Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
File:                     fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft (raw, json)
Hash identifier:          NaDQvCZdL2QpuAxxghoOI4QT244b8Yodf9hSpWQlGNY=
Subject key identifier:   BD:56:69:3A:CA:92:7B:7A:D4:4D:E8:AE:A1:E5:EC:69:CE:1B:E5:81
Authority key identifier: 7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E
Certificate issuer:       /CN=7cab39c6e0412235efc7877a9f737899313ed15e
Certificate serial:       019E051ABA52992CB9434B77BE6DDA0B6129
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
Manifest number:          0413
Signing time:             Fri 08 May 2026 01:01:38 +0000
Manifest this update:     Fri 08 May 2026 01:01:38 +0000
Manifest next update:     Sat 09 May 2026 01:01:38 +0000
Files and hashes:         1: cj2iG-kAiX7g7Q_YyN0wXBDsPQA.roa (hash: Iwu4QuDjHy9svFihD9XS6FTYQQqAdESvSACyQGECMOI=)
                          2: fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl (hash: AU1sgwVqJe7bikGcySFT31TBTW5ZivN17DvFexsW8qo=)
                          3: kZ_QLDF4UjP63-RQO5uGQvJwAKg.roa (hash: GT17iGmvyx7VuRxULTyyPoqEbSTqD+0/CsQqVCeuwic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 May 2026 21:15:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:05:1a:ba:52:99:2c:b9:43:4b:77:be:6d:da:0b:61:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cab39c6e0412235efc7877a9f737899313ed15e
        Validity
            Not Before: May  8 01:01:38 2026 GMT
            Not After : May  9 01:01:38 2026 GMT
        Subject: CN=bd56693aca927b7ad44de8aea1e5ec69ce1be581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:04:dd:3a:13:f1:4a:5c:82:d9:1d:b5:be:5b:
                    7d:76:32:9a:af:38:9f:51:f7:10:d7:a9:b4:ec:e4:
                    a5:26:ca:29:67:0b:1d:89:6e:9f:26:36:f8:f9:b7:
                    ec:2a:b3:ad:65:44:c3:f9:97:eb:b8:6a:14:30:99:
                    db:55:7b:9c:22:57:4f:b0:1e:09:de:cd:d6:54:df:
                    6c:85:8b:b3:fe:5e:4f:56:fd:11:24:30:ff:bc:ed:
                    04:31:0e:44:03:e1:c3:7b:45:c5:85:08:a4:22:27:
                    eb:d6:41:7d:7c:c8:f3:a6:00:93:67:ae:24:ba:46:
                    c4:49:0b:3f:3f:20:6d:07:1a:f4:ca:44:aa:a0:11:
                    18:e0:e7:37:2e:75:62:61:f9:d7:9b:98:f3:a8:c3:
                    7f:79:8b:a9:68:b8:7a:54:38:2e:1d:5c:08:a2:ca:
                    87:77:a7:6e:3c:68:df:9c:80:c1:52:f5:2a:24:59:
                    06:53:a9:77:8b:bd:25:52:62:92:92:d9:25:80:9c:
                    00:af:07:e4:a2:81:be:a6:3a:83:e8:72:5d:07:f1:
                    8b:c2:eb:96:c0:7a:49:4b:67:fe:c7:b1:8a:df:e2:
                    f8:d8:d5:cd:4e:fa:28:69:f5:64:01:64:27:1c:ee:
                    ca:e9:1e:94:d4:61:35:05:17:ec:0c:2d:6e:53:8a:
                    95:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:56:69:3A:CA:92:7B:7A:D4:4D:E8:AE:A1:E5:EC:69:CE:1B:E5:81
            X509v3 Authority Key Identifier:
                keyid:7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:1e:9c:0e:f7:1e:fc:16:e7:b3:dd:06:b7:f1:d8:a4:fd:bb:
         52:05:4f:f4:9d:ed:4e:e2:6c:8c:56:f8:78:fe:8d:de:1a:f1:
         64:49:df:b1:61:35:71:3c:be:f7:53:e8:10:17:99:77:74:d1:
         e4:89:dc:8f:b0:6c:39:e1:13:d4:46:96:b8:ea:e0:b5:2a:cf:
         35:2f:c8:d3:65:47:ca:79:e2:d5:e6:20:a4:cd:58:d1:cc:8f:
         14:ba:85:bf:86:e8:e0:28:59:3b:74:d7:1e:02:d4:c4:7b:b3:
         db:81:e6:d1:98:b4:2d:75:60:d2:06:fd:4d:05:0e:97:69:66:
         76:af:41:40:36:4d:4f:8a:e2:ac:77:e7:80:1b:8c:2a:f3:d9:
         06:93:32:23:8f:cb:12:fc:1c:27:15:da:57:87:b3:ab:1f:d4:
         01:2a:2a:0e:2d:88:cb:bf:bc:b3:62:64:19:d2:d0:cc:22:13:
         96:f0:5d:88:1b:d1:08:5f:50:91:79:e9:00:1a:4a:ab:e6:84:
         6f:29:56:53:c0:50:41:2e:2b:f7:a6:88:c9:27:19:17:af:c6:
         00:ce:26:fb:dd:c1:18:ba:95:2e:82:a6:1d:5f:0c:91:cc:5f:
         3a:02:f8:2f:ed:38:ec:cc:49:84:a8:fb:5e:23:36:82:fe:ec:
         7c:c0:9a:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4FGrpSmSy5Q0t3vm3aC2EpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjYWIzOWM2ZTA0MTIyMzVlZmM3ODc3YTlmNzM3ODk5MzEz
ZWQxNWUwHhcNMjYwNTA4MDEwMTM4WhcNMjYwNTA5MDEwMTM4WjAzMTEwLwYDVQQD
EyhiZDU2NjkzYWNhOTI3YjdhZDQ0ZGU4YWVhMWU1ZWM2OWNlMWJlNTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ATdOhPxSlyC2R21vlt9djKarzif
UfcQ16m07OSlJsopZwsdiW6fJjb4+bfsKrOtZUTD+ZfruGoUMJnbVXucIldPsB4J
3s3WVN9shYuz/l5PVv0RJDD/vO0EMQ5EA+HDe0XFhQikIifr1kF9fMjzpgCTZ64k
ukbESQs/PyBtBxr0ykSqoBEY4Oc3LnViYfnXm5jzqMN/eYupaLh6VDguHVwIosqH
d6duPGjfnIDBUvUqJFkGU6l3i70lUmKSktklgJwArwfkooG+pjqD6HJdB/GLwuuW
wHpJS2f+x7GK3+L42NXNTvooafVkAWQnHO7K6R6U1GE1BRfsDC1uU4qVbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1WaTrKknt61E3orqHl7GnOG+WBMB8GA1UdIwQY
MBaAFHyrOcbgQSI178eHep9zeJkxPtFeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZktzNXh1QkJJalh2eDRkNm4zTjRtVEUtMFY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mODkxNzAtMTM4ZS00OTk5LWFlZjct
YzQ0MDI5OGRmYzVjLzEvZktzNXh1QkJJalh2eDRkNm4zTjRtVEUtMFY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9mODkxNzAtMTM4ZS00OTk5LWFlZjctYzQ0MDI5OGRmYzVj
LzEvZktzNXh1QkJJalh2eDRkNm4zTjRtVEUtMFY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZR6cDvce
/Bbns90Gt/HYpP27UgVP9J3tTuJsjFb4eP6N3hrxZEnfsWE1cTy+91PoEBeZd3TR
5Incj7BsOeET1EaWuOrgtSrPNS/I02VHynni1eYgpM1Y0cyPFLqFv4bo4ChZO3TX
HgLUxHuz24Hm0Zi0LXVg0gb9TQUOl2lmdq9BQDZNT4rirHfngBuMKvPZBpMyI4/L
EvwcJxXaV4ezqx/UASoqDi2Iy7+8s2JkGdLQzCITlvBdiBvRCF9QkXnpABpKq+aE
bylWU8BQQS4r96aIyScZF6/GAM4m+93BGLqVLoKmHV8MkcxfOgL4L+047MxJhKj7
XiM2gv7sfMCaFg==
-----END CERTIFICATE-----
Generated at Fri May 8 03:21:49 2026 by rpki-client