Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft
File:                     M41C-7P0P1bduHguZUkKI9hbcuE.mft (raw, json)
Hash identifier:          YtwyrseJTGW885H9RHt7oy7ZuFMS/s4tN5ohx1wCTWk=
Subject key identifier:   D0:57:CF:CC:B9:1E:71:B1:B9:8B:FC:13:BC:E8:C8:CE:96:35:0D:BB
Authority key identifier: 33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1
Certificate issuer:       /CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1
Certificate serial:       019E1EA2A8BE9368FD1A4C560191D583A903
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft
Manifest number:          0D83
Signing time:             Wed 13 May 2026 00:00:36 +0000
Manifest this update:     Wed 13 May 2026 00:00:36 +0000
Manifest next update:     Thu 14 May 2026 00:00:36 +0000
Files and hashes:         1: 1EuhVKsVw5uoAe1_WgbtKc856tQ.roa (hash: 91jJhXvalSRHITuPYha5bt1vLrQQuYCZQo48j45dFVg=)
                          2: M41C-7P0P1bduHguZUkKI9hbcuE.crl (hash: 6xHwyqG/iwxTOw0uVtIABPA9y7p1iniI3pwuDEbFQkg=)
                          3: Rg6PbbInPrmmUh3N22EeHzxOYn0.roa (hash: LEJHR9iD1d51yema4X3NSGFZJp50Z/6oaRBU+4pvUIg=)
                          4: Vb5LUMN_f-rlqzMX4GkNymfjZAc.roa (hash: xNINsOBY8pk7iexk7ULkbW+iYBp08xHS+Bw7bc6Aavk=)
                          5: uiTCPMJO6WqLGnhBcOzk3vGNCRI.roa (hash: /uSluzarRD7hzKeftDLlUNqVrK3dUPCuVWYOJEdnTrg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a2:a8:be:93:68:fd:1a:4c:56:01:91:d5:83:a9:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1
        Validity
            Not Before: May 13 00:00:36 2026 GMT
            Not After : May 14 00:00:36 2026 GMT
        Subject: CN=d057cfccb91e71b1b98bfc13bce8c8ce96350dbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:14:65:05:34:b0:78:56:18:38:e5:3c:bf:5f:
                    d2:23:07:5a:cc:d7:3a:fe:28:f9:40:dc:08:54:5b:
                    f6:32:2e:dc:98:81:f9:51:ca:9d:9a:4a:75:a1:7e:
                    74:30:7f:c5:e9:33:ef:ac:63:3f:11:aa:a0:23:d0:
                    aa:94:09:f1:d3:25:13:27:cd:2b:90:0c:71:77:c4:
                    c3:a9:f0:c0:70:2a:d8:45:5d:02:99:3d:52:f5:fb:
                    3e:97:62:7a:37:e7:d9:a6:93:ab:ea:e8:88:2c:b9:
                    05:b3:fd:68:64:d5:7a:29:60:c1:78:56:21:2f:84:
                    46:0b:77:e6:f6:45:54:60:62:0f:23:15:2e:4b:64:
                    5c:e2:9d:1e:5c:91:58:68:16:eb:04:24:2c:f9:33:
                    e8:a7:58:60:ed:d9:2f:2d:4a:45:fb:e8:35:4f:6f:
                    a7:1a:87:2f:95:a3:12:47:3f:b3:cc:32:23:32:68:
                    35:72:eb:7f:4c:5b:1b:e0:59:e5:04:e2:a7:29:50:
                    94:ac:22:a8:b8:28:92:da:05:0b:50:e4:a4:ef:61:
                    a9:e2:6d:3f:74:c9:0c:83:ea:86:7c:f4:93:4e:e0:
                    d3:c2:b6:2e:49:f3:cd:c2:02:5d:33:b9:03:66:5b:
                    81:92:97:2d:9d:35:e1:46:a0:81:f2:59:03:35:21:
                    91:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:57:CF:CC:B9:1E:71:B1:B9:8B:FC:13:BC:E8:C8:CE:96:35:0D:BB
            X509v3 Authority Key Identifier:
                keyid:33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:3f:10:cd:39:cf:c5:4d:65:70:1c:d1:2a:8f:59:43:38:14:
         80:11:84:5f:94:80:cc:66:3d:e9:de:46:27:93:6c:84:fd:72:
         e4:3e:b0:13:25:f7:a6:2c:2b:61:63:d0:f9:74:3a:b5:0c:29:
         78:0c:06:05:67:42:f3:a7:42:b5:96:90:6b:04:1f:30:1f:1a:
         56:6e:d7:c6:a5:62:3b:3b:78:80:47:f4:7d:f4:8c:c6:a3:88:
         0d:df:f8:6e:1d:4e:c0:1e:e2:5d:20:bb:df:9a:f9:37:56:18:
         11:3f:cf:8e:81:a9:05:8b:5e:74:71:30:5a:45:b7:6a:cc:e5:
         43:cd:57:6d:9c:93:93:18:79:b7:e6:ac:1f:8c:db:d1:58:62:
         91:b3:d3:e4:48:4f:1c:9c:07:31:a3:99:9c:ed:75:3a:59:6c:
         a7:bf:82:a6:62:46:d6:39:1f:3f:71:4a:26:cd:5e:b5:7f:77:
         08:90:41:7b:39:d0:69:12:8e:04:6a:71:fd:35:24:db:70:16:
         21:f4:81:13:b0:9d:f9:b0:b2:c6:d9:81:77:df:95:1c:33:37:
         5a:42:1c:b0:ea:eb:45:79:41:c1:44:c7:f0:38:f7:2b:73:ff:
         5b:ad:fa:3a:ad:7d:33:4f:49:9f:80:31:f4:ba:c2:d0:9a:03:
         b1:94:63:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:57:36 2026 by rpki-client