Manifest

$ rpki-client -vvf rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
File:                     C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft (raw, json)
Hash identifier:          7DRC9Ae3++UFE3IB4sk184IT2FoQ4pD+d221YUMxHLo=
Subject key identifier:   B2:68:93:BC:37:CC:5D:03:FC:79:AF:7E:1B:79:42:5A:16:34:64:D3
Authority key identifier: C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9
Certificate issuer:       /CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
Certificate serial:       77C223FE4A6AB9BAB47F4129BEF4CB3847D54AAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
Subject info access:      rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
Manifest number:          04A9
Signing time:             Tue 12 May 2026 23:37:12 +0000
Manifest this update:     Tue 12 May 2026 23:32:12 +0000
Manifest next update:     Thu 14 May 2026 02:28:12 +0000
Files and hashes:         1: 326131333a376134323a3330303a3a2f34302d3438203d3e203134363138.roa (hash: OCminjwmZh7lq+WgeZFV1Nn5NIp84rJ8qzJwmmWMbd8=)
                          2: 326131333a376134323a3330303a3a2f34302d3438203d3e203537313936.roa (hash: 6Axqhyp4yqCF4rrEIoh/LCJfrbeWXodzEhXCeqZwsE8=)
                          3: 326131333a376134323a3330303a3a2f34302d3438203d3e203136353039.roa (hash: OUajEHBBbRsewL9OwS+Pvj/T9rrSLXcsIY9ay83jvJk=)
                          4: C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl (hash: V4PNQLPSuHo04N09Hi1SqNLEtaTH0gMBzA1mhfz40tg=)
                          5: 326131333a376134303a3a2f32392d3438203d3e203537313936.roa (hash: 5OwzkaLUii9ngjYoZbrYO2htCcGwx8PARIooVDvbl7k=)
                          6: 3139332e33322e3130302e302f32342d3234203d3e203537313936.roa (hash: wDspyvAFv0/8lKNsucjxa+vjBuKL8czWbdSSoLy0Lf0=)
Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl
                          rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:c2:23:fe:4a:6a:b9:ba:b4:7f:41:29:be:f4:cb:38:47:d5:4a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
        Validity
            Not Before: May 12 23:32:12 2026 GMT
            Not After : May 14 02:28:12 2026 GMT
        Subject: CN=B26893BC37CC5D03FC79AF7E1B79425A163464D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:97:b6:e5:25:6a:81:eb:db:c1:7f:e6:42:44:
                    bc:1a:2d:5e:14:94:40:9d:0e:fa:14:a4:be:16:e9:
                    15:89:20:cf:ab:99:67:d7:50:7a:67:17:ef:ed:70:
                    0c:e1:03:f3:e0:07:17:7d:72:48:41:72:36:c7:d7:
                    32:ce:27:12:b7:17:b0:1b:a2:57:a8:9f:56:a2:94:
                    35:7d:da:34:69:2f:b6:d4:a1:66:29:03:c3:ee:8d:
                    94:dd:51:e2:d9:40:30:09:b1:e5:6d:d6:91:c8:49:
                    9e:e7:5b:72:57:65:44:cc:b3:27:75:4a:d3:0e:a0:
                    54:93:af:54:05:02:91:b2:d9:41:a3:76:a4:87:64:
                    3a:ae:bb:c7:8f:02:0b:b3:03:6d:77:62:0a:f4:7e:
                    26:c4:60:1c:4f:29:49:79:8d:2e:07:fc:62:56:b1:
                    37:74:ef:6d:c0:9f:dc:ca:22:9b:1e:7d:81:8e:ee:
                    9e:f5:31:59:1a:40:f3:87:f4:f7:9e:a1:8b:59:aa:
                    f3:c2:e7:bc:eb:a4:18:a0:1e:f4:85:f4:7d:3f:e2:
                    ed:cd:ed:86:9f:f0:77:07:02:cd:aa:24:6b:91:df:
                    6c:5c:50:31:a7:b3:c7:be:d0:9c:0a:dc:f2:68:57:
                    3a:dd:b6:57:74:7b:16:ce:7c:fa:4c:74:c5:3e:8a:
                    f3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:68:93:BC:37:CC:5D:03:FC:79:AF:7E:1B:79:42:5A:16:34:64:D3
            X509v3 Authority Key Identifier:
                keyid:C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:5b:e6:a4:a1:3b:6f:cc:5b:2d:8e:d7:2e:71:c0:3f:ed:7c:
         70:2d:8c:c5:d1:53:7e:b9:d6:3d:8d:3b:99:47:e4:8f:f4:87:
         19:54:db:8d:9d:57:42:f3:0c:5e:df:f5:33:84:86:ff:eb:12:
         79:bd:dd:d7:02:90:4f:0f:81:03:be:ee:06:61:bc:6e:3f:c5:
         88:ed:03:8f:7a:ea:39:7f:d4:41:cb:1e:3d:ec:6f:e8:24:d0:
         3e:be:90:8f:40:76:aa:db:75:7c:5e:d5:e2:62:16:b3:4e:0c:
         c4:b0:09:00:c2:3f:fc:d0:84:87:bb:50:40:ef:c1:ee:bd:21:
         10:b6:b2:53:77:4c:1a:59:29:0d:f2:68:6a:b5:69:e1:15:48:
         82:9d:7a:d2:14:8e:95:bc:1c:22:5f:ae:41:1a:34:38:db:8f:
         c1:91:22:97:90:df:9a:78:ec:15:7f:b2:0f:84:ed:34:d6:bd:
         3e:dc:71:2c:0c:63:7d:90:89:79:b8:aa:dd:7a:5c:cc:a0:76:
         9d:82:77:47:a8:05:2f:e1:fd:cf:af:8b:d7:64:00:b8:0b:24:
         45:80:e3:aa:57:bd:17:b5:56:f9:1d:7e:b5:94:30:c3:03:72:
         80:5f:89:58:fa:d3:35:ea:dc:f2:5a:38:14:66:e0:58:cd:b8:
         6b:14:d2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:42:39 2026 by rpki-client