Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft
File:                     nM47EZfQz5URVAVypY_TctzAdIk.mft (raw, json)
Hash identifier:          8mCQ3OlQCSfsbMtWaDCKs1zvtnh2DVvjqHtdSo/61zA=
Subject key identifier:   68:2B:76:BE:86:47:58:77:54:2D:7B:97:48:22:1F:A1:59:DB:59:98
Authority key identifier: 9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89
Certificate issuer:       /CN=9cce3b1197d0cf9511540572a58fd372dcc07489
Certificate serial:       019E1DFEADF77FE45E7EB746AED28B0AF062
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft
Manifest number:          1401
Signing time:             Tue 12 May 2026 21:01:30 +0000
Manifest this update:     Tue 12 May 2026 21:01:30 +0000
Manifest next update:     Wed 13 May 2026 21:01:30 +0000
Files and hashes:         1: FWkdYZB50BZtY6MGGDmkndrWg3c.roa (hash: SQCMpUUiMycQSLKgpqFr+kJ+h1QWi8a8jp6nB7Ve8EM=)
                          2: GVceVduBArktwOU6Mf55EriDNYs.roa (hash: z3ZJmc8CfjiYd8eml2YwxfFrpvhkb3YDOmwe9VvElx0=)
                          3: P0ADEoMBwNu5ihq9oTFhh5_jFZg.roa (hash: LbJcliWjxyfMysePIZ1L8MSr6AjLJjCi6E5I0PKLL9w=)
                          4: TaOkTEEE00uDuFBt0oukno2-oJM.roa (hash: L5MTfRyQyNuoejsnRiY40yBhfPSdHTRkPlZoOi8bsGw=)
                          5: ddMnUV_QpSF7ZtnFlA-jGKGrb5c.roa (hash: FmLB19l/QiUZ+HMpkAjjIF13qdNaGpMhZk/VbgzVjic=)
                          6: iK4oje7PnSRo9xAmtm698XYmzcU.roa (hash: N+soR0rvwyPizipAou2vD3c8sm67wSVa/ObW3Qfle0Y=)
                          7: nM47EZfQz5URVAVypY_TctzAdIk.crl (hash: B2GCGY0j3wukXTs/xQ9jV6GYLBLdXCXgy3dkUPmjgWY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:ad:f7:7f:e4:5e:7e:b7:46:ae:d2:8b:0a:f0:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cce3b1197d0cf9511540572a58fd372dcc07489
        Validity
            Not Before: May 12 21:01:30 2026 GMT
            Not After : May 13 21:01:30 2026 GMT
        Subject: CN=682b76be86475877542d7b9748221fa159db5998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:dc:53:ba:1d:13:2b:84:f5:2d:36:54:11:c6:
                    2b:24:2a:ec:d8:9c:9f:3f:11:99:d7:12:f3:a9:b3:
                    0d:a9:ac:d7:6f:94:39:be:c8:d9:9d:a5:96:19:7c:
                    14:3b:90:2d:cf:f1:56:e2:24:b1:d7:16:06:92:01:
                    33:29:42:4e:45:3d:ef:76:82:17:85:4c:73:b0:61:
                    7c:15:05:18:5a:64:d2:de:c0:af:4a:e5:42:49:f1:
                    5e:e0:bc:cd:d0:3f:38:2f:2b:e7:50:e9:d8:45:5c:
                    3f:56:66:4d:0c:85:30:c1:30:bf:7e:4e:5a:ef:2a:
                    20:3a:85:1e:46:3b:fd:a2:c7:de:15:c4:1d:74:52:
                    a6:af:c4:a0:eb:a2:f4:f0:0c:b7:c2:e1:3f:81:df:
                    45:29:f6:d0:f8:a2:4e:e5:2e:34:e8:b4:1e:74:ec:
                    b4:72:86:e7:ea:1b:f4:83:55:93:8b:00:79:88:39:
                    f6:47:49:a9:73:1c:b8:14:00:6d:25:52:62:0a:21:
                    7b:39:b5:6f:c6:46:6a:c7:53:a9:26:ac:c3:a8:29:
                    51:43:75:f0:b6:b2:72:ee:bd:be:29:67:1e:d1:4d:
                    49:ce:ad:bb:c9:fc:82:f6:0d:e4:81:75:fc:4a:0e:
                    63:6b:af:31:89:d4:1e:16:2a:31:0f:87:ce:08:62:
                    f8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:2B:76:BE:86:47:58:77:54:2D:7B:97:48:22:1F:A1:59:DB:59:98
            X509v3 Authority Key Identifier:
                keyid:9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:b8:d7:45:e3:bb:57:59:e9:28:75:e2:34:73:17:f0:a9:3c:
         f2:17:c2:35:3b:52:7c:61:ec:5a:4c:fe:d0:d7:be:64:71:de:
         bc:22:42:c0:18:11:73:dc:85:0b:15:09:48:cd:b0:f2:50:1c:
         11:8d:92:7d:0a:8f:69:5c:cc:1d:20:72:4c:b3:8b:d4:ec:cc:
         4c:bf:79:95:7b:96:16:e9:be:9e:10:95:df:8b:a4:38:03:42:
         d7:d4:f2:fa:80:b7:57:ed:75:a1:3f:df:80:56:d5:55:e8:b5:
         a4:7c:fe:7f:c6:80:2f:49:f9:98:ae:14:04:7f:c5:bf:ca:08:
         33:41:6d:cc:83:01:3d:2a:b2:78:de:13:3f:ee:6c:b5:ce:1f:
         68:e3:a0:82:81:e6:12:cf:e9:2a:fc:d7:ca:ae:e7:27:74:43:
         aa:9c:37:92:e8:f0:05:d9:c2:e6:e5:f8:b4:b3:3c:0c:ba:9e:
         b4:f2:57:da:14:20:56:00:4d:8c:40:14:3f:88:27:f6:81:74:
         c4:fb:a7:c6:df:be:a4:50:00:a0:56:60:7d:d0:35:50:c0:56:
         34:0f:d6:e9:bd:1a:94:04:59:62:97:89:ab:1e:9d:fe:23:d9:
         cb:16:f1:c5:63:86:45:f8:58:fc:cb:b2:65:c3:5f:0f:d7:ad:
         83:95:76:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:15:40 2026 by rpki-client