Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
File:                     MIfS4cwIqVF0v3lOLy3m49A--Co.mft (raw, json)
Hash identifier:          t6GP+lJ/hppp2JSBjnIwroPyJ61xQcaPvtxRcnZgwPI=
Subject key identifier:   A3:42:3D:FC:F4:D3:72:9F:7B:89:D7:FB:2D:EA:58:83:0F:C1:0B:81
Authority key identifier: 30:87:D2:E1:CC:08:A9:51:74:BF:79:4E:2F:2D:E6:E3:D0:3E:F8:2A
Certificate issuer:       /CN=3087d2e1cc08a95174bf794e2f2de6e3d03ef82a
Certificate serial:       019E1EDA769B10242A5B3807BED50FAC29EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
Manifest number:          146E
Signing time:             Wed 13 May 2026 01:01:34 +0000
Manifest this update:     Wed 13 May 2026 01:01:34 +0000
Manifest next update:     Thu 14 May 2026 01:01:34 +0000
Files and hashes:         1: MIfS4cwIqVF0v3lOLy3m49A--Co.crl (hash: TuYw95eqlhUubWOJyHTv2t1DP7XmubmI2sUKB1TPnL0=)
                          2: UO3-ECp44i-4NHov7ZcCJgmk2iw.roa (hash: pq04zRZsIbyhYdzYcYCke50JhIGeXTbV4hV+QB02Ah0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 01:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:76:9b:10:24:2a:5b:38:07:be:d5:0f:ac:29:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3087d2e1cc08a95174bf794e2f2de6e3d03ef82a
        Validity
            Not Before: May 13 01:01:34 2026 GMT
            Not After : May 14 01:01:34 2026 GMT
        Subject: CN=a3423dfcf4d3729f7b89d7fb2dea58830fc10b81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bd:3c:42:bc:fa:a3:cb:22:c2:e8:2d:c7:e8:
                    f2:7b:d7:c5:bc:c5:be:49:d0:6b:75:58:54:f8:21:
                    0d:a3:3b:1e:a4:e8:d1:b7:a8:a3:4a:c2:1f:df:01:
                    ed:36:74:55:c1:c3:45:c3:c6:ea:71:c3:16:f3:a2:
                    a5:ed:aa:66:a2:db:99:a9:f8:f2:df:52:9f:90:8e:
                    de:10:68:2c:55:65:93:6e:df:97:6a:0b:d8:f9:67:
                    77:a7:7c:e1:8e:80:d3:8b:aa:97:aa:08:fc:86:03:
                    0d:42:90:56:79:5f:bb:fb:33:4e:e4:12:b0:af:1e:
                    3a:e2:fa:25:c4:f9:a7:54:87:55:27:37:d9:1a:1b:
                    db:5b:97:4a:48:62:40:8d:0f:64:67:2c:d1:af:81:
                    03:a8:a4:9c:0a:3e:fd:5f:61:8e:96:9b:5a:f1:cf:
                    0e:b8:43:9c:7c:08:98:55:a7:6d:51:5d:67:d2:42:
                    d4:6c:33:b4:9b:52:b3:65:ad:c6:2e:f4:27:81:61:
                    25:56:9e:b4:52:ec:e8:79:6d:19:dd:15:95:95:c1:
                    c1:23:20:c4:68:d9:b7:c3:b9:3e:37:a4:a0:cd:ff:
                    dc:11:ef:24:9c:9c:3e:03:6e:5a:ce:72:5b:44:92:
                    84:62:3f:ad:95:a4:60:16:3a:b0:bb:fd:a9:7c:e6:
                    31:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:42:3D:FC:F4:D3:72:9F:7B:89:D7:FB:2D:EA:58:83:0F:C1:0B:81
            X509v3 Authority Key Identifier:
                keyid:30:87:D2:E1:CC:08:A9:51:74:BF:79:4E:2F:2D:E6:E3:D0:3E:F8:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:06:c5:e8:dd:28:64:26:ee:c1:58:d4:5b:b4:ae:ce:8b:ff:
         1f:05:10:63:99:fc:dc:07:84:4e:9e:1d:fa:c4:af:02:e3:62:
         14:09:2b:f2:6c:c6:8b:dc:ee:b0:42:7f:13:80:38:7e:cb:37:
         4e:e8:26:60:c5:66:7a:ff:89:ed:f2:d5:03:1d:fc:a8:f5:fb:
         56:ae:40:23:1f:d8:4b:e7:d3:c1:b0:a1:23:24:2b:5c:5f:b2:
         e9:c9:14:eb:0f:4f:6e:a7:c0:f6:27:51:ab:a0:8a:8b:54:eb:
         0b:f5:9c:6c:25:09:48:91:ce:2e:70:cd:a7:de:69:32:7c:a9:
         4d:50:b6:43:eb:ad:9f:66:66:a6:67:78:77:0b:28:e9:ae:b8:
         87:e6:42:e5:7b:cc:de:32:7d:04:7d:67:9b:51:e2:7b:e3:7c:
         85:88:a3:d7:bf:8b:75:c7:dd:34:2d:60:99:6e:b6:02:56:1e:
         71:a0:99:23:88:41:21:84:d7:39:6f:7d:71:24:f8:95:6b:78:
         ef:3d:48:5c:4f:49:6d:b4:3e:fd:84:b6:49:74:12:ec:b1:53:
         d5:54:1f:cb:46:f5:90:8a:f5:ed:ab:1d:93:1b:87:6a:fe:f9:
         fb:13:72:88:2f:c6:a3:b4:c9:16:3d:b9:5a:ac:f7:4c:4b:e7:
         1b:41:71:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:03:03 2026 by rpki-client