Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.mft
File:                     Mh__9QM6eQGj6fJ19txujqD5O4o.mft (raw, json)
Hash identifier:          RXnU3phReDtTOrNfFX0ADmOLEpA2iSCn7HMEuFOnGlA=
Subject key identifier:   5E:43:A0:17:E2:B3:BC:F9:B2:6D:45:0F:CD:0E:21:18:0C:32:F3:E3
Authority key identifier: 32:1F:FF:F5:03:3A:79:01:A3:E9:F2:75:F6:DC:6E:8E:A0:F9:3B:8A
Certificate issuer:       /CN=321ffff5033a7901a3e9f275f6dc6e8ea0f93b8a
Certificate serial:       019E1E6CAC238261F9F3BE6896288334692E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mh__9QM6eQGj6fJ19txujqD5O4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.mft
Manifest number:          179B
Signing time:             Tue 12 May 2026 23:01:38 +0000
Manifest this update:     Tue 12 May 2026 23:01:38 +0000
Manifest next update:     Wed 13 May 2026 23:01:38 +0000
Files and hashes:         1: 3Q7_GkdVY3UrWG6hnKogPdwlTMA.roa (hash: /esAa54gtGHxOcqdkkMygDWuDj7d6Mjd5bQs/BpC4NA=)
                          2: Mh__9QM6eQGj6fJ19txujqD5O4o.crl (hash: B1cxmBx6tyevje+P8lL5gdgjVzodIgc7pGWwbKgeG2U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mh__9QM6eQGj6fJ19txujqD5O4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:ac:23:82:61:f9:f3:be:68:96:28:83:34:69:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=321ffff5033a7901a3e9f275f6dc6e8ea0f93b8a
        Validity
            Not Before: May 12 23:01:38 2026 GMT
            Not After : May 13 23:01:38 2026 GMT
        Subject: CN=5e43a017e2b3bcf9b26d450fcd0e21180c32f3e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:59:36:04:26:eb:20:34:ed:dd:83:b9:72:1b:
                    ba:21:5b:0f:45:8b:5b:3b:c6:fb:e6:71:54:7b:e5:
                    94:09:ca:f0:43:65:0c:4b:c0:71:78:3a:e7:70:27:
                    82:65:aa:6c:46:04:63:ab:70:f9:06:ca:3a:84:0d:
                    fb:0a:50:05:af:f9:9e:11:b0:a3:13:c8:e5:f5:db:
                    4f:48:38:92:a4:71:fd:ec:82:aa:a7:e0:7a:0e:07:
                    78:82:2c:95:a3:09:f3:2e:f1:7b:a0:19:2f:ba:81:
                    75:c8:e7:9a:91:3f:80:30:2e:70:e0:29:9c:e5:91:
                    04:01:80:0a:83:b9:10:96:0e:ef:95:f7:4e:cd:f0:
                    19:3b:85:0a:aa:c9:4c:02:e4:21:c5:b6:42:30:33:
                    58:b7:f9:13:ed:67:b8:7b:6b:94:83:1e:ed:21:ee:
                    4c:ff:81:dc:c7:56:9f:4b:13:50:b9:ad:97:28:1f:
                    30:8a:b8:df:c0:21:85:21:b3:34:ed:b2:34:f5:29:
                    92:70:ba:34:35:a8:b2:22:9b:e5:83:45:cd:99:24:
                    a4:7b:db:d2:e4:6f:fa:8a:4b:55:c6:f0:77:c2:ea:
                    8d:f8:7f:c7:17:5c:4d:7b:9c:6d:18:f7:88:ea:db:
                    e3:46:15:33:dd:7d:49:48:d6:37:f2:c7:1a:d2:0a:
                    07:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:43:A0:17:E2:B3:BC:F9:B2:6D:45:0F:CD:0E:21:18:0C:32:F3:E3
            X509v3 Authority Key Identifier:
                keyid:32:1F:FF:F5:03:3A:79:01:A3:E9:F2:75:F6:DC:6E:8E:A0:F9:3B:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh__9QM6eQGj6fJ19txujqD5O4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:8e:26:38:8e:7a:ae:93:56:2f:f6:40:b4:e6:0e:68:aa:28:
         da:7f:87:60:78:34:19:e1:a9:3b:c5:a8:64:5e:2d:58:f8:97:
         5a:6e:81:a7:5e:2d:0b:e7:27:a0:0c:f6:80:88:8f:b2:87:e9:
         c3:d0:ef:b0:23:fd:af:63:af:93:78:55:1f:ff:57:dd:50:08:
         6a:6f:40:bc:c4:3c:63:27:0c:d6:86:54:64:93:03:15:a8:2e:
         00:f5:d1:66:a3:70:87:fe:37:63:63:35:d6:00:49:39:43:70:
         96:7b:30:ed:27:e7:94:f5:b2:65:1b:3b:e2:c6:b2:ee:a9:b3:
         ad:8c:a9:7e:a1:b6:c2:a6:1e:ed:e4:cf:49:fd:ba:35:3e:67:
         9a:85:69:ae:c5:9d:ed:ce:90:aa:e3:75:db:99:b9:87:8a:14:
         a4:95:ec:48:f8:ea:45:2c:f3:3c:5b:94:80:e4:b2:38:d4:0f:
         be:43:0a:b8:b9:96:e3:83:91:d2:4f:79:e1:ff:f6:68:01:c7:
         b1:7c:f4:04:2e:d0:e4:7a:66:df:53:9e:15:cd:b0:24:b3:4f:
         6c:0d:4d:54:d4:e9:a5:be:75:c6:35:cf:ff:e5:87:cf:95:a1:
         ec:c7:f1:29:b9:7b:0a:50:30:8d:e8:ea:39:6d:80:49:b2:50:
         72:28:bc:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:21:29 2026 by rpki-client