Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft
File:                     R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft (raw, json)
Hash identifier:          r5iKYEopfxtYyeq0vJb9eXIyiOqzcEog3+cSvi18vNk=
Subject key identifier:   52:A7:0C:1F:B9:BF:60:58:CD:A5:BF:1B:57:E6:98:DD:52:CE:0F:6F
Authority key identifier: 47:D0:64:FB:3E:54:1F:23:56:30:65:E4:8F:30:0F:2C:FD:FE:00:9A
Certificate issuer:       /CN=47d064fb3e541f23563065e48f300f2cfdfe009a
Certificate serial:       019E1F118610647EAFCC04DCC0EFA7A50D21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft
Manifest number:          13AE
Signing time:             Wed 13 May 2026 02:01:42 +0000
Manifest this update:     Wed 13 May 2026 02:01:42 +0000
Manifest next update:     Thu 14 May 2026 02:01:42 +0000
Files and hashes:         1: GfskLOZoVhgQg_wzxEm8GfZcHM4.roa (hash: ofrsA1DT7Aku9raL2XzjxdFLHd4Z33+79Febk9dotIQ=)
                          2: L_HXYmOHhoM2YRE97tQgr7r3-SI.roa (hash: FgKVtJ0H+q1J3xzFBhPOLkROSf4gdoaYW3BrXLNdbVA=)
                          3: R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl (hash: Jfb79Ta11e6t5ELKnqxsK7633U0i+G5KFoXY2ks3bH8=)
                          4: YFarakxWfFYCLAQp5ljHgqOhWAE.roa (hash: RE/+b+N1gEHRcglkBMv26yH60CrY4s//QKu/NgO0inU=)
                          5: ikavjZ5f6GJawA563R9lfvFF_yw.roa (hash: xj6NjfSn9z5nQZs/dmQKm0hr04bNYyjHHm+s3X5QLbI=)
                          6: qQfpp7t9DK9V6gL_8q23BxXNnRw.roa (hash: lJumWK87pFOc6ZFcfXBZ+TluPfr8swJRdJzi3gOyHEc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:86:10:64:7e:af:cc:04:dc:c0:ef:a7:a5:0d:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47d064fb3e541f23563065e48f300f2cfdfe009a
        Validity
            Not Before: May 13 02:01:42 2026 GMT
            Not After : May 14 02:01:42 2026 GMT
        Subject: CN=52a70c1fb9bf6058cda5bf1b57e698dd52ce0f6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:13:f1:d5:06:c8:7b:c0:cf:38:e5:ff:b1:9a:
                    fb:2d:72:1c:ad:73:48:aa:15:af:fe:de:a9:4a:5d:
                    ca:1d:69:95:03:b4:17:4d:59:c9:87:b5:81:d6:68:
                    78:8e:f1:a2:47:63:7e:7b:a6:d0:45:c0:92:a8:17:
                    38:d1:bf:4b:b7:84:13:55:f6:d5:8c:c4:52:c4:b1:
                    47:e9:17:82:ae:09:7f:3b:1f:6f:e6:16:f6:55:a3:
                    d5:11:0b:b1:15:15:04:aa:48:70:cb:31:fb:bc:5e:
                    0a:fc:59:35:d9:c7:52:42:a9:2c:84:01:6a:59:d1:
                    2f:fd:57:40:36:38:fb:b7:07:47:4b:cb:5e:ce:c1:
                    18:1d:25:8f:64:45:a7:6d:6f:c5:e0:ba:c3:46:6e:
                    c1:42:0f:65:3d:2d:9e:d6:76:1a:47:88:cc:43:2e:
                    26:53:ea:d9:e4:3d:26:18:49:43:4b:08:d6:d2:40:
                    24:b4:7e:b8:69:19:15:d4:9d:93:39:b1:40:c4:d0:
                    c4:bb:74:da:63:5a:4f:bb:68:2d:2e:be:98:9c:cb:
                    6e:00:56:55:6e:55:dc:5b:a3:5d:51:2a:74:ac:d5:
                    cb:cb:80:d6:3e:7c:f9:a2:3a:ae:d3:bd:28:09:5d:
                    38:34:af:60:39:66:e2:46:7e:fa:f0:01:7d:e3:63:
                    01:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A7:0C:1F:B9:BF:60:58:CD:A5:BF:1B:57:E6:98:DD:52:CE:0F:6F
            X509v3 Authority Key Identifier:
                keyid:47:D0:64:FB:3E:54:1F:23:56:30:65:E4:8F:30:0F:2C:FD:FE:00:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:5d:e1:fd:4b:06:64:5d:3e:e8:04:4d:1f:a4:ad:65:88:be:
         47:c2:4b:85:e2:8a:bd:ae:06:22:f7:a2:8b:4c:9c:01:86:b1:
         22:31:2c:eb:3c:ef:74:22:20:ef:39:12:9e:2f:7a:4b:f0:95:
         cf:f1:69:ef:15:6c:20:4c:0c:b2:de:6b:7a:96:71:6b:f6:af:
         58:8a:97:59:1d:4c:35:a2:c1:ae:4f:ea:62:2a:a1:ce:33:f7:
         eb:d7:14:11:e8:d5:92:7f:f5:62:19:81:c3:1a:ca:56:da:d3:
         7e:6c:e2:78:ff:e1:2f:51:ae:c8:7f:a1:79:e8:3f:0c:5d:a7:
         73:63:ae:f7:4a:6c:52:ab:05:52:e8:b7:c1:8d:16:5a:76:bc:
         37:f6:76:cb:fb:1e:da:08:ca:d7:6b:be:98:31:5c:eb:42:4d:
         a3:c8:2d:0d:5d:1c:8d:08:2a:19:e5:be:1a:53:e5:e3:2b:58:
         48:15:db:44:a9:d8:c7:cf:90:bd:af:a0:5a:03:bc:c8:42:84:
         50:91:1b:47:0a:0b:ef:45:2b:cf:0c:3f:ed:8d:f4:aa:b9:a1:
         7b:a5:eb:a5:5b:81:f5:81:29:b6:99:de:bd:17:3a:ca:0c:27:
         b1:f1:37:c3:59:7b:0c:ce:b9:2e:90:ab:83:95:20:61:19:74:
         2f:08:fd:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:35:06 2026 by rpki-client