Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
File:                     iD9yYGUAJrlzoYp_PplY0yHs4ds.mft (raw, json)
Hash identifier:          tZ0H8bLcfeNWTeHR1ukNuBtIFP8KamCV6r8AG9Z0bMo=
Subject key identifier:   E3:C7:9B:41:45:9F:AC:E5:CA:5A:E3:E5:F0:6C:D7:34:A7:13:BE:04
Authority key identifier: 88:3F:72:60:65:00:26:B9:73:A1:8A:7F:3E:99:58:D3:21:EC:E1:DB
Certificate issuer:       /CN=883f7260650026b973a18a7f3e9958d321ece1db
Certificate serial:       019E1D90D8D89E411A00FE3E9FE2F347C0DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
Manifest number:          0350
Signing time:             Tue 12 May 2026 19:01:32 +0000
Manifest this update:     Tue 12 May 2026 19:01:32 +0000
Manifest next update:     Wed 13 May 2026 19:01:32 +0000
Files and hashes:         1: _nHQVX4gUfRcsyUXq5yHaGKdYhU.roa (hash: R3LVcKNvDMfvVqa7EK825MNQi2hSPcfWJhILpOzo+sU=)
                          2: bZGmBUJyBwx1sWA4_0env9myjwE.roa (hash: 4tsqiBWMFE9lEeiy6ibqGVOqXOKllflXzZwV282QLH8=)
                          3: iD9yYGUAJrlzoYp_PplY0yHs4ds.crl (hash: Uz4AmryBBmme4BG6sNUkZJqhM1FMdt9snJ+yAeF2ync=)
                          4: yWPZuql0MvhSm3JMA1hMhAx0qW8.roa (hash: 2i2jlPPD7IE9jQ4n5YA8j4oeQ4N7jBY19i7lQ4cGyLM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:d8:d8:9e:41:1a:00:fe:3e:9f:e2:f3:47:c0:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=883f7260650026b973a18a7f3e9958d321ece1db
        Validity
            Not Before: May 12 19:01:32 2026 GMT
            Not After : May 13 19:01:32 2026 GMT
        Subject: CN=e3c79b41459face5ca5ae3e5f06cd734a713be04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:48:46:8d:44:57:06:a8:63:bd:c6:85:e7:47:
                    ee:44:14:73:dc:ea:d2:7b:c0:07:94:67:3c:fb:18:
                    13:e1:1b:61:37:7a:8e:d9:e4:bb:5c:ab:9e:b9:a4:
                    f7:ee:a4:06:d6:90:cd:b2:47:31:60:9c:aa:96:1d:
                    11:60:9c:c5:87:ad:fb:b0:71:22:d4:8c:48:cd:36:
                    7f:30:4c:1b:17:eb:0b:09:4f:02:ed:83:ad:06:85:
                    cd:4b:f3:f5:9c:e9:c3:6c:6b:03:ac:e4:45:77:93:
                    02:b2:1d:67:a4:e7:c8:73:11:f8:c6:28:07:e0:e4:
                    fa:bd:15:01:67:1e:9e:0c:eb:a9:80:9d:c3:85:06:
                    7e:4e:7c:2d:62:b0:22:68:a0:a7:63:64:da:f8:c1:
                    ec:04:60:bb:44:18:f9:f9:0d:ec:b3:9f:dd:a6:81:
                    82:0c:72:4c:0f:7c:09:a8:36:fe:64:b7:cf:6c:e2:
                    59:d9:92:95:25:f7:1f:fc:08:83:26:a8:cc:f5:14:
                    f7:a1:15:7f:7c:5a:b5:d4:fd:b7:9b:12:fd:d1:2d:
                    79:41:09:0e:07:93:ba:2d:14:e9:87:50:b5:35:57:
                    7c:b6:4f:a3:f6:c6:90:98:29:2b:6c:e8:a3:97:56:
                    44:ce:f7:a9:b2:b2:8b:6e:89:35:85:0e:3c:14:3e:
                    0b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C7:9B:41:45:9F:AC:E5:CA:5A:E3:E5:F0:6C:D7:34:A7:13:BE:04
            X509v3 Authority Key Identifier:
                keyid:88:3F:72:60:65:00:26:B9:73:A1:8A:7F:3E:99:58:D3:21:EC:E1:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:51:c2:f2:b4:29:e3:07:6b:24:cc:56:47:2b:ec:ce:69:97:
         07:c9:95:df:93:f6:9f:4c:dd:9a:ec:f4:36:79:f7:87:49:3f:
         13:9b:0d:f8:e9:8c:eb:f7:91:0f:ab:10:32:5f:1e:dd:71:9b:
         6b:8a:96:3e:7a:a0:88:15:01:1b:2e:98:ec:1c:69:b4:d7:aa:
         87:41:14:73:dc:30:dc:08:fe:af:4b:30:b1:45:4c:53:88:02:
         85:cb:71:1a:3d:ca:17:ac:bf:ea:c7:69:3b:8b:da:b7:02:80:
         a2:8e:0d:e6:30:8f:85:7e:ce:2b:a8:c0:f0:77:b0:ae:56:f9:
         57:d4:15:11:6b:0f:29:66:42:f6:b1:ad:56:d4:57:4d:f5:92:
         a0:5e:01:e1:e9:86:fd:dc:ac:36:30:83:aa:37:c9:ea:ed:46:
         e2:7a:e6:53:cc:c4:a4:f1:6d:c9:1f:60:1d:1f:fb:d6:3f:f7:
         26:82:aa:46:1e:33:c4:f0:38:1f:ef:84:4a:7d:fc:d6:c0:30:
         29:6f:2b:c3:1d:5b:75:fc:cb:8c:56:8b:64:2d:60:71:b9:b8:
         c7:b9:8b:b7:a1:ad:18:5b:d6:9b:17:27:93:4b:89:70:34:6d:
         18:e2:9f:bb:74:b9:ac:00:1e:98:34:99:06:46:45:c7:18:3e:
         9b:b3:ad:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:14:00 2026 by rpki-client