Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft
File:                     p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft (raw, json)
Hash identifier:          +4PDg2VXTcyI2kfbWvGJoIbUoqv07eINmAC5Jjy9cEQ=
Subject key identifier:   67:EE:59:09:9C:15:28:D8:85:04:7C:C6:61:E4:BA:53:C7:BF:A0:92
Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
Certificate issuer:       /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Certificate serial:       019DFE73B899E8BC4711A8214F17DA90E709
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft
Manifest number:          1915
Signing time:             Wed 06 May 2026 18:01:29 +0000
Manifest this update:     Wed 06 May 2026 18:01:29 +0000
Manifest next update:     Thu 07 May 2026 18:01:29 +0000
Files and hashes:         1: 0dMJhsxjgnbAU5WFa10AoRaFilA.roa (hash: NPvcwvLEK2kbpEIl+DIrK18I+jAsrx0zSuGH2P9GkC8=)
                          2: 4KJ_GXRCZJ3i3re64jPbmY6CJmw.roa (hash: 6+nSknm5d3GJFxravLBFWrmCmG8ueiV1lwzdyLMLzvU=)
                          3: 4lIeViGYyAArH6xFgAXuF1KY8oo.roa (hash: 3sNxRj68ViMu808j4OAwb7vp2hEV9aYGZZ0Iae+xOYY=)
                          4: 6B2lYvT2dR81hzkQQELDn_duJcs.roa (hash: iYcBuEVmeXmfUIJkWbTRCIrfpwO2+UiKD6lHoQfEoI8=)
                          5: 8JeUl0gwKBaZ43vH7iblm5PR0rs.roa (hash: 1jsQ41jOwm0SLnU0Qv592bRuhGGbd2WMpr/SEYaEF9o=)
                          6: AxjWYbGGpT5pCJ414siHagIrYv0.roa (hash: Les+tBn+kJ+j2Lvoi/D4UE+2fwFt8YnrHjntjr+jnck=)
                          7: P7tnseevFfgmSuKuIWR7T1-giX0.roa (hash: ojvJdnjtgDrfvRMQCYPhOeHhRoL/uCyx9OSh7NhorVA=)
                          8: WlvzyTdODs1w5g16wAD9se0N5yc.roa (hash: ktIjwIA9pXx7a9RtBAHAvE+KFHxUcF6PaLm5AvCzXO4=)
                          9: X-pw--7v-eVKOMCYhEoBqMvv5i0.roa (hash: IUeZVsSUCXBqLM3lYzGREGoTqzMuBKPxlh2jySadCOY=)
                          10: ZYdv2S3m7eXPESVok8yxYTapz-4.roa (hash: hWVgkj4Hxb1fm9VqiSs0akAtvRlafZPuNGm7c0XMuPM=)
                          11: c4gKUGJIMgEyuId7ul08tWyPN-I.roa (hash: chucr3d4TvCMayMn3vPGpeF00MZgFV7fyC/x5QhhCZQ=)
                          12: mlVDqzsr0onFPunz8cRb0CxctTw.roa (hash: FmoWfiTgv6hVPqkJlMC8O0NyKtvBDx0DatsEpxV/8NY=)
                          13: p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl (hash: kkJVVE+gaGMzcd/CqIkndd08qXxZi/0FyXAW39L5Ww8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 May 2026 18:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:fe:73:b8:99:e8:bc:47:11:a8:21:4f:17:da:90:e7:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
        Validity
            Not Before: May  6 18:01:29 2026 GMT
            Not After : May  7 18:01:29 2026 GMT
        Subject: CN=67ee59099c1528d885047cc661e4ba53c7bfa092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:75:fb:2e:1a:d9:fb:70:da:46:54:58:e3:cb:
                    5d:4e:0e:12:03:30:e5:6c:87:ee:f8:12:66:73:dc:
                    36:e5:f1:c3:16:fd:cf:e8:ac:b1:a7:bd:05:94:57:
                    a7:b1:35:a7:ff:22:92:52:0b:07:fd:41:29:d9:30:
                    e1:ba:0c:5c:6d:2d:44:d7:e1:9a:c6:b2:69:06:92:
                    50:16:ce:05:51:7e:4d:8d:48:c4:45:6d:d7:12:f2:
                    99:52:51:84:72:d5:8f:55:91:83:8d:6e:ea:a3:8f:
                    b8:5b:46:d9:20:35:ea:90:e3:cd:31:6f:df:c0:a3:
                    3e:58:f9:9f:11:e0:dd:c8:a8:54:c7:3a:1d:18:7a:
                    f9:d1:df:e7:9e:65:c4:2e:e7:e1:3d:a2:2a:07:00:
                    40:58:3b:a5:cc:86:80:4f:a1:60:f6:e6:fd:84:3d:
                    dd:c7:f9:ec:4c:ad:8c:19:eb:20:3e:94:6b:ba:91:
                    2d:9a:8d:1b:56:3e:15:51:9c:6a:b9:64:7c:70:35:
                    e3:be:3c:57:d5:b2:dd:4e:bf:eb:e7:07:f8:4c:33:
                    b8:96:fb:37:a0:77:7f:42:bf:ea:ef:59:1a:48:14:
                    8b:7e:f8:70:8f:ac:22:99:ef:1b:b7:ee:80:0f:10:
                    96:ea:47:5d:d0:9b:0d:ac:3f:ef:11:52:18:56:e3:
                    6b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:EE:59:09:9C:15:28:D8:85:04:7C:C6:61:E4:BA:53:C7:BF:A0:92
            X509v3 Authority Key Identifier:
                keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:5c:00:b7:b6:64:27:82:eb:c9:b8:b9:ad:e1:eb:65:37:5f:
         c0:c0:f7:b5:88:7c:48:3c:ee:e3:4c:75:78:47:14:39:36:2c:
         ca:51:b2:24:d8:1a:01:78:ca:17:35:6c:25:9b:8f:bb:be:e6:
         da:bd:89:b1:7e:3c:b9:2a:43:65:b9:1d:09:9f:ef:53:6d:7b:
         bb:e2:a9:7c:7f:64:b9:f6:29:da:49:e4:c9:cd:d4:4a:62:cd:
         3e:6e:65:01:a1:85:e3:86:0c:18:e1:f6:95:31:27:4a:b8:b5:
         f6:1a:c9:cb:7d:49:c1:54:64:6f:85:bc:2e:38:e2:5d:e5:32:
         a5:2c:04:84:14:6f:f5:5a:80:73:e7:2c:33:c3:da:80:87:7b:
         7e:4c:23:01:a3:4e:ac:2d:32:ef:2a:61:48:4a:23:9d:2e:1b:
         64:4d:9e:2c:ed:af:fe:be:5d:3c:1b:78:92:ef:1b:3a:b1:48:
         44:bb:fc:d7:6f:30:f4:53:34:62:c0:96:1c:da:f8:e4:2f:0e:
         13:5f:04:a2:43:e8:64:ef:bd:9c:23:80:16:92:79:49:06:0d:
         22:04:cd:9a:12:bc:fe:81:59:92:a3:64:32:6e:e7:68:95:4c:
         2f:aa:c8:d5:7b:1b:bf:dc:c5:af:f3:3f:61:73:2a:17:c2:e9:
         b2:92:ef:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 03:56:48 2026 by rpki-client