Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft
File:                     nMYO2IFBiiF-jdPB-lI-JWXK65s.mft (raw, json)
Hash identifier:          VaH47vOPPbZ1IuEJzo+u8kPTopYepoOTu2oq2+2Icjs=
Subject key identifier:   92:E6:2B:CA:BD:65:CB:D5:D1:8C:E0:9D:BF:69:CF:F0:86:5D:A7:80
Authority key identifier: 9C:C6:0E:D8:81:41:8A:21:7E:8D:D3:C1:FA:52:3E:25:65:CA:EB:9B
Certificate issuer:       /CN=9cc60ed881418a217e8dd3c1fa523e2565caeb9b
Certificate serial:       019E1E3553B45DECE066316EBE868CF47FEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nMYO2IFBiiF-jdPB-lI-JWXK65s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft
Manifest number:          1906
Signing time:             Tue 12 May 2026 22:01:11 +0000
Manifest this update:     Tue 12 May 2026 22:01:11 +0000
Manifest next update:     Wed 13 May 2026 22:01:11 +0000
Files and hashes:         1: EqP-OwutSropMKZDpJsJICxaOQA.roa (hash: 3uR+4TzhakfaPgMhOyS6vVGKMQMDAuuvPFvZm5rpWtA=)
                          2: nMYO2IFBiiF-jdPB-lI-JWXK65s.crl (hash: QgWmEeYAnKjbBe9DpkSuws45u6cwnP9NEwxTUirlaoc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nMYO2IFBiiF-jdPB-lI-JWXK65s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:53:b4:5d:ec:e0:66:31:6e:be:86:8c:f4:7f:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cc60ed881418a217e8dd3c1fa523e2565caeb9b
        Validity
            Not Before: May 12 22:01:11 2026 GMT
            Not After : May 13 22:01:11 2026 GMT
        Subject: CN=92e62bcabd65cbd5d18ce09dbf69cff0865da780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:2b:2d:e9:32:65:9f:92:c2:84:56:0e:33:a1:
                    32:8a:7d:b5:4e:c3:58:da:83:5e:7e:b1:58:2b:d2:
                    bc:82:d4:8b:4f:7c:71:e8:72:05:03:b4:c2:2f:71:
                    5a:d3:8c:80:d0:13:a5:f6:4c:cb:dc:e4:9a:51:f2:
                    91:06:2b:50:8a:c3:87:4c:e0:f5:11:fc:97:96:06:
                    e5:82:8d:70:25:a8:e4:fd:0a:08:c4:a6:b2:0d:97:
                    cd:29:44:3f:63:2f:0f:c0:47:08:a6:52:85:93:8f:
                    70:98:ff:b2:e4:d6:6a:e4:14:51:db:9e:52:b9:c6:
                    01:bd:7d:1f:47:a0:f8:df:38:b5:06:1f:32:64:a0:
                    1d:18:55:df:aa:36:47:37:a4:b1:7d:25:c0:bb:d2:
                    82:1a:d1:a6:1e:f4:f4:52:98:9b:11:e7:c7:97:2f:
                    7d:37:17:c1:2b:66:97:a0:b0:23:24:3d:c1:9e:06:
                    18:ae:f1:76:38:df:11:f3:22:32:40:c7:4f:af:dc:
                    aa:f1:3d:c6:86:60:68:2e:b2:c0:51:ae:28:38:f9:
                    85:fe:8b:ae:de:f0:51:1f:00:d5:a9:29:b8:ad:00:
                    0a:ee:c2:70:00:6b:23:b6:53:7a:d4:d7:a2:df:c0:
                    45:1e:e4:95:19:3e:a1:67:28:fc:97:d0:a8:0b:8b:
                    7a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E6:2B:CA:BD:65:CB:D5:D1:8C:E0:9D:BF:69:CF:F0:86:5D:A7:80
            X509v3 Authority Key Identifier:
                keyid:9C:C6:0E:D8:81:41:8A:21:7E:8D:D3:C1:FA:52:3E:25:65:CA:EB:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMYO2IFBiiF-jdPB-lI-JWXK65s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:a4:d9:c9:c3:d1:be:f5:5a:54:e8:03:28:3d:e6:03:5b:9f:
         40:4f:fd:78:4c:5a:a9:2d:28:ea:cd:7c:eb:58:84:6b:80:70:
         3a:7b:c1:2f:b2:6a:11:52:66:16:16:fb:13:39:2f:8b:96:7d:
         cd:7e:f7:7b:49:ec:9a:fc:83:5d:cc:61:76:4a:da:20:36:ac:
         e4:b5:1a:f0:a1:8e:52:2a:ef:6d:f4:9e:23:c2:32:a1:7d:a0:
         e3:3c:9a:9a:85:2e:db:5b:63:6c:79:9d:83:fb:41:5d:ae:51:
         ce:d4:cf:78:f4:a3:c6:f5:57:44:c4:04:5f:e8:f2:2c:d3:77:
         12:e5:c0:d4:22:71:93:4b:d1:92:06:c5:7f:b8:45:14:a1:95:
         86:2c:38:b4:b8:7c:6d:28:3d:ef:b0:0a:4c:c8:7d:44:d3:1c:
         c5:19:ec:82:df:06:0d:2b:e5:30:3f:48:89:92:1a:d6:7e:ca:
         5a:e0:d0:69:08:f1:77:90:58:14:f7:d6:ec:05:db:3e:40:c6:
         fb:6b:b0:50:36:95:57:d7:f8:69:25:e6:db:46:0f:1a:11:93:
         32:df:d8:de:14:09:7d:58:28:9c:a9:ea:60:09:f4:49:4e:d8:
         2d:e7:b7:c1:3e:a2:28:67:cf:e4:41:d4:75:59:a1:b8:18:b4:
         62:45:68:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:42:43 2026 by rpki-client