Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft
File:                     MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft (raw, json)
Hash identifier:          xo1IGYn1zYKy2bgiKpCyfwoFGsS7i/ZZ1ni3pUJCcyM=
Subject key identifier:   29:CE:E2:1C:01:02:3B:95:A8:B4:B0:55:A7:39:BB:CA:AC:C7:39:B6
Authority key identifier: 32:26:39:B3:5E:5D:9D:0F:B3:69:6F:E2:FD:61:CB:6F:4C:3F:A5:04
Certificate issuer:       /CN=322639b35e5d9d0fb3696fe2fd61cb6f4c3fa504
Certificate serial:       019E9D05CD0458148E32287E658287456EBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft
Manifest number:          12E0
Signing time:             Sat 06 Jun 2026 13:01:03 +0000
Manifest this update:     Sat 06 Jun 2026 13:01:03 +0000
Manifest next update:     Sun 07 Jun 2026 13:01:03 +0000
Files and hashes:         1: AczQ5m07bagbCSpYHKyOOUGJiuU.roa (hash: ZZkvh7a+nFDXqMju+v84npxtkZQE+y45PmWF7YuV5vg=)
                          2: E50dRzelevPp0RPUUn-X1whUhzs.roa (hash: ESKLNPEXcUQlYreIgYSRyGc6RpOOENWjDiinLW02gqM=)
                          3: KnXc9wIdUwOgGPZNVY_TSbLRRoY.roa (hash: Ur+szLOeyaAy0p6WFfKNCA4+hET9D0q8Orh268HfdLU=)
                          4: MiY5s15dnQ-zaW_i_WHLb0w_pQQ.crl (hash: 8WPiWpvGbtPbAUWikNKP0+Pt8Hm5JLxryaljWLUiTQE=)
                          5: _YrGQaV-xv0pIG914t75tY-lgq4.roa (hash: mceOdmff8pDALeUaOfa99NehQO4QsbAd1TsnHGDmlpY=)
                          6: fyxsLRJZFn7CTFSJ2VnoPkiPR2s.roa (hash: 8HFUKsLTWzFpdFnaVvVRZkBC3eF7vcFOlN74+dbWE3g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 12:50:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9d:05:cd:04:58:14:8e:32:28:7e:65:82:87:45:6e:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=322639b35e5d9d0fb3696fe2fd61cb6f4c3fa504
        Validity
            Not Before: Jun  6 13:01:03 2026 GMT
            Not After : Jun  7 13:01:03 2026 GMT
        Subject: CN=29cee21c01023b95a8b4b055a739bbcaacc739b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b0:27:95:68:1c:f1:63:3e:04:81:e4:18:87:
                    d0:90:4c:04:b5:8d:94:b4:85:9f:11:c3:0a:f0:de:
                    8b:01:e2:7a:c4:ec:fd:33:6b:c0:28:fa:10:b4:04:
                    37:d1:cf:cd:cb:87:9a:a6:28:e7:a2:da:b7:d8:da:
                    e0:74:8f:5c:88:37:99:37:22:04:88:b4:19:40:97:
                    6a:ed:f6:93:42:d5:b6:cf:2c:d7:b2:00:08:96:2b:
                    1e:a1:33:d9:ed:9f:9e:71:b6:59:68:2d:c9:67:74:
                    18:9e:a3:14:01:6c:4b:0e:51:e3:80:c5:ac:d2:de:
                    a1:36:ef:23:c8:f9:09:7c:de:e1:5b:da:d6:bd:04:
                    37:c2:6e:f7:d4:f6:e8:c7:e6:7d:ae:59:37:23:ff:
                    6e:ef:3e:9b:dd:c6:d7:92:d6:14:33:45:07:a7:4a:
                    0b:6c:4a:ee:c1:39:c3:c9:84:07:2f:68:d0:43:5d:
                    13:7e:9a:35:d5:a8:6c:9b:41:73:a5:ea:b2:04:11:
                    d1:fc:4c:51:d1:92:7c:46:c7:a8:85:4b:5f:2c:05:
                    d4:36:ca:1e:60:9a:0c:b2:1d:e7:f7:25:31:15:d9:
                    68:d0:ba:60:ef:4c:da:e0:c5:f4:17:2b:13:1a:e8:
                    e8:19:f2:22:e2:b9:60:83:1c:a1:c3:57:3b:6b:95:
                    cb:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:CE:E2:1C:01:02:3B:95:A8:B4:B0:55:A7:39:BB:CA:AC:C7:39:B6
            X509v3 Authority Key Identifier:
                keyid:32:26:39:B3:5E:5D:9D:0F:B3:69:6F:E2:FD:61:CB:6F:4C:3F:A5:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:f7:6a:20:05:5f:0b:9a:a9:76:e4:25:fc:83:1c:33:4b:5e:
         cb:29:11:da:48:ee:2c:db:a1:3b:03:21:f6:b1:8f:43:2e:da:
         40:8a:4b:53:c7:6a:54:22:bd:8f:e1:27:15:05:7f:7f:69:56:
         e9:d3:04:47:ea:5d:23:06:a5:8f:c9:e3:92:ce:11:ef:b0:cb:
         c9:d5:af:d4:d5:f1:d1:f9:9f:0b:e1:c5:77:da:cb:f5:05:36:
         b2:40:a4:55:49:31:d4:57:8e:cb:fc:07:e3:80:25:58:75:6e:
         90:85:a1:fa:cf:4c:58:b7:d3:74:6d:0c:14:1c:ec:08:40:d3:
         40:48:11:3f:4f:52:92:3b:60:f1:b8:a4:5e:62:36:42:a6:b6:
         d0:f7:78:93:6e:86:0e:64:b3:02:0f:36:b1:55:96:0c:b5:e7:
         96:9b:a8:43:43:5e:ff:98:64:77:ea:fa:c1:b8:34:ad:dc:5d:
         0b:b4:47:0c:89:f5:ac:7a:87:03:be:cb:5e:81:d2:ac:12:61:
         07:0e:90:2b:6f:d3:b2:65:9f:ac:e3:c2:31:98:77:2d:4f:0b:
         ec:b0:c2:d0:3b:aa:29:92:a0:42:0b:f5:9a:ec:28:9a:f5:21:
         5c:78:89:33:66:80:5a:e5:16:59:16:2a:6c:ee:e0:ce:c1:62:
         5b:fc:e2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:44:38 2026 by rpki-client