Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/b1132f-9f65-4725-818d-0bc733bcdbec/1/InAnwDHEGbmties3t_J_nIZy9II.mft
File:                     InAnwDHEGbmties3t_J_nIZy9II.mft (raw, json)
Hash identifier:          PBguynko5Zbb5D1T6LI2COzW8PhKeV6814evrrhUHaY=
Subject key identifier:   FE:3B:35:AB:4B:7C:1D:F7:15:01:67:84:44:C2:A9:83:63:26:FD:7F
Authority key identifier: 22:70:27:C0:31:C4:19:B9:AD:89:EB:37:B7:F2:7F:9C:86:72:F4:82
Certificate issuer:       /CN=227027c031c419b9ad89eb37b7f27f9c8672f482
Certificate serial:       019E25133018B28CB8415363F677D689F4A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/InAnwDHEGbmties3t_J_nIZy9II.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/b1132f-9f65-4725-818d-0bc733bcdbec/1/InAnwDHEGbmties3t_J_nIZy9II.mft
Manifest number:          18
Signing time:             Thu 14 May 2026 06:01:14 +0000
Manifest this update:     Thu 14 May 2026 06:01:14 +0000
Manifest next update:     Fri 15 May 2026 06:01:14 +0000
Files and hashes:         1: 0sCu5HT-A8jPZROESYUFxpP6asM.roa (hash: nALUbJ+t8eROkLtFfrmOdOmi065ffn5EuNrtaHcvc38=)
                          2: IdkZ3UrQHah-IAAzcJNPqPEWtkY.asa (hash: dxKBJ1Bp+/e+GCumlMv/LJFCOATk9vh4jLyiXNBOTn4=)
                          3: InAnwDHEGbmties3t_J_nIZy9II.crl (hash: ooJXbZOv7KGxDxPAK7SVcXD2qSt0SND2DIodKVHAVQs=)
                          4: KUu499jW5aUG8OhinIXqufK9zKs.roa (hash: /orIVD9RY3dCs0SFyYtQgQOz1abF43yTxtMPBD67KlI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/b1132f-9f65-4725-818d-0bc733bcdbec/1/InAnwDHEGbmties3t_J_nIZy9II.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/b1132f-9f65-4725-818d-0bc733bcdbec/1/InAnwDHEGbmties3t_J_nIZy9II.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/InAnwDHEGbmties3t_J_nIZy9II.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 06:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:25:13:30:18:b2:8c:b8:41:53:63:f6:77:d6:89:f4:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=227027c031c419b9ad89eb37b7f27f9c8672f482
        Validity
            Not Before: May 14 06:01:14 2026 GMT
            Not After : May 15 06:01:14 2026 GMT
        Subject: CN=fe3b35ab4b7c1df71501678444c2a9836326fd7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:50:6d:06:9b:1f:07:b8:dc:88:9b:23:ca:a5:
                    d5:53:4b:fe:da:b7:69:fe:1a:30:fe:f9:4a:33:a0:
                    63:02:cb:d1:7d:d4:e4:e0:ad:b1:b1:a7:45:a0:e0:
                    15:da:fa:2e:69:e3:bf:13:be:9c:ea:c5:d2:14:11:
                    dd:f5:a4:9a:e4:42:81:2f:c8:ce:10:04:4d:96:43:
                    97:d0:5c:5e:8c:56:aa:5d:0f:0a:a0:22:12:0a:27:
                    02:c8:c0:1d:a5:5f:6b:09:f9:a9:75:32:b4:3e:ee:
                    38:a8:43:96:2e:fd:74:9c:29:d7:e9:49:f8:55:d3:
                    25:38:47:9b:c3:73:41:58:a1:ec:e3:5a:27:09:bb:
                    54:61:ee:d6:c4:d7:05:68:16:a8:f4:57:29:19:b7:
                    c3:d4:87:70:d2:b9:eb:3c:f3:b2:f9:24:ac:1c:f1:
                    8c:bc:a0:7d:59:14:2e:37:70:37:53:92:dd:92:06:
                    d2:29:4b:97:27:5f:b1:c6:7b:24:23:78:94:51:3a:
                    f1:bb:b8:59:1a:06:d8:15:c4:2c:ed:91:bd:64:f1:
                    40:1e:c4:1e:63:61:90:f9:14:09:0e:83:96:80:43:
                    6e:32:fc:f0:fe:44:b1:bc:38:ad:65:32:11:c8:4d:
                    30:5d:4e:d1:27:e3:dc:4f:0b:1b:67:7d:1b:d3:89:
                    bc:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:3B:35:AB:4B:7C:1D:F7:15:01:67:84:44:C2:A9:83:63:26:FD:7F
            X509v3 Authority Key Identifier:
                keyid:22:70:27:C0:31:C4:19:B9:AD:89:EB:37:B7:F2:7F:9C:86:72:F4:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/InAnwDHEGbmties3t_J_nIZy9II.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b1132f-9f65-4725-818d-0bc733bcdbec/1/InAnwDHEGbmties3t_J_nIZy9II.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b1132f-9f65-4725-818d-0bc733bcdbec/1/InAnwDHEGbmties3t_J_nIZy9II.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:5f:a3:50:e6:f5:59:ed:62:55:e1:e1:61:ae:07:c1:69:58:
         12:b9:05:b3:e6:cb:6e:d8:a4:38:ae:ff:08:54:c6:f7:bd:27:
         89:70:20:66:7a:41:f0:66:2e:65:6a:19:33:60:17:b5:6d:60:
         0c:eb:89:06:75:83:e2:c2:d0:34:ca:40:0a:08:fc:d2:8c:59:
         d7:d7:b9:a8:3a:c1:2b:96:ce:ab:19:49:22:6a:70:75:b4:30:
         6a:7c:0c:a6:bd:3b:f9:71:75:b1:92:94:25:9e:74:66:da:f5:
         01:62:bc:45:ac:db:ae:5e:48:95:74:90:bc:8b:c2:3c:33:ad:
         ff:97:9f:4c:b4:a2:51:06:16:2a:48:17:6c:15:28:2c:e0:ba:
         1c:ce:db:93:df:b7:a4:37:f9:c9:83:db:9e:13:c9:7e:e7:c3:
         aa:06:af:41:1c:9f:be:55:62:47:52:e9:e2:e9:09:e8:8f:6f:
         ea:85:50:c0:23:bb:a6:ab:eb:2a:4c:7c:0a:af:70:7f:e7:13:
         4f:00:25:6f:22:55:37:2f:84:ad:2d:7a:bb:10:b8:72:63:3e:
         05:70:bd:f1:84:75:b0:c2:4a:d1:9d:44:11:05:d4:93:14:54:
         e6:73:c0:b2:dd:74:94:a2:33:3e:1a:cf:0f:0c:d2:77:7f:4e:
         d1:14:0d:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4lEzAYsoy4QVNj9nfWifShMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyNzAyN2MwMzFjNDE5YjlhZDg5ZWIzN2I3ZjI3ZjljODY3
MmY0ODIwHhcNMjYwNTE0MDYwMTE0WhcNMjYwNTE1MDYwMTE0WjAzMTEwLwYDVQQD
EyhmZTNiMzVhYjRiN2MxZGY3MTUwMTY3ODQ0NGMyYTk4MzYzMjZmZDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlBtBpsfB7jciJsjyqXVU0v+2rdp
/how/vlKM6BjAsvRfdTk4K2xsadFoOAV2vouaeO/E76c6sXSFBHd9aSa5EKBL8jO
EARNlkOX0FxejFaqXQ8KoCISCicCyMAdpV9rCfmpdTK0Pu44qEOWLv10nCnX6Un4
VdMlOEebw3NBWKHs41onCbtUYe7WxNcFaBao9FcpGbfD1Idw0rnrPPOy+SSsHPGM
vKB9WRQuN3A3U5LdkgbSKUuXJ1+xxnskI3iUUTrxu7hZGgbYFcQs7ZG9ZPFAHsQe
Y2GQ+RQJDoOWgENuMvzw/kSxvDitZTIRyE0wXU7RJ+PcTwsbZ30b04m8AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP47NatLfB33FQFnhETCqYNjJv1/MB8GA1UdIwQY
MBaAFCJwJ8AxxBm5rYnrN7fyf5yGcvSCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSW5BbndESEVHYm10aWVzM3RfSl9uSVp5OUlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9iMTEzMmYtOWY2NS00NzI1LTgxOGQt
MGJjNzMzYmNkYmVjLzEvSW5BbndESEVHYm10aWVzM3RfSl9uSVp5OUlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9iMTEzMmYtOWY2NS00NzI1LTgxOGQtMGJjNzMzYmNkYmVj
LzEvSW5BbndESEVHYm10aWVzM3RfSl9uSVp5OUlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANV+jUOb1
We1iVeHhYa4HwWlYErkFs+bLbtikOK7/CFTG970niXAgZnpB8GYuZWoZM2AXtW1g
DOuJBnWD4sLQNMpACgj80oxZ19e5qDrBK5bOqxlJImpwdbQwanwMpr07+XF1sZKU
JZ50Ztr1AWK8Razbrl5IlXSQvIvCPDOt/5efTLSiUQYWKkgXbBUoLOC6HM7bk9+3
pDf5yYPbnhPJfufDqgavQRyfvlViR1Lp4ukJ6I9v6oVQwCO7pqvrKkx8Cq9wf+cT
TwAlbyJVNy+ErS16uxC4cmM+BXC98YR1sMJK0Z1EEQXUkxRU5nPAst10lKIzPhrP
DwzSd39O0RQNYQ==
-----END CERTIFICATE-----
Generated at Thu May 14 16:33:54 2026 by rpki-client