Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft
File:                     V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft (raw, json)
Hash identifier:          No4nxoC5H+W5e9dqmDqPu+etogXJXa62JuoB0vyQiaM=
Subject key identifier:   21:AA:9A:0A:CE:72:4D:4F:D5:62:3E:81:06:73:03:96:00:81:21:88
Authority key identifier: 57:D0:B8:61:AF:B1:25:B8:BC:13:96:9D:0B:49:73:4C:E8:44:BD:6A
Certificate issuer:       /CN=57d0b861afb125b8bc13969d0b49734ce844bd6a
Certificate serial:       019E0588D7C06C668F9D8A5B00936A7491C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V9C4Ya-xJbi8E5adC0lzTOhEvWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft
Manifest number:          0412
Signing time:             Fri 08 May 2026 03:01:54 +0000
Manifest this update:     Fri 08 May 2026 03:01:54 +0000
Manifest next update:     Sat 09 May 2026 03:01:54 +0000
Files and hashes:         1: GFKu-Zc9wa6BcCmTlqLPc7qFBa4.roa (hash: JegVdUF+3WhKGrEhiEcqXl1nleuxqT9zS97V0x383us=)
                          2: V9C4Ya-xJbi8E5adC0lzTOhEvWo.crl (hash: dvQn5aDqJT42CZr2tzPnGgDSGsUNDKIVbcjsiz7ommk=)
                          3: vkmHksTk2X_wYTTmgl1Mrke_JDU.roa (hash: L3fqolgCblfEQxdP1Qw8u55OLqHgFH3b7OhIuw6QCpc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V9C4Ya-xJbi8E5adC0lzTOhEvWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 May 2026 21:15:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:05:88:d7:c0:6c:66:8f:9d:8a:5b:00:93:6a:74:91:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57d0b861afb125b8bc13969d0b49734ce844bd6a
        Validity
            Not Before: May  8 03:01:54 2026 GMT
            Not After : May  9 03:01:54 2026 GMT
        Subject: CN=21aa9a0ace724d4fd5623e810673039600812188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c8:60:f8:c4:10:51:4d:64:b1:ad:0e:35:5a:
                    90:e9:f7:34:14:a7:02:06:0c:36:97:63:85:60:23:
                    eb:2a:a6:f3:17:37:40:df:fa:a4:94:af:a6:e5:79:
                    35:74:dd:14:bc:74:f3:06:d9:16:0b:eb:09:66:94:
                    a5:86:6b:29:51:cb:cc:21:d9:69:9d:5c:18:9a:72:
                    af:41:e8:9f:02:03:3b:40:4c:7b:30:b7:06:bc:1b:
                    15:ad:26:1c:5b:41:b9:ff:e7:29:18:63:9a:46:5e:
                    0c:88:b7:b9:2b:c6:f8:11:d1:d3:01:d2:1e:b2:94:
                    c4:0c:e9:49:36:bd:81:5d:ed:ef:7c:d9:9a:ac:74:
                    04:62:4d:3a:5c:19:a9:bb:b2:10:38:99:29:27:f3:
                    5c:2b:40:a5:dd:22:cb:62:b2:a5:be:40:25:ed:11:
                    d9:47:c8:c8:60:be:63:bc:54:9a:70:6b:e7:aa:fa:
                    19:67:86:65:45:a7:00:ba:27:8c:c3:2a:32:73:4d:
                    eb:3c:84:9c:81:84:ce:bb:bc:a0:37:9c:d1:63:e3:
                    62:c7:af:8a:27:8c:5f:60:58:2a:1c:0e:1b:19:11:
                    19:54:22:90:57:8d:39:53:4e:84:fa:a5:54:e0:77:
                    25:bb:e9:6e:cf:18:b7:07:83:ac:96:e9:1e:06:da:
                    58:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:AA:9A:0A:CE:72:4D:4F:D5:62:3E:81:06:73:03:96:00:81:21:88
            X509v3 Authority Key Identifier:
                keyid:57:D0:B8:61:AF:B1:25:B8:BC:13:96:9D:0B:49:73:4C:E8:44:BD:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9C4Ya-xJbi8E5adC0lzTOhEvWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:f5:46:9f:a2:68:3a:69:83:1c:3c:3e:a4:c7:83:42:9f:b2:
         f0:87:c3:76:42:6c:cc:f5:18:69:61:ba:0d:f0:10:4f:89:26:
         f1:c4:2b:3d:c8:b4:cf:4c:fb:63:d5:da:6e:c9:80:bf:3f:2f:
         87:9b:56:50:f4:e0:e6:92:26:4a:f4:4b:f0:47:49:69:f6:b1:
         28:97:00:ce:91:cc:c3:da:22:b7:5a:e3:9d:5f:ee:72:6b:dd:
         c8:af:e1:48:56:81:bd:41:f5:84:d2:73:8f:79:c9:41:13:a4:
         3b:a2:11:6b:4c:57:ed:d2:99:5d:27:85:de:f1:ca:52:cd:a8:
         5c:14:1d:f9:33:a5:df:b1:0d:7c:5a:29:fc:f9:bf:5b:d6:cf:
         b5:02:41:59:2b:e2:4d:dc:fa:8c:1c:6f:1a:24:64:81:20:46:
         39:6e:05:36:ed:05:3e:32:b4:0b:00:89:b8:62:d5:57:a0:c3:
         56:0e:ca:3a:b1:86:dc:70:ea:dc:ad:5b:96:b3:b5:ae:0b:dc:
         bc:ca:c9:4a:2b:db:3c:f3:7b:0a:21:03:4d:0b:bc:e5:c3:42:
         c4:c4:c0:27:1b:88:72:6e:b7:9e:6d:46:50:3b:19:fa:3a:ae:
         de:6d:89:9e:75:5f:5a:6f:b1:99:a4:45:96:51:fd:d5:16:dd:
         61:7d:5e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 07:17:46 2026 by rpki-client