Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.mft
File:                     04V55MfaAd8EZRhiNumvJ-tzEu0.mft (raw, json)
Hash identifier:          BGIptcTbFroz8QVBGD3ZGLGW5IZ0oSgdhb9N0/idAXE=
Subject key identifier:   40:DD:0B:DD:B2:49:16:74:46:68:38:18:05:F6:E7:35:AC:AC:6E:CB
Authority key identifier: D3:85:79:E4:C7:DA:01:DF:04:65:18:62:36:E9:AF:27:EB:73:12:ED
Certificate issuer:       /CN=d38579e4c7da01df0465186236e9af27eb7312ed
Certificate serial:       019D26CD68562A6C4417152221327F825EAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/04V55MfaAd8EZRhiNumvJ-tzEu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.mft
Manifest number:          05CD
Signing time:             Wed 25 Mar 2026 21:01:28 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:28 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:28 +0000
Files and hashes:         1: 04V55MfaAd8EZRhiNumvJ-tzEu0.crl (hash: l5caxHaiXrPwNhq1Ff69yllUmUij1yNmqd0x0rel1HM=)
                          2: 7f7anZrT89MFBZkGaBINmXO0ODs.roa (hash: cZF5mlMOF2u8sOs1thv9FmekN0EAPaXJ9uJi0gADH+M=)
                          3: XLMwVSFYPkFxkFa1OftvrTKGWbI.roa (hash: x890sGxnsEUAECe/okwWyHGhOTma64LIgKfdoKrMBgI=)
                          4: iWCv7hKkDTmy2BHgFj5y8bvZpHU.roa (hash: QnlaBm+ud/x2dd33dIAeQeFMQgLks+AxViXjnT6/o9c=)
                          5: oyHZ4sApg91Gz7x3jOX_J8EqVD8.roa (hash: 7KkKdokdhQY6oGJ7AGPNp5aHJEGtshRkOO+e+8pjbOk=)
                          6: toeQRWFcBJWcfTSNnmWdC0qc-fY.roa (hash: fo9kO9i2nNhh8AfPejnrE0BEA9S25gM2KO1Fy7h/7g8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/04V55MfaAd8EZRhiNumvJ-tzEu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cd:68:56:2a:6c:44:17:15:22:21:32:7f:82:5e:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d38579e4c7da01df0465186236e9af27eb7312ed
        Validity
            Not Before: Mar 25 21:01:28 2026 GMT
            Not After : Mar 26 21:01:28 2026 GMT
        Subject: CN=40dd0bddb24916744668381805f6e735acac6ecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:48:1d:2e:d8:ec:ed:f7:f1:69:be:a2:f2:fa:
                    1f:20:59:f8:8c:bc:5f:02:41:cf:65:28:ae:a3:d3:
                    38:1b:0f:1e:e6:18:54:4d:e4:21:f4:f9:7c:71:93:
                    5e:da:7d:6c:70:2f:08:05:8b:44:65:3c:5b:a9:a6:
                    97:54:dc:ab:a6:08:2c:9a:ea:4f:98:ce:80:6b:21:
                    b0:7c:66:99:80:81:4f:85:93:0c:48:1d:d0:36:50:
                    1e:4f:f1:da:57:ef:bd:fb:99:d2:74:73:9f:d0:87:
                    b4:cf:62:40:c8:a4:5f:8f:07:d7:2f:8e:2b:57:b0:
                    67:8b:b9:f3:91:bf:b0:95:ec:71:53:5d:7e:9e:b2:
                    46:c6:bd:c8:d8:0a:01:f0:87:02:da:14:6a:da:58:
                    b8:10:22:27:6e:5b:3c:3d:f7:32:84:3f:37:1d:b9:
                    3f:e0:b2:8e:aa:ab:06:1a:6f:4e:b3:c7:d4:eb:1b:
                    4f:a6:b6:53:3e:03:a9:36:23:b4:22:99:41:4c:65:
                    be:7f:cd:05:0a:b6:51:f9:20:88:5a:25:1a:a9:6f:
                    98:56:f2:77:24:ea:9d:f9:fe:6a:b9:c6:a6:0e:31:
                    b9:40:a8:75:17:f5:37:01:21:10:37:8f:c9:8d:ba:
                    dd:0e:00:9f:3b:8b:3c:84:2b:50:22:dc:72:d1:cf:
                    cb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:DD:0B:DD:B2:49:16:74:46:68:38:18:05:F6:E7:35:AC:AC:6E:CB
            X509v3 Authority Key Identifier:
                keyid:D3:85:79:E4:C7:DA:01:DF:04:65:18:62:36:E9:AF:27:EB:73:12:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04V55MfaAd8EZRhiNumvJ-tzEu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:e9:82:70:04:46:8a:ef:36:4e:17:1d:a1:e3:92:7d:8d:46:
         26:0b:72:c4:26:63:b2:26:8f:7a:49:61:74:b8:f6:f0:db:63:
         43:5d:54:b5:22:00:26:50:9d:07:36:c3:fb:c1:49:d8:b2:a7:
         1b:d0:a2:1d:83:8d:93:27:f4:d4:eb:68:8a:4b:fa:d8:18:16:
         82:4d:d7:1c:e1:ee:a3:11:4d:09:67:8c:d6:78:ef:ab:d4:82:
         b4:53:65:68:99:d7:9b:1b:2b:03:f6:e1:07:bd:94:07:9e:06:
         d5:7b:f7:25:b4:5c:f6:50:28:14:38:28:74:0e:96:2a:91:e9:
         15:47:ba:9c:0e:9d:0a:e4:87:03:ad:06:73:a4:69:4c:a2:fb:
         3b:05:ac:c0:23:6f:7c:14:32:2d:cf:a3:3b:76:47:4d:00:38:
         c5:af:35:e5:85:b6:39:85:4c:ba:ff:4a:e8:3b:6f:14:b2:7a:
         de:fe:1c:e7:09:77:a3:69:1a:c6:05:d5:66:b6:80:7d:b8:a7:
         02:9d:f3:c3:21:78:02:bb:99:19:d5:39:42:8a:b8:38:3c:89:
         06:2d:d7:46:72:3c:4f:06:d5:7b:e3:e2:2a:d8:c9:2c:0a:16:
         7a:73:b7:4e:45:bd:f3:6d:76:3d:f6:a2:0d:e5:3c:7e:a8:50:
         09:71:44:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:26 2026 by rpki-client