Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.mft
File:                     m3Weyf9U3gOn_zpl7bsuB1jmh4w.mft (raw, json)
Hash identifier:          MEQqwgZqkipCgAF3UB62OKwvFepzxWI3BYUFEco2qKM=
Subject key identifier:   4B:EF:8B:54:BC:14:B4:BC:B8:E0:3D:FC:3F:0C:A6:1E:C1:DC:2B:77
Authority key identifier: 9B:75:9E:C9:FF:54:DE:03:A7:FF:3A:65:ED:BB:2E:07:58:E6:87:8C
Certificate issuer:       /CN=9b759ec9ff54de03a7ff3a65edbb2e0758e6878c
Certificate serial:       019D6687C3C19299606AA001AB282BB8915C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m3Weyf9U3gOn_zpl7bsuB1jmh4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.mft
Manifest number:          165B
Signing time:             Tue 07 Apr 2026 06:01:06 +0000
Manifest this update:     Tue 07 Apr 2026 06:01:06 +0000
Manifest next update:     Wed 08 Apr 2026 06:01:06 +0000
Files and hashes:         1: IdpTao3ATxFLpLKZsyUB_imgWAo.roa (hash: 0j6Upko5mn5sECt1nad7rnGDN3WkXCx5FzmWtvfGPKw=)
                          2: LrHV0w3M6j_K-JqUnN8G1dXCvtE.roa (hash: Cv94An137RKGzp/Xq5QPjrl4rBtVxPtFDPjnMK69R9E=)
                          3: m3Weyf9U3gOn_zpl7bsuB1jmh4w.crl (hash: 2bkTTsaOlZgiX2kTYBgkXuvEdpaWYNA+JtB9ilRh9C8=)
                          4: qGBR2sUTRayD8K-_HjOzHIrBN14.roa (hash: +QFBxlPRW6YN96YBrNRPtMUp5MujXOppkGcrbKI0dH8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m3Weyf9U3gOn_zpl7bsuB1jmh4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 Apr 2026 04:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:66:87:c3:c1:92:99:60:6a:a0:01:ab:28:2b:b8:91:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b759ec9ff54de03a7ff3a65edbb2e0758e6878c
        Validity
            Not Before: Apr  7 06:01:06 2026 GMT
            Not After : Apr  8 06:01:06 2026 GMT
        Subject: CN=4bef8b54bc14b4bcb8e03dfc3f0ca61ec1dc2b77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:52:8f:a3:57:85:4c:41:97:94:43:37:d9:7b:
                    dd:7b:36:04:93:c7:a4:0f:d4:be:66:7e:f9:35:63:
                    05:44:a8:26:d2:6b:63:29:13:9e:3b:7b:25:8e:9b:
                    ce:22:43:69:a2:47:9f:d4:34:7d:3b:a1:8d:35:b3:
                    6e:64:b3:d8:35:4d:67:27:08:85:4b:b2:9e:fd:c6:
                    ba:d6:5c:0a:28:f7:c3:d4:20:f3:f4:4d:7b:b9:d6:
                    74:84:1c:28:33:97:6a:e5:46:9c:c3:9c:94:9c:8a:
                    3f:43:52:5c:e0:1d:07:0d:cc:93:2a:fb:ae:80:e7:
                    dd:9e:f5:28:4c:f5:6f:2b:f7:76:48:70:12:bd:d2:
                    d8:11:9b:4e:e4:f0:20:b3:9c:f1:5e:56:4a:af:74:
                    a9:68:ec:7e:4c:62:2d:9b:55:08:0e:ca:1b:3c:ce:
                    94:49:dc:c1:b8:24:e9:e0:9c:a3:88:0a:e3:3e:e6:
                    1b:aa:95:8d:e7:23:e3:c2:af:65:5a:2c:e0:29:d7:
                    09:34:18:79:aa:6a:a8:b5:c8:7f:c4:93:d8:51:9c:
                    a7:65:06:ef:c6:a1:36:bb:89:69:d0:76:46:bd:6d:
                    11:b3:4c:6a:d9:5d:56:47:97:25:26:58:26:27:f2:
                    f9:b2:9c:a8:28:9b:e2:a8:16:d0:0b:92:22:d2:3b:
                    80:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:EF:8B:54:BC:14:B4:BC:B8:E0:3D:FC:3F:0C:A6:1E:C1:DC:2B:77
            X509v3 Authority Key Identifier:
                keyid:9B:75:9E:C9:FF:54:DE:03:A7:FF:3A:65:ED:BB:2E:07:58:E6:87:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3Weyf9U3gOn_zpl7bsuB1jmh4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:bd:4c:cd:0f:ca:56:00:3c:4d:57:a1:37:b6:ba:ec:f3:5b:
         dc:79:6b:dd:72:a9:04:2e:85:73:10:62:b4:40:07:97:b2:2c:
         b2:05:b3:97:72:92:df:d7:4c:c0:a9:ab:2d:d6:38:9d:f2:69:
         ec:2d:33:b4:e5:c1:f6:16:59:40:f5:c4:7c:cf:cd:b8:5d:fa:
         13:9a:55:d4:1b:e6:85:2f:29:db:d4:bf:3c:79:74:4e:98:f2:
         4c:4b:58:46:89:0c:e5:4e:f3:29:9c:93:b0:f0:f0:16:77:26:
         a3:02:42:c5:78:f9:c7:8b:7f:e7:bb:30:ff:7b:40:bf:f7:84:
         d3:5d:cd:c2:c0:a1:04:7b:f0:64:08:97:4c:a0:47:a7:6a:35:
         70:4c:bf:9d:7f:fb:15:56:30:2a:27:de:fd:01:65:b7:a0:2e:
         cb:01:a9:f1:42:01:1e:5e:73:94:53:62:8d:9e:57:e8:c2:06:
         67:b8:da:05:f7:f9:44:96:1f:56:1b:96:e5:f2:8d:6f:74:06:
         4d:6d:6e:94:ef:6f:e9:c2:14:5d:0d:9e:34:b1:2a:8b:c7:94:
         2e:fa:92:7d:28:fd:45:9e:3f:08:56:bc:e3:ca:99:e0:5b:9c:
         ae:f9:77:85:40:ce:b3:99:f0:86:83:54:f0:7e:dc:96:71:7c:
         67:2b:94:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 12:06:09 2026 by rpki-client