Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
File:                     diZWxeZrgsBGVL4aJWKbH9allFY.mft (raw, json)
Hash identifier:          M6jrQwa4FqmRdhuWe6F8HKpa1A5mri8OCasCUzDoPxQ=
Subject key identifier:   C7:E6:7D:4A:53:86:6C:9A:48:CC:7C:F0:21:9A:C5:5B:D5:C6:62:6B
Authority key identifier: 76:26:56:C5:E6:6B:82:C0:46:54:BE:1A:25:62:9B:1F:D6:A5:94:56
Certificate issuer:       /CN=762656c5e66b82c04654be1a25629b1fd6a59456
Certificate serial:       019E1F1159AD0B89A6E44234422882F10BD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
Manifest number:          1406
Signing time:             Wed 13 May 2026 02:01:31 +0000
Manifest this update:     Wed 13 May 2026 02:01:31 +0000
Manifest next update:     Thu 14 May 2026 02:01:31 +0000
Files and hashes:         1: 0afuwwpSylnqyi1KRwMRDOM6r7k.roa (hash: z3MlidMuuLgNR1mdxxRmyn3fh5T6uAJcGz1Z1osDBjI=)
                          2: 4gGd7LcQ6qQ6avnurf3xejB1t0s.roa (hash: j3iW+b3EiZhGw5mm3ly7V+FoiiHAPGatR1ru3J1J6Vg=)
                          3: diZWxeZrgsBGVL4aJWKbH9allFY.crl (hash: o45JDj717M18P1Oj5we+2RF4YDnDs4GHOyfnUkcQUjA=)
                          4: zNm5Qj7aAnNhn0PPXpRiZPpb-Cc.roa (hash: aecWS2V1Qv9HVqql7W0x5HQGtiHaZA7TdAFG/WsALog=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 02:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:59:ad:0b:89:a6:e4:42:34:42:28:82:f1:0b:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=762656c5e66b82c04654be1a25629b1fd6a59456
        Validity
            Not Before: May 13 02:01:31 2026 GMT
            Not After : May 14 02:01:31 2026 GMT
        Subject: CN=c7e67d4a53866c9a48cc7cf0219ac55bd5c6626b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f0:3b:17:60:6c:63:31:05:f3:79:48:90:f0:
                    fe:fd:f0:f4:bf:77:d6:e3:a8:26:e5:8e:5b:73:e9:
                    45:1e:71:18:06:53:c6:b4:b1:d4:1a:42:23:5e:88:
                    15:4b:4d:33:e8:86:26:14:d4:50:51:8e:b9:a9:57:
                    b2:47:56:75:66:74:80:3e:2e:f4:9b:45:6b:4e:93:
                    59:cf:ae:eb:c7:b8:a0:ef:65:ea:35:11:8d:4f:23:
                    db:2b:01:61:36:bc:93:91:a9:52:05:0a:d2:c8:d4:
                    f9:ee:88:5d:90:05:83:22:59:24:87:63:d6:4a:96:
                    d3:b7:3f:c2:df:d8:a8:30:ad:97:49:25:e2:ba:28:
                    eb:2b:3e:78:ef:83:1e:60:16:80:f7:eb:30:3d:24:
                    91:b9:19:5c:40:a5:21:74:ca:b3:52:57:7a:a8:50:
                    73:a7:6e:c0:0d:0f:77:84:d3:25:f8:a0:66:d4:2d:
                    26:1f:80:19:e1:02:6b:a3:fb:be:3d:40:10:d0:60:
                    14:c4:1d:60:92:0b:dd:89:27:58:67:50:81:d5:57:
                    79:ff:32:06:3e:24:a2:3f:b5:a4:b8:14:6c:d1:78:
                    81:46:1b:13:b6:16:7c:30:26:4e:98:37:09:4e:fe:
                    fd:f5:41:03:b9:50:34:38:f7:f8:c7:e2:6d:31:f5:
                    6c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E6:7D:4A:53:86:6C:9A:48:CC:7C:F0:21:9A:C5:5B:D5:C6:62:6B
            X509v3 Authority Key Identifier:
                keyid:76:26:56:C5:E6:6B:82:C0:46:54:BE:1A:25:62:9B:1F:D6:A5:94:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:0a:3d:5c:28:b6:cc:62:90:88:de:72:0a:c4:ca:9c:bf:31:
         0f:9c:a9:9d:38:f8:a5:d4:74:cf:40:cc:97:16:20:e4:81:b9:
         06:2a:fd:d7:cc:84:70:93:ca:25:b2:14:50:ba:fe:30:b6:70:
         2c:82:f9:26:1e:79:9a:0d:15:69:5f:10:4b:88:5d:df:0d:8d:
         e7:95:32:f9:56:77:3c:37:a9:74:22:f4:0f:79:6d:ad:5e:4a:
         09:d7:9d:bb:93:ed:2a:0a:30:0a:a4:b4:6e:bb:dc:97:80:06:
         67:18:39:cc:0d:84:6d:5f:20:25:b8:ea:4c:b9:f2:3d:27:d6:
         7b:d9:76:c0:af:c8:43:41:51:b3:99:37:c1:a3:a4:44:85:4e:
         2c:c1:de:6f:8d:c0:2d:73:fd:9c:7f:2e:c4:03:29:fa:b4:70:
         b0:a9:27:ff:5b:33:be:24:ea:5c:74:4e:d7:5e:9b:ac:3e:bb:
         ec:66:ff:90:44:71:51:db:39:80:d6:4a:c7:42:93:4a:04:a7:
         3c:3b:b6:42:ff:8b:2d:0f:4b:01:75:33:3e:e8:67:97:64:87:
         04:0d:37:cb:8a:6a:30:cc:14:28:37:bb:38:d5:6c:c8:53:6e:
         d2:95:87:fc:2e:14:77:7b:ae:9d:20:25:5f:26:61:98:05:db:
         49:97:93:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:01:43 2026 by rpki-client