Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
File:                     n4535zgxPmVwaE3RUsLihDMrLFs.mft (raw, json)
Hash identifier:          YQ+MSb5zaAFiGrX5kBkg0W+QrJmAT1rhOLVcDfeIKSw=
Subject key identifier:   7A:F3:03:69:98:F3:E4:C1:18:8A:5D:51:C8:31:09:2A:31:92:F0:E1
Authority key identifier: 9F:8E:77:E7:38:31:3E:65:70:68:4D:D1:52:C2:E2:84:33:2B:2C:5B
Certificate issuer:       /CN=9f8e77e738313e6570684dd152c2e284332b2c5b
Certificate serial:       019E2A02093DB89D36DA0899E1FF79E553F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
Manifest number:          11B9
Signing time:             Fri 15 May 2026 05:00:36 +0000
Manifest this update:     Fri 15 May 2026 05:00:36 +0000
Manifest next update:     Sat 16 May 2026 05:00:36 +0000
Files and hashes:         1: CqVEZRxRSbC72IoEpBuSl-IR0oo.roa (hash: VVcs23ufU1kuCIdVVX3XyTOJgzSyJ6o05uh4XWE/uco=)
                          2: n4535zgxPmVwaE3RUsLihDMrLFs.crl (hash: FGZPEz+0kCbuHuSPA42Aosrknk//Ac1V6+vitj3R0ek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:02:09:3d:b8:9d:36:da:08:99:e1:ff:79:e5:53:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f8e77e738313e6570684dd152c2e284332b2c5b
        Validity
            Not Before: May 15 05:00:36 2026 GMT
            Not After : May 16 05:00:36 2026 GMT
        Subject: CN=7af3036998f3e4c1188a5d51c831092a3192f0e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:aa:96:ea:ea:9a:cb:0e:0e:22:9e:1c:17:1c:
                    10:bf:f5:53:d4:90:43:ef:18:1f:5f:98:d1:95:4c:
                    1c:9b:35:8c:3f:55:ab:54:65:7e:c4:bf:fb:4a:8f:
                    4f:48:76:65:e1:6e:ac:c1:b8:fa:41:6d:2f:17:47:
                    32:8e:8b:80:66:9c:d2:8f:3f:db:a7:ac:7c:e0:5b:
                    fe:bc:1f:30:9a:9b:d8:71:5e:37:5a:bc:b6:7a:32:
                    1f:1a:6e:66:2f:1f:d8:7b:13:32:24:a8:4e:39:f6:
                    19:e8:f4:3c:ea:17:43:a2:93:7a:98:3f:2b:c1:27:
                    3f:bc:75:1f:ad:d6:b4:98:e4:cf:25:49:e2:50:43:
                    ca:cf:d6:65:86:3b:b9:42:6e:a8:0f:c5:5a:25:bb:
                    93:b5:01:f5:c7:5b:61:3e:31:67:de:42:5b:7d:6d:
                    d9:38:22:94:50:e7:64:d3:73:58:ff:e1:3a:48:40:
                    0f:44:9d:f0:23:5d:95:46:bf:6c:5c:ee:ae:12:ff:
                    92:e1:53:88:4e:c3:3a:d0:7e:9b:b8:8f:1f:aa:19:
                    20:c4:89:c5:31:63:0e:be:9f:b2:fe:3c:b5:f0:e3:
                    4d:f8:70:7c:15:72:7e:38:0a:d9:33:9c:e5:41:e1:
                    88:90:60:3e:41:f6:9e:71:86:12:10:88:8f:56:91:
                    65:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F3:03:69:98:F3:E4:C1:18:8A:5D:51:C8:31:09:2A:31:92:F0:E1
            X509v3 Authority Key Identifier:
                keyid:9F:8E:77:E7:38:31:3E:65:70:68:4D:D1:52:C2:E2:84:33:2B:2C:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:b5:54:01:c4:5f:9c:3c:bf:02:46:ee:95:e9:32:fb:c4:00:
         c3:6c:5c:7f:aa:7c:c3:a7:d4:d8:4d:43:0f:56:38:70:2c:43:
         fd:7e:e5:9c:58:59:05:62:2c:87:f3:10:42:5a:53:52:35:61:
         1e:96:32:2c:be:8a:be:91:2b:8f:f7:c4:0e:3d:52:81:8b:c9:
         9f:aa:79:d8:b4:cf:04:63:f7:c1:1e:16:f2:96:b0:ff:12:d4:
         8d:d0:29:a8:1f:b9:30:12:95:a1:29:5f:50:58:94:29:2c:fc:
         8c:43:62:ea:e0:a9:9a:ca:77:d0:bd:31:65:98:68:26:b5:07:
         c5:4b:78:49:47:dd:eb:04:d2:18:f1:d6:62:bf:92:4a:0e:d4:
         35:08:09:9d:c3:7b:76:2f:62:5c:99:93:e3:53:10:b5:83:9d:
         9a:f8:2a:dc:c8:ad:6d:a8:eb:4c:d7:0c:4c:fa:b3:86:af:08:
         31:0c:45:cf:03:31:d2:75:5f:b7:25:a4:5e:8c:a1:ab:5c:a4:
         65:50:5b:c4:05:cc:5a:7a:61:bf:a7:45:27:46:0e:99:2b:23:
         b9:89:f8:ee:a7:57:ae:3b:86:23:27:ca:aa:12:8b:50:f1:82:
         8d:cc:99:78:f2:59:0a:28:ed:e7:a3:7f:01:18:23:ec:2c:6b:
         cd:99:3e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:38:16 2026 by rpki-client