Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft
File:                     preJsy4W6d0vcFExGdx36mH_Hgk.mft (raw, json)
Hash identifier:          E2QRSpnci/xNSWbEW2K1Qyir6FIFB6R8kHiCkJheMc0=
Subject key identifier:   6F:66:1D:E5:15:93:C6:7C:5C:E0:1C:B3:CC:9D:59:F9:B2:74:18:17
Authority key identifier: A6:B7:89:B3:2E:16:E9:DD:2F:70:51:31:19:DC:77:EA:61:FF:1E:09
Certificate issuer:       /CN=a6b789b32e16e9dd2f70513119dc77ea61ff1e09
Certificate serial:       019E1E6C1DCD4E663FA05865A84B34EE2C31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft
Manifest number:          178D
Signing time:             Tue 12 May 2026 23:01:02 +0000
Manifest this update:     Tue 12 May 2026 23:01:02 +0000
Manifest next update:     Wed 13 May 2026 23:01:02 +0000
Files and hashes:         1: 8P6X0x59C3VckILV8m4M69IldqE.roa (hash: QOXkZ9qVgfqH0XpMQGh9X+mEF5OYLP10GuMRHcWRTjE=)
                          2: QCuKQCl6KP2estrIaG6k5Uc81F4.roa (hash: cBmWMEy/zwB8Bt1wF3nlzEol1nOu9jM3rhWTCCMjNfY=)
                          3: YzkQZIuWtNFelhNpi4EnHDyBQJU.roa (hash: 7C0rYIhC0IdYSE2/clMiQQwJ66KGMZ1ByQiGiFH5l9s=)
                          4: _e5AZzGVltklRadfv-MK2ei60tQ.roa (hash: eZnnL/QqgvT71AWN7mEZ0+pU5MPgz24zK984iwP+gE8=)
                          5: preJsy4W6d0vcFExGdx36mH_Hgk.crl (hash: KWbK3FKilu5xK6It0r5Feb6OTSrr++aYasuEHsVTb/Y=)
                          6: zih4pEofMsc0PfEmVcpJbSHS8Vw.roa (hash: LBA2zilX1jjETkANtyysp3KbVjSb0vGJ+k7nTqc9Wjo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:1d:cd:4e:66:3f:a0:58:65:a8:4b:34:ee:2c:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b789b32e16e9dd2f70513119dc77ea61ff1e09
        Validity
            Not Before: May 12 23:01:02 2026 GMT
            Not After : May 13 23:01:02 2026 GMT
        Subject: CN=6f661de51593c67c5ce01cb3cc9d59f9b2741817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:77:f4:6d:18:fd:b9:59:2e:97:2f:65:df:5e:
                    7f:8a:37:ad:9e:16:62:23:8a:21:36:71:9e:01:15:
                    5d:b2:fa:dd:46:ab:73:8b:34:c1:e2:7b:bf:d3:57:
                    b9:bb:49:04:92:db:6d:9e:43:a4:e0:a0:92:17:4d:
                    ed:75:2a:71:22:23:09:17:54:21:26:84:7a:d5:ca:
                    f9:c9:84:4f:27:98:2f:37:48:3c:66:dc:8e:2a:09:
                    65:f1:a9:73:93:72:57:4a:bb:66:26:70:22:d2:df:
                    16:1d:48:d1:d7:04:9a:a3:26:6c:44:82:64:73:23:
                    c5:1d:92:77:4c:1a:16:d4:a0:9a:80:b8:03:68:77:
                    36:1b:0f:d8:47:b7:3a:75:2c:9a:40:96:0e:1c:35:
                    d6:f5:4d:d8:77:b6:92:71:63:97:4d:d0:2c:7f:f3:
                    92:51:a3:68:5e:fc:eb:ae:78:c5:68:01:63:b4:f9:
                    95:b9:79:69:a4:47:f2:54:2d:85:fc:f6:a2:dd:0e:
                    a5:98:d7:cc:65:03:74:26:b1:7b:b9:a4:09:cd:43:
                    5b:b8:bf:64:88:35:56:a0:f0:0b:c3:d8:40:ea:26:
                    c0:d1:30:d3:c1:23:b6:b2:e9:b8:42:41:cb:a3:14:
                    f2:ae:5a:cd:4f:f3:48:88:63:22:0d:2f:5d:17:ca:
                    d4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:66:1D:E5:15:93:C6:7C:5C:E0:1C:B3:CC:9D:59:F9:B2:74:18:17
            X509v3 Authority Key Identifier:
                keyid:A6:B7:89:B3:2E:16:E9:DD:2F:70:51:31:19:DC:77:EA:61:FF:1E:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:d4:32:34:15:12:63:3c:20:e5:5a:ff:09:31:da:aa:35:aa:
         b3:a1:b3:10:9c:b4:8a:af:e3:6d:d5:82:96:d5:4a:1b:fb:65:
         5f:3c:7f:4b:97:99:79:1f:86:45:de:85:a7:ca:c5:51:97:7f:
         4d:df:2d:7f:23:2d:94:cb:63:21:71:38:d5:82:57:c3:56:44:
         36:d9:9a:aa:37:c8:b0:18:9d:0c:8c:fc:61:0a:f9:7c:86:b8:
         48:4a:45:fa:3e:03:2b:dc:b7:b8:a9:6a:88:b7:78:81:7c:f9:
         41:81:12:93:16:e1:0b:55:9f:33:1a:13:7a:b0:d0:ee:f6:fa:
         50:bb:c8:a7:40:f6:1f:f7:e5:cf:da:e9:e9:9e:2a:7b:c9:e0:
         f1:ec:43:f8:a2:43:91:a4:f8:50:7e:6a:33:33:48:46:1d:cd:
         ff:d1:66:e2:1e:7e:5b:11:40:12:f7:ba:35:5b:0f:99:ee:d9:
         56:63:4c:d9:a5:44:52:1e:b1:da:c3:c6:a9:fe:14:2c:99:0a:
         d8:3e:71:8f:ff:e5:d2:cf:f3:de:47:a2:73:17:d6:7c:ac:33:
         88:dd:f4:28:da:c2:fa:a8:6c:17:f7:c6:31:c2:7a:a4:73:b0:
         df:38:77:5f:53:d6:8f:47:84:0a:4c:f6:cc:5a:59:79:b2:56:
         a0:3d:d2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:53:44 2026 by rpki-client