Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
File:                     imBgNTuY9TMW0CL6AdKZ11__ItY.mft (raw, json)
Hash identifier:          G0/rl403OeygLpH9lf8ZKB3vDLtW5EXWa1T0SC80jbQ=
Subject key identifier:   31:7E:8F:B0:CA:51:C4:38:CB:63:18:75:F1:D2:4F:41:1A:6D:56:37
Authority key identifier: 8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6
Certificate issuer:       /CN=8a6060353b98f53316d022fa01d299d75fff22d6
Certificate serial:       019E1D9092BEB3273C6CC6BB2E79A8D93348
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
Manifest number:          0636
Signing time:             Tue 12 May 2026 19:01:14 +0000
Manifest this update:     Tue 12 May 2026 19:01:14 +0000
Manifest next update:     Wed 13 May 2026 19:01:14 +0000
Files and hashes:         1: 5IpNdlCgrUHJ7pHRr0b5ArsqYU0.roa (hash: xr8w8Pcm6xv8Iv8GF0pLNSo2PiY57WXM/44P4LGrF7o=)
                          2: imBgNTuY9TMW0CL6AdKZ11__ItY.crl (hash: ETjt61OY1z/zomw3ACVu+xhke2n/eplwLqqjCbNiYM8=)
                          3: zF9eGkhoLr3CbGy9zOkPy25h_YE.roa (hash: bP090f2Z2EfnMh5UIQSeu1q8lNph+5x0Nm3ux6Ds3vU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:92:be:b3:27:3c:6c:c6:bb:2e:79:a8:d9:33:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a6060353b98f53316d022fa01d299d75fff22d6
        Validity
            Not Before: May 12 19:01:14 2026 GMT
            Not After : May 13 19:01:14 2026 GMT
        Subject: CN=317e8fb0ca51c438cb631875f1d24f411a6d5637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4f:44:f4:e2:fa:57:e1:e6:42:6a:a9:35:e1:
                    56:df:61:95:1f:8e:f7:c7:4c:45:7a:e3:9c:5b:a8:
                    4c:d4:6e:79:30:9d:08:a7:0f:1b:d9:31:60:20:11:
                    3f:2f:96:03:f6:84:e8:88:6f:94:2f:c3:62:c2:fe:
                    ab:2a:e2:ff:f3:b6:91:e6:46:1e:05:28:11:8a:61:
                    22:a2:79:af:db:65:dd:0a:79:36:27:a6:26:9d:e2:
                    aa:a3:6e:43:1e:7a:f7:87:41:0b:7b:ac:1f:98:fe:
                    72:35:96:9c:90:8b:cb:27:91:a0:3b:fa:60:e2:21:
                    07:0e:10:63:fc:62:65:46:2e:de:94:34:d1:1b:c4:
                    6f:e5:4f:68:1c:7c:4f:33:4d:c5:72:6b:02:de:b5:
                    dc:88:0b:61:5e:55:f4:40:cd:30:09:83:77:1e:29:
                    20:b0:71:38:ba:a3:a9:a5:ac:0f:6d:24:da:cb:49:
                    4f:a9:a9:99:83:48:7b:73:1d:a0:36:83:a0:44:5d:
                    40:cf:56:63:62:78:68:34:b0:f0:9f:9a:c9:77:9e:
                    5c:24:e0:ce:4b:6b:8d:cb:05:93:8c:1b:d4:35:52:
                    00:99:42:bb:b5:a1:03:7d:8d:2a:67:9c:1c:d4:63:
                    b5:19:a7:2a:c4:f3:4d:31:a5:41:ab:8f:84:ed:f4:
                    57:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:7E:8F:B0:CA:51:C4:38:CB:63:18:75:F1:D2:4F:41:1A:6D:56:37
            X509v3 Authority Key Identifier:
                keyid:8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:b0:ae:00:95:5e:89:6f:d7:02:40:80:ff:18:ae:0b:03:5e:
         d0:83:b9:9b:f7:1d:96:b8:e6:f1:3b:d1:cd:9d:6d:0f:95:25:
         25:78:cf:4d:8b:05:45:cc:6d:be:4d:14:46:a9:9f:ee:be:c7:
         4a:95:45:cb:73:bb:3e:19:be:e3:36:9c:28:42:a4:68:07:53:
         a7:2c:5b:52:27:16:cf:0a:b1:3f:1e:9a:7f:ca:65:f2:92:bb:
         18:cb:00:2d:82:08:6b:07:52:2d:60:1a:e5:c0:7d:f6:df:77:
         d5:62:ac:c7:fb:e4:8e:73:45:2a:74:1a:5d:bf:6e:9d:e2:91:
         7e:18:de:b2:b9:eb:ff:12:dc:03:88:92:f1:8d:8b:9b:64:da:
         70:13:0c:da:85:48:f1:dc:24:22:40:1d:e2:9d:91:29:44:90:
         76:08:4f:92:a0:f3:13:ef:ad:1b:56:ea:18:6e:4c:38:ee:8d:
         a5:39:1c:a0:c8:0e:41:f5:6c:2b:9b:89:65:d9:68:19:7b:5d:
         0a:ad:ac:fd:21:a1:24:31:8c:3b:0f:13:c2:c5:5f:ba:38:57:
         f4:de:a4:44:3e:7f:50:da:9e:eb:ae:76:81:f7:6a:a0:71:a7:
         a4:63:7f:c2:37:d8:5c:ea:05:51:44:d4:0b:18:d4:ee:73:79:
         be:60:98:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:30:07 2026 by rpki-client