2:60:12:fb:79:27:
                    e4:ca:ea:71:49:49:d7:23:ff:20:c2:44:95:f0:c9:
                    69:0e:44:0f:12:8a:4d:27:c7:84:49:33:0c:af:dc:
                    fa:df:bf:c3:f0:77:8b:f0:ac:34:4c:31:18:3b:18:
                    c3:02:a8:63:c9:af:c0:34:a9:42:ff:10:08:54:27:
                    ff:dd:39:ad:5d:2c:b4:21:d4:b3:20:40:a1:b3:23:
                    53:7d:58:c0:7c:9a:60:c9:cd:9e:ec:ba:b9:73:cd:
                    00:25:d7:8a:fa:eb:23:72:c6:30:e4:34:7a:c4:d1:
                    35:27:4c:d5:39:1e:18:cf:81:70:a6:84:89:95:72:
                    f8:78:27:fc:f4:37:3b:8b:f2:29:28:4b:8b:f5:bd:
                    55:be:8e:14:e0:c7:e1:e5:4e:d7:a3:f2:a6:6c:68:
                    ad:bd:d3:68:8c:3d:38:3a:8b:e9:1d:62:02:cf:a6:
                    82:f6:c2:3b:a9:18:2c:b6:c0:3f:f3:ed:3f:b2:31:
                    ca:75:fa:83:6f:ea:cf:a1:9c:d7:3d:74:9a:d8:bf:
                    90:8a:32:53:10:18:99:e1:7b:a8:39:45:1f:61:1c:
                    4c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:69:56:9B:CE:DA:20:09:BA:C0:90:CC:76:52:02:A4:E7:F7:DC:64
            X509v3 Authority Key Identifier:
                keyid:9A:BC:A2:3D:2E:2B:AD:1F:B5:78:8D:DB:5F:5A:6F:C7:AB:62:CA:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:c3:76:3f:95:98:60:61:08:fa:60:ee:d9:12:85:22:ec:24:
         8c:83:af:7b:95:75:6f:c1:11:16:79:61:6c:4b:70:6c:2e:02:
         fe:ac:15:50:e7:51:f6:bd:69:f7:30:a7:92:2a:2d:2c:54:ed:
         aa:9d:c4:88:b9:05:2d:bc:3c:2c:d1:cc:81:46:2d:4c:11:d4:
         bd:ff:ac:ea:45:48:de:6c:5b:be:55:39:3b:62:37:6e:71:a6:
         fe:90:fe:1b:e7:f6:d7:99:9c:cc:8b:9c:7b:39:3c:c0:31:77:
         45:7a:e3:e2:61:d8:10:40:ab:c9:ea:aa:94:ab:eb:5a:01:0e:
         09:d7:91:45:bc:f4:01:fd:22:ef:24:9a:27:0b:57:91:fd:51:
         52:c5:d5:9f:12:b8:57:01:ac:63:12:43:90:21:ac:39:f7:4e:
         de:66:67:32:54:9d:c4:01:cf:dd:da:7f:cb:b2:40:ae:40:84:
         79:91:c4:a8:d7:6b:ae:5b:70:bd:56:e2:ad:3d:67:fd:45:49:
         a2:37:34:bf:1b:56:c2:e7:45:07:5e:a4:43:a6:15:e7:3b:85:
         5a:e5:87:f1:17:19:b8:69:3a:da:3d:63:04:71:e4:f6:ec:40:
         0c:9d:c2:f2:00:dd:18:54:d4:a9:ee:62:5a:2c:f3:fb:70:2e:
         f9:6b:f9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:34:02 2026 by rpki-client