Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.mft
File:                     aYROE3TxxFgb-_etRjihEtMW--Q.mft (raw, json)
Hash identifier:          JZVfHRTTkF5r9wMQNDSh4niN0fAQfTU/wlandp1cIV0=
Subject key identifier:   8D:83:38:CB:D8:20:BE:B9:11:0F:53:08:D8:76:BE:6C:66:57:57:4C
Authority key identifier: 69:84:4E:13:74:F1:C4:58:1B:FB:F7:AD:46:38:A1:12:D3:16:FB:E4
Certificate issuer:       /CN=69844e1374f1c4581bfbf7ad4638a112d316fbe4
Certificate serial:       019E1F479722A274EB051ADF89AD9742BD64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aYROE3TxxFgb-_etRjihEtMW--Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.mft
Manifest number:          0153
Signing time:             Wed 13 May 2026 03:00:45 +0000
Manifest this update:     Wed 13 May 2026 03:00:45 +0000
Manifest next update:     Thu 14 May 2026 03:00:45 +0000
Files and hashes:         1: _YyM5Fz0fRt9WBEEudyzbZgfybs.roa (hash: 4qY+Fv3RexE/YICr0m64zJ0sFOUpiGhvhqq4dKDZLy4=)
                          2: aYROE3TxxFgb-_etRjihEtMW--Q.crl (hash: UIXc/KLNd1rAcGAYtGr80AgO3ybC1xvk+QNyfcHQ730=)
                          3: rYhwjOOa4-7RvBsKuPyCuJ2kOac.roa (hash: EeI2oHDpvRTGlcgIn02601fBNayk3lM8V1SAStGUI1w=)
                          4: seE8MA1IAHQhkFxKO3DiabXwc2k.roa (hash: 3toCWdrJKeaWZ1jR0rxFlsqTNbw+YdEAy/zdrsfgu1c=)
                          5: zvV261hgmMdkR1G7Cy93JC-Zxsw.roa (hash: hneXIhVn6/jTbVYrQJSFmDE3v0R1YG1vWQx+UejdDSs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aYROE3TxxFgb-_etRjihEtMW--Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:47:97:22:a2:74:eb:05:1a:df:89:ad:97:42:bd:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69844e1374f1c4581bfbf7ad4638a112d316fbe4
        Validity
            Not Before: May 13 03:00:45 2026 GMT
            Not After : May 14 03:00:45 2026 GMT
        Subject: CN=8d8338cbd820beb9110f5308d876be6c6657574c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:52:52:b7:2b:ff:a0:34:36:ee:ab:98:08:27:
                    40:71:13:1f:80:9b:4b:f7:b5:3c:46:d1:62:53:2d:
                    e2:b2:9a:0a:97:da:e6:05:ed:cd:35:15:9b:67:9d:
                    e3:68:75:62:a5:aa:72:74:23:8b:8b:ce:4f:ad:07:
                    43:33:21:fa:9e:e6:70:d6:0c:ce:03:f7:55:43:0a:
                    8a:07:b2:a5:af:96:be:9f:a8:11:9d:88:0f:09:1e:
                    37:ef:a9:f6:82:de:68:4c:ca:db:d4:b8:85:55:a0:
                    94:69:bd:d3:85:57:a2:82:d3:31:ba:1c:49:2a:a3:
                    fe:2b:19:8e:7a:25:a6:65:5d:fa:97:61:d6:85:1e:
                    8f:e1:52:34:92:bd:f9:52:b3:24:bc:80:2b:59:45:
                    2d:b9:32:33:de:5c:a9:61:0f:6f:3e:99:a5:45:2e:
                    33:cd:c8:4b:0d:8d:e9:07:3c:8e:fe:72:e5:f4:ea:
                    ae:7f:cf:b1:5e:34:b9:80:6b:83:e1:90:0b:da:6a:
                    a9:6c:eb:07:b9:f0:81:20:9d:76:32:5a:60:95:cd:
                    f6:88:67:8a:f2:67:ea:5e:4d:f3:b5:07:a2:32:43:
                    15:e1:f1:80:25:4f:e5:f3:5f:c3:ae:3b:af:61:09:
                    8c:04:65:8c:7b:c6:3c:6c:27:0a:70:93:c2:09:00:
                    2f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:83:38:CB:D8:20:BE:B9:11:0F:53:08:D8:76:BE:6C:66:57:57:4C
            X509v3 Authority Key Identifier:
                keyid:69:84:4E:13:74:F1:C4:58:1B:FB:F7:AD:46:38:A1:12:D3:16:FB:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYROE3TxxFgb-_etRjihEtMW--Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:04:90:e0:f6:19:df:53:cd:ba:6b:08:8b:61:63:96:45:7e:
         04:c6:f7:97:e6:63:8e:f2:73:b4:92:0f:25:c5:d2:e1:83:04:
         f3:83:99:13:41:86:9d:9d:c3:34:5f:07:b1:97:df:c1:dd:67:
         ca:e8:3d:23:84:98:a1:06:d9:8f:30:cd:1e:2b:be:b6:4d:db:
         3f:27:b2:20:ed:6d:b9:5d:b9:af:98:7f:73:bf:41:d0:64:fa:
         c0:6a:13:eb:54:8d:ff:b1:72:f7:89:f1:e7:3c:ad:77:48:da:
         11:eb:4b:13:7a:ab:54:f0:e6:7f:41:b6:72:b6:11:d4:df:29:
         d2:ef:73:0a:e5:d3:40:e5:4c:82:4d:01:9c:98:e4:a5:27:7e:
         00:ea:07:0c:a2:ed:a5:08:7e:84:46:6c:bb:8f:09:c2:c1:c0:
         02:be:b7:48:fa:25:d5:e9:f6:82:7c:0c:28:ff:d9:bf:ec:47:
         27:d8:28:12:f4:c2:33:84:95:0a:11:df:5b:a9:19:de:04:78:
         24:03:6c:5a:c6:b7:c4:03:dd:12:88:c6:6b:62:a0:bf:96:ed:
         0e:9a:41:d7:53:a2:d5:27:8a:ed:fc:b5:1e:80:9b:4c:dd:7f:
         da:54:0c:2e:60:7f:dc:6a:cf:7a:6f:68:59:d7:51:2c:f0:2b:
         95:38:76:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:01:33 2026 by rpki-client