Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.mft
File:                     MBYKH8YoL1eCp6in6g7SBrlEQSM.mft (raw, json)
Hash identifier:          NJzm5FQLVZ5zBDAtJ9S7XWcoUF6KY2CITu30F5+NEt0=
Subject key identifier:   51:61:A8:74:32:AB:B8:35:51:32:D9:38:9F:85:AA:1D:04:1E:90:2C
Authority key identifier: 30:16:0A:1F:C6:28:2F:57:82:A7:A8:A7:EA:0E:D2:06:B9:44:41:23
Certificate issuer:       /CN=30160a1fc6282f5782a7a8a7ea0ed206b9444123
Certificate serial:       019D26CD0A45A66C154A4A14CF23923E70C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MBYKH8YoL1eCp6in6g7SBrlEQSM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.mft
Manifest number:          07D6
Signing time:             Wed 25 Mar 2026 21:01:04 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:04 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:04 +0000
Files and hashes:         1: 1SJhyocRudC4i3a4wpxvnXhK1TE.roa (hash: Q8DohD/O4S8CVYT18myTFMGAt4L6+jeYMfQ4zRODCWc=)
                          2: MBYKH8YoL1eCp6in6g7SBrlEQSM.crl (hash: j8REHn/4NN/WTbT8LXE2d/suRE9Lo5Fz1nK7n9r4ByA=)
                          3: XpKKyExlunDnIgewiAZPtg86MrQ.roa (hash: wS0s5Zz3UFUtCAGlt2SFNPs++jwDVKFp6MczP/XrPT8=)
                          4: yYnjMSBD0N1GdUhW8b3gkCvcBTY.roa (hash: UXD6Z2ZYC62V3GCh/SczjWuD8By0eruoWG1wzac/bwU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MBYKH8YoL1eCp6in6g7SBrlEQSM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cd:0a:45:a6:6c:15:4a:4a:14:cf:23:92:3e:70:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30160a1fc6282f5782a7a8a7ea0ed206b9444123
        Validity
            Not Before: Mar 25 21:01:04 2026 GMT
            Not After : Mar 26 21:01:04 2026 GMT
        Subject: CN=5161a87432abb8355132d9389f85aa1d041e902c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c9:45:7c:cb:61:1f:b7:aa:ad:d5:c3:9c:9e:
                    06:59:58:56:52:25:51:09:37:23:b4:c1:5d:65:b2:
                    21:55:5b:4d:ab:ed:6d:46:b2:f6:20:8d:11:f3:b9:
                    d3:e8:15:5b:3d:ab:34:49:67:0a:5f:b6:25:95:be:
                    24:d9:7a:1f:e2:d7:00:c3:2c:60:a2:79:b9:86:cd:
                    c7:c5:cd:b6:d8:97:b9:cd:73:e0:2e:c5:c6:8d:c3:
                    e7:d2:a0:ca:bb:8f:85:95:d6:79:f8:7a:33:ee:89:
                    1f:f8:49:69:0b:e9:bc:a6:5b:b7:91:a1:bb:ed:26:
                    89:bd:0b:25:12:7e:2e:b2:01:f0:1c:d0:a4:41:0c:
                    d5:f0:86:08:f8:3a:63:3f:bf:c7:2b:77:d3:0b:91:
                    9b:e5:22:43:98:2f:26:4c:3a:00:57:90:af:51:ca:
                    c1:b0:fd:1d:03:fd:a7:66:72:fb:3d:99:21:37:9b:
                    a7:18:2c:7a:ef:35:d2:a1:44:01:1e:6f:30:cd:2c:
                    1b:2e:80:fd:04:c7:39:bb:74:62:95:0a:bd:8e:27:
                    39:c2:d2:a9:eb:2a:dc:0e:2b:a1:a7:fb:62:95:76:
                    6d:2a:6d:8f:48:97:3e:82:c1:3e:f9:79:9e:52:ae:
                    35:c7:00:07:b5:51:0f:68:48:e2:f2:88:3e:b2:5b:
                    b3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:61:A8:74:32:AB:B8:35:51:32:D9:38:9F:85:AA:1D:04:1E:90:2C
            X509v3 Authority Key Identifier:
                keyid:30:16:0A:1F:C6:28:2F:57:82:A7:A8:A7:EA:0E:D2:06:B9:44:41:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBYKH8YoL1eCp6in6g7SBrlEQSM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:16:c7:cc:47:c1:b3:34:75:bb:97:2c:5e:3d:bb:52:51:92:
         6e:2e:c1:37:03:d7:20:2e:f1:b0:b7:37:74:4a:23:52:2d:69:
         6d:ad:11:cd:9c:e3:9e:76:2c:96:73:4e:38:42:33:50:a7:1e:
         0c:2f:42:91:e8:51:01:4d:2b:8d:e0:5b:37:c6:85:59:39:18:
         0d:71:82:75:c0:4b:4c:3b:f1:d2:9e:b3:25:57:5f:fb:d5:5b:
         71:3a:42:90:67:9d:c5:08:cc:51:03:41:fd:6c:81:16:9b:5a:
         ab:a3:26:99:ee:d3:9c:11:62:5d:a1:65:51:33:b2:1b:af:d2:
         55:9b:17:a8:9a:8c:37:76:e0:22:84:b7:fa:a6:e3:96:db:8b:
         e4:7a:38:30:ea:63:df:8b:7a:75:78:15:ab:ee:be:7f:33:3b:
         c2:a1:99:19:c5:63:77:1a:1f:88:4e:46:e0:24:31:f5:4b:07:
         79:55:ed:d2:e0:de:e9:6d:63:d8:03:a5:e0:59:e7:3d:ee:fb:
         20:db:73:75:41:68:12:84:a0:44:30:33:27:7b:48:ad:10:a2:
         3d:be:0a:4a:5b:5d:d0:08:2c:bb:d7:ae:57:98:6b:88:77:2e:
         4f:e8:19:f0:ca:5e:ad:11:a4:bb:ca:cc:15:4d:03:40:ee:7c:
         0b:c6:49:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:48 2026 by rpki-client