Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
File:                     mYkvB5PMiUvypMdIda8Iqi0dHJk.mft (raw, json)
Hash identifier:          jIEaUbKgncUChLvk7FnbOqOmrxIJZU6a1RSiATr7erw=
Subject key identifier:   45:86:1F:3E:DD:BC:66:63:6B:DC:3F:CD:1C:B9:0A:E1:54:D9:34:94
Authority key identifier: 99:89:2F:07:93:CC:89:4B:F2:A4:C7:48:75:AF:08:AA:2D:1D:1C:99
Certificate issuer:       /CN=99892f0793cc894bf2a4c74875af08aa2d1d1c99
Certificate serial:       019E1ED9CAC16ACE81ED9536AB9607638CDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
Manifest number:          10AA
Signing time:             Wed 13 May 2026 01:00:50 +0000
Manifest this update:     Wed 13 May 2026 01:00:50 +0000
Manifest next update:     Thu 14 May 2026 01:00:50 +0000
Files and hashes:         1: 8d01Xvs_aaIVSfahCINvVoz5qZs.asa (hash: hdcUHQVv+Z/OXdZkuAsmuPgKWFluiU3e3EejuVlqoak=)
                          2: mYkvB5PMiUvypMdIda8Iqi0dHJk.crl (hash: MDSN3Y02m8NeOEKK9mbAhSE9qM0NQCtqTT5gvcLbSs4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:d9:ca:c1:6a:ce:81:ed:95:36:ab:96:07:63:8c:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99892f0793cc894bf2a4c74875af08aa2d1d1c99
        Validity
            Not Before: May 13 01:00:50 2026 GMT
            Not After : May 14 01:00:50 2026 GMT
        Subject: CN=45861f3eddbc66636bdc3fcd1cb90ae154d93494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:81:35:d6:dc:9d:17:93:21:65:85:6a:7f:6c:
                    4a:89:32:10:f8:0b:4d:74:21:1b:70:2a:8a:57:18:
                    f6:0f:43:46:b8:b5:c9:63:43:fb:44:18:01:cf:35:
                    88:3c:ca:e3:45:0c:a8:ca:08:e0:30:b4:91:61:7f:
                    9d:99:15:02:c2:1a:d3:a4:07:4c:01:13:f9:65:56:
                    08:81:7a:60:fa:f8:14:0e:9e:fc:86:a7:33:76:06:
                    35:85:94:cd:82:b3:db:cb:4c:32:ef:52:2f:49:29:
                    56:eb:11:88:92:74:9b:2a:de:85:ca:48:b9:a9:2e:
                    8d:60:2a:f3:f1:7b:2d:54:13:55:9c:e5:ec:54:f9:
                    4d:06:dd:2b:a4:c7:d6:28:e3:51:29:36:9d:c6:13:
                    84:d3:26:9a:44:34:35:5f:67:71:56:8d:18:f2:ce:
                    02:29:e4:6f:2d:e2:82:bd:8b:a7:45:be:34:e7:b2:
                    f6:3b:0b:53:9c:66:dc:da:19:f8:8a:e0:fc:0c:3c:
                    14:73:f6:e0:7f:c3:99:15:8f:14:b8:f8:ad:c2:6d:
                    30:56:17:de:5e:e0:5e:f9:76:2f:28:fb:dd:96:9a:
                    e2:64:b9:88:75:aa:62:86:d5:e3:3d:eb:43:47:49:
                    13:27:cb:8c:78:54:0a:5b:0a:49:77:20:ef:fe:07:
                    3c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:86:1F:3E:DD:BC:66:63:6B:DC:3F:CD:1C:B9:0A:E1:54:D9:34:94
            X509v3 Authority Key Identifier:
                keyid:99:89:2F:07:93:CC:89:4B:F2:A4:C7:48:75:AF:08:AA:2D:1D:1C:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:76:e7:f0:90:17:a6:e5:18:b2:b9:39:5a:92:9c:2c:7f:af:
         20:a8:b1:f9:7f:d9:90:e5:75:bb:1c:8c:81:95:d0:f9:08:f1:
         ce:05:fa:46:54:49:6c:ba:86:62:7b:ae:ee:fd:b4:aa:c1:e9:
         d2:39:26:d8:e1:57:c5:15:1d:cb:c5:62:d5:d2:cc:64:c7:7d:
         36:20:a1:f2:f6:d4:40:b1:0c:ef:2f:3e:be:3d:91:ef:15:8e:
         0c:00:0b:50:c9:10:79:d5:09:11:67:85:45:c3:a5:f0:e9:af:
         d3:31:a0:f4:2c:cb:be:b4:92:fb:17:0c:30:2d:51:12:04:83:
         fb:ec:19:d9:95:80:b3:f8:11:63:72:b4:8c:9e:35:54:31:b7:
         b0:50:3b:ed:0f:1f:7f:b4:64:fe:a6:4f:3b:93:f2:cc:aa:79:
         f7:33:c4:d5:73:55:01:b7:86:fe:00:21:0e:60:d4:46:96:1c:
         00:8a:8a:3b:58:50:85:68:b4:77:a8:9f:3b:7e:f2:57:79:ad:
         10:42:ef:3d:e8:86:94:ff:20:bb:27:fb:53:a2:f1:60:c5:8b:
         03:8e:8e:95:b5:df:ff:ce:1f:d0:88:f7:7f:2e:8e:a6:b6:76:
         3d:5d:34:2c:d4:15:ad:a0:ae:ed:5a:77:96:4c:18:94:e8:2a:
         34:5a:8b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:55:34 2026 by rpki-client