Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
File:                     tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft (raw, json)
Hash identifier:          Vf3vUccEuexOLGOsPBaTJA3qutOUiz/rE5ZRkiFWvwE=
Subject key identifier:   37:03:2E:B4:5F:0B:40:0F:B6:A3:F4:48:E0:56:60:2A:D8:74:97:0D
Authority key identifier: B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF
Certificate issuer:       /CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
Certificate serial:       019E1E6C14097F320AB1E2AE07D1A63B2465
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
Manifest number:          0FD2
Signing time:             Tue 12 May 2026 23:00:59 +0000
Manifest this update:     Tue 12 May 2026 23:00:59 +0000
Manifest next update:     Wed 13 May 2026 23:00:59 +0000
Files and hashes:         1: 6_uqscAUqLl-U-FOdnB8b80ymVs.roa (hash: 6iIxj8hFU1rpgiG9WHmnrQdt6HoHVlv0NufbYcZmLKU=)
                          2: Asdq0CBEIsgp9XnIZOINz9u9Cp8.roa (hash: nOKPYxisoFhulj9H3B7lMkY5LfDFsGYXQ3OYtNKl888=)
                          3: I2T7UeDGLA8H6P-KL1eFGnyz1sw.roa (hash: v4p0Y6w9BB4bsfMbtUIZ8Y6YLTCCJcFeqfZJdPcFyGU=)
                          4: Rb8NbhTAxdW8Qozx0F0hMesjBeQ.roa (hash: vFhA2KjCPdOcJsVjA7uGx7jrzbvsOL97jtv5aYxWqgs=)
                          5: rFMfSzn-n7nZRas5UlWT_V3b0wE.roa (hash: BT3wbqOQUe0s9zLkAX65/Pmrb3QAkF3u9va25+8RZ8s=)
                          6: tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl (hash: Xy1PDgf8Azkwpym3e4w3kWEcHxkEe+HWvgAJfdCi88Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:14:09:7f:32:0a:b1:e2:ae:07:d1:a6:3b:24:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
        Validity
            Not Before: May 12 23:00:59 2026 GMT
            Not After : May 13 23:00:59 2026 GMT
        Subject: CN=37032eb45f0b400fb6a3f448e056602ad874970d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:94:d6:57:be:44:55:13:bc:90:91:9b:62:03:
                    2e:9e:38:8e:35:b4:86:41:b8:f1:c5:e0:dc:62:ad:
                    04:03:b9:78:d9:95:14:0b:da:24:d0:59:eb:da:3b:
                    f7:94:9c:3a:5d:30:ee:ac:b5:6f:02:59:9a:7d:86:
                    dc:86:8c:e2:84:8e:a6:be:8d:d0:01:40:a6:aa:20:
                    a9:e7:f2:17:37:e9:e3:ae:59:64:29:fe:fe:a0:29:
                    a8:14:f1:41:01:f5:a5:0f:2e:68:fa:f3:01:09:85:
                    85:2f:e5:f0:eb:2f:f2:1a:d7:3a:65:3d:a4:6f:74:
                    76:17:b0:8f:2e:e9:ec:58:17:f4:b3:f9:c9:29:e7:
                    ee:ee:31:dc:c9:c7:b9:8b:0e:27:01:ba:02:48:c1:
                    1b:47:38:93:da:2e:2f:b5:e3:41:c4:e8:82:75:a3:
                    c8:1e:29:06:6f:a7:c1:be:d8:10:c7:94:08:6e:f5:
                    a1:74:a6:07:b6:a8:e5:1c:16:e7:fa:a1:4d:6e:44:
                    a6:7b:bf:d9:c4:8d:c8:d2:c3:4d:d8:7e:1c:b8:f6:
                    1e:d4:ac:e0:b2:7c:05:59:e1:61:c8:d4:db:f9:f8:
                    d2:08:4a:71:0a:0a:65:42:66:bb:dd:4f:67:be:6e:
                    16:43:ed:f8:16:de:f6:1d:68:a2:91:b6:e0:f7:3e:
                    a6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:03:2E:B4:5F:0B:40:0F:B6:A3:F4:48:E0:56:60:2A:D8:74:97:0D
            X509v3 Authority Key Identifier:
                keyid:B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:79:88:21:cb:09:4e:1c:1d:8f:5d:31:5c:9b:1d:3f:2b:11:
         4f:82:8a:2d:5d:28:13:64:55:bb:dd:12:50:7b:cf:56:cf:a3:
         de:12:c3:d0:ba:c5:3f:26:80:79:35:4a:f7:36:f8:20:bb:e8:
         27:15:b1:97:ef:db:9e:62:cc:ee:1e:34:d8:66:53:bc:ff:79:
         7c:e0:ca:30:2d:e1:0a:9b:9a:b2:bf:61:86:70:97:5a:97:7e:
         1b:8b:51:8e:7d:19:03:f1:71:3a:26:3a:b1:81:35:e4:21:38:
         d1:b3:40:d4:18:e1:87:99:31:23:29:57:ca:e0:e7:89:19:10:
         99:54:fd:b6:9d:9d:cd:4d:40:47:59:11:75:7e:00:b7:22:f2:
         b7:4e:6b:7f:52:38:6d:cd:99:3d:2c:f0:5e:ff:88:6d:5d:41:
         fa:3d:11:dd:08:99:8b:3f:b0:57:0e:6d:fa:79:a8:38:ce:3c:
         8d:61:42:c0:11:c8:1e:94:2e:17:e4:a2:9e:89:32:11:e3:64:
         13:4c:bc:d7:56:8e:3f:94:47:7f:76:57:6c:33:c3:4a:77:a3:
         a4:aa:35:7b:b5:b6:34:46:ee:cd:fb:21:a9:bf:44:e8:d5:86:
         fc:df:cc:c4:72:23:49:1a:aa:ff:71:fe:b3:98:61:a6:09:db:
         37:3a:48:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:43:28 2026 by rpki-client