Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.mft
File:                     U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.mft (raw, json)
Hash identifier:          Vdl5gpz5mCKWPUbtOq1HhR52OHHVmyqskhz9NefEaLo=
Subject key identifier:   A2:A6:E2:3B:2C:FB:E0:F8:BD:57:56:A7:D4:87:B9:8C:14:B0:9D:13
Authority key identifier: 53:D0:35:9F:9F:8B:20:81:5C:E4:D9:88:E1:09:BF:82:30:6E:4C:74
Certificate issuer:       /CN=53d0359f9f8b20815ce4d988e109bf82306e4c74
Certificate serial:       019D27E00C09AAF7A3451D82B4C4CC113786
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.mft
Manifest number:          0F22
Signing time:             Thu 26 Mar 2026 02:01:27 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:27 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:27 +0000
Files and hashes:         1: 8cnYIAFov8XyQ7mz1E9Sdbppeps.roa (hash: djldwC6E58AUQMRWAx9zysCU5AJ6c7wvZ0F1503TLkk=)
                          2: KwmyiRC_z9hBeAnC7i3MkCttPhg.roa (hash: RYQ+8HBwCcHX5dXE4t1Fu0qIu5oQb2OLAyRR/Oum9+k=)
                          3: OwXJ8_aEBHXSy1C37RbJt1tMNVE.roa (hash: qtj2hH8I97IITpCpJRG/cr14e5foNr9LkXNGjgwaZLo=)
                          4: U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.crl (hash: dY9SdFnIoBdu75MrsGBfCJpBGTaAZajnfwzXenv2Ek4=)
                          5: YZJglGEU2Eglwipdf3BrI1nPGU8.roa (hash: HvYFoJaRx3YivsI4P51tYw6KXpvSJjjP5d3EcujKEhY=)
                          6: pgXOO-X2YoQD1xUfgpwy2AJKCd4.roa (hash: A+gEG2oAGHzvq6lumOztmhDUDyh36zMLQy0QLJwvsGw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 02:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:0c:09:aa:f7:a3:45:1d:82:b4:c4:cc:11:37:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d0359f9f8b20815ce4d988e109bf82306e4c74
        Validity
            Not Before: Mar 26 02:01:27 2026 GMT
            Not After : Mar 27 02:01:27 2026 GMT
        Subject: CN=a2a6e23b2cfbe0f8bd5756a7d487b98c14b09d13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a4:f6:c5:0d:93:bf:b9:c2:16:10:66:25:4d:
                    01:a2:86:74:6b:be:f8:f3:03:aa:73:d0:11:50:8b:
                    b6:56:95:71:94:de:d8:fa:38:f6:01:2e:fe:63:f1:
                    42:26:96:5b:91:e4:69:71:64:a6:fa:4b:17:f7:28:
                    04:b8:a1:bc:7f:8f:bf:9d:36:b2:d8:75:52:f0:a3:
                    68:78:48:a0:12:eb:0d:3f:af:82:c9:e9:bf:82:e1:
                    06:71:0e:a7:aa:6a:f4:bb:4a:53:4e:09:c4:71:5b:
                    0c:68:e3:6c:e9:5b:4c:c6:4f:72:7c:4d:0b:55:57:
                    5f:5f:b5:29:4e:be:25:2c:e0:25:30:bb:73:ea:9b:
                    22:7d:cf:65:b7:37:ad:d2:30:ee:c9:ca:2d:b0:1a:
                    c2:90:be:6a:db:8a:5c:6a:64:a2:10:75:20:fd:0d:
                    9e:80:1a:5a:92:44:c4:70:e8:94:9b:14:b5:b2:9d:
                    36:00:bf:a1:d6:8a:5e:18:7e:7a:0d:48:78:ce:80:
                    1d:21:40:b5:c9:01:c3:cf:e3:8b:fc:34:a6:ab:9a:
                    29:f9:90:f9:4c:69:e4:55:90:5d:a5:5d:fa:8e:71:
                    25:05:18:67:a2:14:1e:ac:23:8e:a2:bd:c5:77:5a:
                    25:2a:78:a9:06:9b:f6:f4:9b:a2:eb:69:b6:0f:52:
                    c9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A6:E2:3B:2C:FB:E0:F8:BD:57:56:A7:D4:87:B9:8C:14:B0:9D:13
            X509v3 Authority Key Identifier:
                keyid:53:D0:35:9F:9F:8B:20:81:5C:E4:D9:88:E1:09:BF:82:30:6E:4C:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:d6:b2:41:c8:06:85:79:c9:1e:3e:68:26:08:9c:18:6c:be:
         86:04:f9:84:c0:f6:35:68:88:24:b5:fd:d4:b8:17:f4:ea:e1:
         74:df:fc:5a:fa:c3:1e:01:10:7b:58:7b:74:90:5d:03:9a:e2:
         73:25:ba:62:5b:1c:3b:0c:7b:f1:57:80:5d:9a:6a:64:53:99:
         df:70:4b:3f:8e:3c:d8:46:3d:6f:9a:d0:a1:f5:8b:f3:38:e8:
         3c:27:e9:de:b3:74:97:27:19:0c:98:4c:fe:35:0b:4e:30:2b:
         20:c8:3a:91:7c:a8:49:94:2a:57:b5:1e:1a:a1:61:2b:06:53:
         d0:7b:ad:7b:d5:6e:85:ed:5d:5e:80:80:25:cb:a1:e0:81:06:
         b6:21:4b:16:be:97:59:ba:5e:b2:29:c3:85:13:e7:1d:9c:02:
         ab:4f:1a:26:78:1b:f0:b9:f2:1e:cd:58:b1:95:a7:e9:f3:6b:
         a6:bd:5d:ff:5f:7f:94:08:2a:91:25:7d:c7:b7:bf:a4:5e:3b:
         b2:94:8c:24:5b:c9:90:b6:7f:71:32:1b:36:17:b9:55:1e:0d:
         75:80:e6:b8:ab:fd:e7:55:b2:8d:e2:d4:a8:56:a5:27:47:17:
         d8:4e:96:c5:49:e7:e1:39:a6:1f:06:09:6a:f9:61:15:47:26:
         7f:e2:72:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:02:42 2026 by rpki-client