Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.mft
File:                     YVdYrqR51PMqnonpgI8w7fwjsuc.mft (raw, json)
Hash identifier:          jXNkXKtJFLmqZ2/uvt911cEFOLFdg8Xyqh9pN3RNQ4c=
Subject key identifier:   89:C0:A8:A3:87:DA:EB:B6:B1:14:EF:51:1D:80:EA:EC:AC:A4:87:B4
Authority key identifier: 61:57:58:AE:A4:79:D4:F3:2A:9E:89:E9:80:8F:30:ED:FC:23:B2:E7
Certificate issuer:       /CN=615758aea479d4f32a9e89e9808f30edfc23b2e7
Certificate serial:       019E1EA2D86F4A973DEE7C5EC6F8954982CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.mft
Manifest number:          0131
Signing time:             Wed 13 May 2026 00:00:49 +0000
Manifest this update:     Wed 13 May 2026 00:00:49 +0000
Manifest next update:     Thu 14 May 2026 00:00:49 +0000
Files and hashes:         1: AVMt1IkFQkpQTFPhcJiPQebWyaw.roa (hash: qqeo1sr3KufApWxnZYHLgx99+UAI5SwVQeJY/6Jm77o=)
                          2: HTkWVqwWdYMU9-z901Fkn7FF9qw.roa (hash: 84JM0NxqvFzDNFSOBlDrmX34vQu0On4QXXv7AseJZbk=)
                          3: MMWviOYCBW0u-v9YnjmnhatFDV8.roa (hash: yRtMl95uh8M4yTrzp5OTDyFY8UopBvd6bRvc/jRLsfc=)
                          4: YVdYrqR51PMqnonpgI8w7fwjsuc.crl (hash: KbRFU8Zh6CW7TfWNQKC2mz9xFT17rj7dOYQ0RY1cTBk=)
                          5: _VWZ0XjMvcGoTelbVe1k8IzzHlo.roa (hash: G04H0qYQyU9/pfzI/sNJzq68+ieZrRS73Fbf1e3vIW8=)
                          6: cCA0wjgUUO3sAdPTJXUOJCpOGaU.asa (hash: vuAaHA0d+fmntVENPlaiPGFPGkTEzsB/M+vM35Fie4s=)
                          7: hLbS1YYILQ9sQxDeGkNOA1MpSJs.roa (hash: aCviuUzfEy79q4aOge+wEpAQjNz6H04AGobOXXp8iek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a2:d8:6f:4a:97:3d:ee:7c:5e:c6:f8:95:49:82:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615758aea479d4f32a9e89e9808f30edfc23b2e7
        Validity
            Not Before: May 13 00:00:49 2026 GMT
            Not After : May 14 00:00:49 2026 GMT
        Subject: CN=89c0a8a387daebb6b114ef511d80eaecaca487b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b7:b7:0e:b3:e6:7d:61:34:0a:6f:8e:7a:20:
                    c3:89:da:81:38:9c:d7:4b:c4:df:7b:1f:0a:68:9b:
                    4e:4f:ba:b6:96:85:48:57:ac:8e:bb:65:c7:7e:48:
                    5c:8c:f0:9b:21:2a:cb:13:23:8d:2e:b8:46:68:ef:
                    ab:8e:c2:96:97:58:bd:10:be:ac:e2:c2:e0:04:72:
                    f2:11:56:73:2b:8b:70:c7:34:68:3b:fa:46:33:e8:
                    c4:5a:4d:a4:5a:99:bf:7a:53:64:c7:b6:d6:2a:d4:
                    77:fb:7b:b9:95:9f:b4:d3:6c:f7:b3:b9:15:bf:a6:
                    ee:c9:ef:1f:61:2e:e4:cb:00:fa:15:6c:97:f6:fc:
                    be:ed:d5:42:7e:f8:d9:66:e9:75:ba:a5:cb:87:95:
                    a6:1f:1a:96:a7:b9:a3:a3:47:fa:ed:b0:ab:13:b0:
                    fd:51:01:bc:58:13:c5:6e:c4:ba:08:3c:fa:73:7e:
                    8e:a9:c6:61:e0:ec:83:90:eb:2e:44:01:fb:99:14:
                    5c:4b:de:a0:68:a5:47:8d:ed:d8:f6:1d:d9:8b:c0:
                    ef:80:aa:36:0a:75:01:40:b1:41:db:60:ed:b0:a2:
                    22:25:40:b9:25:b2:91:88:ed:54:a5:6d:0c:9d:62:
                    94:51:86:22:69:31:8b:1f:d2:bf:44:28:0b:c1:c4:
                    a2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:C0:A8:A3:87:DA:EB:B6:B1:14:EF:51:1D:80:EA:EC:AC:A4:87:B4
            X509v3 Authority Key Identifier:
                keyid:61:57:58:AE:A4:79:D4:F3:2A:9E:89:E9:80:8F:30:ED:FC:23:B2:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:d4:30:64:a6:e2:ca:68:c0:a5:d3:81:75:67:03:41:c5:9e:
         d8:3a:1c:c5:5b:b6:75:06:43:df:15:3d:4d:09:1e:6a:65:dd:
         2e:dd:4c:32:38:cd:06:f4:78:41:d8:c7:8f:01:41:6e:29:f0:
         f6:3c:07:87:8d:e8:cb:46:4f:1c:3c:90:a9:cd:4a:33:95:01:
         1d:d4:d0:2d:4a:c1:b1:8c:20:e5:92:ef:a4:3f:5b:9d:25:32:
         27:d0:f8:b2:df:0f:2f:c8:a5:1d:b3:9a:83:ba:7a:d7:25:51:
         59:30:57:0a:36:f9:bb:22:f6:54:39:b9:53:22:6c:4f:10:2c:
         31:53:3f:61:de:9a:9d:fb:46:18:13:ff:11:c3:b5:e4:58:40:
         da:ca:ca:fa:c7:8c:14:54:d8:7d:67:9d:47:fe:9d:83:78:ed:
         24:d7:d6:29:c5:5f:2c:c6:d0:10:20:ac:bc:4b:19:1c:1b:46:
         2e:6a:75:c4:0f:97:b0:be:fe:86:bd:a5:84:82:98:45:33:73:
         35:34:ab:9d:dd:ae:db:d0:6a:f3:0d:31:5f:16:56:46:1f:78:
         ec:43:78:73:24:b3:9a:25:8b:71:6b:1b:21:59:c1:67:6f:8c:
         8d:d2:53:73:1b:bb:04:b4:b1:8b:0f:2c:82:8c:a7:78:ad:6a:
         08:9a:0e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:55:06 2026 by rpki-client