Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
File:                     Phq1-Isc13KPF3zIbjO8654iFLI.mft (raw, json)
Hash identifier:          darnDet3yZqtqA4r0isIRUwtJx3+YjMJvsxRW7/DTIU=
Subject key identifier:   A3:5A:85:F4:BE:2D:4D:7D:B4:AD:F1:E1:04:A4:2B:17:45:97:A4:1F
Authority key identifier: 3E:1A:B5:F8:8B:1C:D7:72:8F:17:7C:C8:6E:33:BC:EB:9E:22:14:B2
Certificate issuer:       /CN=3e1ab5f88b1cd7728f177cc86e33bceb9e2214b2
Certificate serial:       019E1F479771F2D1CA83D6286B26478BA511
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
Manifest number:          1566
Signing time:             Wed 13 May 2026 03:00:45 +0000
Manifest this update:     Wed 13 May 2026 03:00:45 +0000
Manifest next update:     Thu 14 May 2026 03:00:45 +0000
Files and hashes:         1: GS6BipD7_5hxSt-mcUK4xhC7nfs.roa (hash: Y3m/+3LhYTq0/m4Jg5RxI1jwLpyN0uS9/rt7VXKQ5Uw=)
                          2: Phq1-Isc13KPF3zIbjO8654iFLI.crl (hash: PPvciJTSTYlQpFGIWZ4Pz2xTMo9uXkCirfb8BBrgZKc=)
                          3: jczQ46bhJ-baFzt6CdYsHNkjf2o.roa (hash: eHEbMmI0CuWBXFc5n1CIh09N5qVmX2pyZmCOeRtWowg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:47:97:71:f2:d1:ca:83:d6:28:6b:26:47:8b:a5:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e1ab5f88b1cd7728f177cc86e33bceb9e2214b2
        Validity
            Not Before: May 13 03:00:45 2026 GMT
            Not After : May 14 03:00:45 2026 GMT
        Subject: CN=a35a85f4be2d4d7db4adf1e104a42b174597a41f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ef:50:7b:6d:fd:8f:64:3b:b5:4b:c0:02:ed:
                    10:16:70:3a:ad:ea:81:ab:d0:30:53:f0:f6:ab:21:
                    f7:bd:7f:6f:aa:01:a1:eb:25:0c:fd:d2:c1:ce:b6:
                    07:0b:3b:d5:5b:f4:53:d2:b0:23:28:42:77:53:12:
                    96:50:f8:43:52:8c:ad:9e:db:42:f3:26:0c:6e:13:
                    10:12:11:a9:21:c7:fc:9a:fc:a9:b9:43:1e:f6:ed:
                    99:8e:a2:cf:94:2a:0b:4a:60:83:4c:cd:be:80:7b:
                    f5:3b:51:2f:f7:99:19:32:a5:5c:c5:c6:ef:db:69:
                    82:32:e2:08:80:cc:cd:05:c2:97:58:0c:6e:34:36:
                    c3:e9:25:cb:b6:5a:ef:e3:68:43:2f:14:b7:ac:28:
                    4d:c1:17:37:f8:45:ad:a3:67:9c:07:03:13:72:ba:
                    d8:10:e0:81:71:f7:1c:65:53:2e:9d:6e:ac:fb:d0:
                    a5:98:f0:66:af:da:e4:47:aa:b6:4a:26:fb:74:5b:
                    8a:db:96:6c:9a:82:f8:d4:07:33:26:4f:a7:38:22:
                    2f:3f:f9:5b:ae:79:2d:33:12:78:95:be:36:34:b8:
                    9f:56:2c:b9:e3:14:f1:82:72:6b:4d:32:f8:ff:f7:
                    58:d4:c4:b8:67:6f:6e:9d:6f:aa:ae:88:23:d9:fd:
                    dd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:5A:85:F4:BE:2D:4D:7D:B4:AD:F1:E1:04:A4:2B:17:45:97:A4:1F
            X509v3 Authority Key Identifier:
                keyid:3E:1A:B5:F8:8B:1C:D7:72:8F:17:7C:C8:6E:33:BC:EB:9E:22:14:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:4d:f8:49:67:7b:89:ed:24:ee:2a:7f:bb:8e:e3:9b:b6:b2:
         2e:1a:69:7a:38:48:98:a6:4d:6e:fd:ef:a4:82:7c:c5:a5:97:
         1c:3c:7e:5e:2c:b8:8d:73:6e:f4:ee:a5:88:23:7f:f4:c0:f8:
         e4:59:f6:ed:d2:89:75:b7:cc:0d:29:8b:2d:73:20:59:fd:ec:
         55:c5:b8:ab:96:5f:63:38:07:37:69:c6:bb:fc:bd:31:7a:d3:
         3c:96:89:a0:48:64:5f:39:1f:d7:a3:77:2e:76:00:f1:c2:36:
         e3:41:69:f2:91:9b:42:4f:a4:56:85:06:25:9d:c1:d5:6c:8d:
         f8:0e:5f:70:d6:49:a6:d3:d3:33:64:af:b5:0c:fd:85:7b:0d:
         47:09:6b:59:6c:98:95:25:4f:c4:7d:a0:c4:80:2f:c4:0b:02:
         b2:ce:48:6b:06:7f:dc:f1:53:ab:85:6e:84:7e:89:51:fe:d7:
         90:66:55:4d:eb:77:60:78:1f:77:15:1b:3f:b0:d0:5e:98:12:
         aa:e0:f0:a0:f9:01:09:5b:6e:52:b7:bd:f1:1f:97:41:7c:3c:
         db:b5:d7:0a:b3:02:13:17:c9:de:23:fe:21:14:2a:37:a8:04:
         17:ca:ed:ef:f0:ef:c6:73:52:5c:cd:8a:6a:6e:4a:46:1d:62:
         d5:1f:28:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:25:51 2026 by rpki-client