Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft
File:                     MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft (raw, json)
Hash identifier:          fST7UNynAlnwHc5eQdCJ3PP6c7snxRD6ByYIHxKHsDY=
Subject key identifier:   E9:2F:0D:39:78:14:67:FF:4A:F6:A5:12:33:7F:3A:26:E6:2A:EF:B7
Authority key identifier: 32:26:39:B3:5E:5D:9D:0F:B3:69:6F:E2:FD:61:CB:6F:4C:3F:A5:04
Certificate issuer:       /CN=322639b35e5d9d0fb3696fe2fd61cb6f4c3fa504
Certificate serial:       019DB16AE438120A9F19B7E376483CD84536
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft
Manifest number:          1266
Signing time:             Tue 21 Apr 2026 19:01:05 +0000
Manifest this update:     Tue 21 Apr 2026 19:01:05 +0000
Manifest next update:     Wed 22 Apr 2026 19:01:05 +0000
Files and hashes:         1: AczQ5m07bagbCSpYHKyOOUGJiuU.roa (hash: ZZkvh7a+nFDXqMju+v84npxtkZQE+y45PmWF7YuV5vg=)
                          2: E50dRzelevPp0RPUUn-X1whUhzs.roa (hash: ESKLNPEXcUQlYreIgYSRyGc6RpOOENWjDiinLW02gqM=)
                          3: KnXc9wIdUwOgGPZNVY_TSbLRRoY.roa (hash: Ur+szLOeyaAy0p6WFfKNCA4+hET9D0q8Orh268HfdLU=)
                          4: MiY5s15dnQ-zaW_i_WHLb0w_pQQ.crl (hash: O/Lu3rXTiSFL2OAnEpaG6w4cEdahvP49MoVLjqGw5dw=)
                          5: _YrGQaV-xv0pIG914t75tY-lgq4.roa (hash: mceOdmff8pDALeUaOfa99NehQO4QsbAd1TsnHGDmlpY=)
                          6: fyxsLRJZFn7CTFSJ2VnoPkiPR2s.roa (hash: 8HFUKsLTWzFpdFnaVvVRZkBC3eF7vcFOlN74+dbWE3g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Apr 2026 14:21:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:b1:6a:e4:38:12:0a:9f:19:b7:e3:76:48:3c:d8:45:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=322639b35e5d9d0fb3696fe2fd61cb6f4c3fa504
        Validity
            Not Before: Apr 21 19:01:05 2026 GMT
            Not After : Apr 22 19:01:05 2026 GMT
        Subject: CN=e92f0d39781467ff4af6a512337f3a26e62aefb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f9:ab:2d:8b:3f:6a:66:78:36:2e:01:04:ea:
                    b4:2e:84:c6:8e:be:0d:35:74:1e:9a:20:e9:e0:16:
                    c2:fa:ef:38:11:cd:89:fa:98:51:30:4e:54:0c:89:
                    20:6b:24:1a:fc:7c:41:cc:e4:d9:c6:72:7f:2f:cb:
                    03:d1:d9:63:b1:76:3d:3a:0f:a2:ad:ae:d6:82:73:
                    f9:d2:76:52:c9:a8:cf:7c:47:ac:1e:24:f6:67:4e:
                    8a:95:ff:00:94:fa:65:36:8e:dd:6f:7b:92:6f:fe:
                    fe:d2:e4:02:27:8b:43:f4:b3:e6:9d:41:ec:2d:50:
                    99:b6:b8:7a:f3:93:17:42:83:dd:e4:0a:96:92:ee:
                    37:8e:d1:df:77:52:a5:bf:53:cf:ff:b0:7f:e0:b8:
                    b2:65:a9:54:0e:c2:d0:2f:fb:ed:71:f7:83:63:6d:
                    68:92:3e:27:3e:47:7d:8c:fa:4e:d4:d9:20:8c:8c:
                    0c:a0:ec:0c:cf:22:5b:3a:ae:2e:a3:a6:03:5c:a5:
                    0b:17:5a:40:bc:43:d1:35:e8:b1:1b:c1:79:34:81:
                    6c:45:09:bf:b2:36:96:00:cd:58:c3:0a:8d:3f:03:
                    5e:bd:9b:0d:27:0f:2d:f5:38:24:78:16:c5:a5:d9:
                    05:e6:97:01:2b:d9:87:5d:db:dd:c3:ff:c6:1e:6c:
                    95:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:2F:0D:39:78:14:67:FF:4A:F6:A5:12:33:7F:3A:26:E6:2A:EF:B7
            X509v3 Authority Key Identifier:
                keyid:32:26:39:B3:5E:5D:9D:0F:B3:69:6F:E2:FD:61:CB:6F:4C:3F:A5:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:b4:e1:05:b1:03:f2:50:fe:c3:a2:12:71:bb:a5:3c:1c:a4:
         52:3e:20:f9:81:09:ef:9e:66:0e:1f:2d:e8:68:24:56:d2:2a:
         b6:02:17:f3:14:dc:ad:b3:c1:8d:e5:8a:f5:0f:38:62:83:83:
         ae:6f:73:0d:43:59:0b:cd:9e:b3:e0:00:81:1c:3d:37:95:75:
         f3:9c:b3:b5:b0:67:ae:2e:00:c2:41:05:2f:ea:c3:18:61:37:
         0e:f3:d7:20:d5:39:a3:74:0d:93:77:55:c8:da:7f:cf:9f:ca:
         f9:71:09:49:6c:9b:a5:6a:6d:9b:f4:5e:0f:e1:91:51:f0:2a:
         96:2f:08:58:b7:2e:da:d0:77:4d:8d:5e:8e:e6:ae:81:e3:a1:
         4c:1a:84:44:ed:1c:f7:6e:eb:a3:5a:2a:cc:54:2c:4d:3b:9b:
         21:f8:f4:c7:fe:dc:6e:4f:c9:f8:ba:26:1c:dd:f5:12:6d:17:
         76:41:1e:5c:60:89:a9:72:b7:16:65:43:ab:5a:e0:e0:42:3e:
         66:9d:f5:55:4c:ef:fb:7f:24:e7:39:b1:04:60:4d:2e:ea:8d:
         f0:79:0b:2c:4b:48:c3:b9:e0:97:7d:9d:19:81:d3:bb:2d:52:
         f3:6d:07:1d:8b:7b:bb:e7:5d:7e:2e:e2:83:0b:09:d2:d6:09:
         c0:ae:11:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 00:08:31 2026 by rpki-client