Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
File:                     alg23em52u81qKf3TWMm9rQtp00.mft (raw, json)
Hash identifier:          soxYVBlqxfx9R4pI8EX3vNLdRDyD0Rw9OYqS1P9aMZg=
Subject key identifier:   27:DB:0B:74:46:B8:CB:A3:F2:DC:F6:8A:DB:41:9E:81:B7:08:DA:76
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Certificate issuer:       /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial:       019E1CB4AF6D5A80D80BBBDDEE5E66B378F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
Manifest number:          0FC9
Signing time:             Tue 12 May 2026 15:01:03 +0000
Manifest this update:     Tue 12 May 2026 15:01:03 +0000
Manifest next update:     Wed 13 May 2026 15:01:03 +0000
Files and hashes:         1: 2wOulV0vAbQf8biJXAnQkgGArPI.roa (hash: 7hYlyThHw9PBylpjQHX2//RefihYkxx++H9IszVVhRo=)
                          2: 588PNHg6CncRbEovNSIqaa8i5LI.roa (hash: cKLcHrzYxurc879bXkmUn4CshZz0QJYPGDzoguXub1Y=)
                          3: 8tE1XoXALCHY82O8b8qmwszNbGs.roa (hash: Wenx4p8ARt+i0JB3aRNXys0FukN+g6qNblR6qJZ7KAY=)
                          4: G8BPphhm9oFoNoaDVHCDJOi1A1I.roa (hash: o25EiApUpZto47Wgp7aaZGTEkqSv5P2WX51MC5xNgcg=)
                          5: M0vUEBMIUgT4jDZek6CAIPYaSIg.roa (hash: PIpybvqNjJxeWjfkr7UEGiD+MMuADppLXWFHDY6S5Vc=)
                          6: MZRQk6tT-Iy_0EmbTY5ZwDElyos.roa (hash: pr7kUc7XXbghgioDyj2+ehsGl4rvR5Ny0ZhIypP6qnE=)
                          7: PRl542vKWzERjZy8INPb-TgkXr4.roa (hash: EnUZ2TcojekWId1tvYvvKcumXfp94C7iBeo+v/ZBk5c=)
                          8: alg23em52u81qKf3TWMm9rQtp00.crl (hash: dz1WcClB9GE4BlU6GBpOkq6yPC970rUZwkweZugusSw=)
                          9: cx2hNcUqecSEJqe3n2yH1nbkzcQ.roa (hash: VM9cV3NpEOzoGjoegWLpfoVKjMdeb/qreQ0du+7oLuc=)
                          10: mSzzMA6L5QbhcWeV8GJlOnBN0cM.roa (hash: KFpvmdmXJzfhj/vqjMViv2cspmTTL885sm48c0BNhjc=)
                          11: pcGsYQ6WmjLQ7fW-l50FaHq8fAw.roa (hash: OyCY6h+GWUv+mGKdOjMTfLCqD3xuf3tOl0/vrW+coks=)
                          12: pnFO1a6gizeUc-Mp5yF3aD9GKrY.roa (hash: 12+yB/uNotyYBuazoRPVxuRnI9x9XM3niLtRN4n27c0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b4:af:6d:5a:80:d8:0b:bb:dd:ee:5e:66:b3:78:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
        Validity
            Not Before: May 12 15:01:03 2026 GMT
            Not After : May 13 15:01:03 2026 GMT
        Subject: CN=27db0b7446b8cba3f2dcf68adb419e81b708da76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ac:f2:83:10:d1:17:55:dc:06:f3:80:0f:58:
                    e1:64:f0:bc:93:c2:21:a2:81:f7:b3:e4:1c:f4:6d:
                    57:25:8f:b1:11:09:09:0c:69:c8:cd:4d:f9:30:78:
                    95:5e:2d:8e:f2:66:aa:4d:22:ec:db:11:53:b3:48:
                    28:d5:c9:d6:29:2f:00:36:2a:d3:8c:14:74:86:a6:
                    2a:08:fd:3c:78:e8:2f:f1:a0:3d:f2:cd:e8:7d:2a:
                    79:c2:49:18:f9:a3:75:27:c8:e9:9d:c3:43:8c:1b:
                    ee:eb:dc:86:72:35:8a:42:ea:6f:80:05:f9:d9:a4:
                    bf:8e:74:35:b6:e2:73:21:df:2f:0d:6f:9e:43:7b:
                    7f:25:c4:fb:b9:b5:51:b7:c2:3d:7d:d9:d6:d5:17:
                    10:6d:cb:2d:63:16:e2:f9:6d:88:ac:a7:77:c1:1f:
                    e9:73:15:00:bc:9e:dc:d8:88:9f:4a:84:88:5d:2d:
                    e2:27:9d:f0:fe:60:84:c6:a6:fb:f8:4d:02:d7:23:
                    61:cd:94:28:84:c0:d9:c7:2a:70:7b:05:62:e7:d9:
                    b5:03:5d:17:8f:e2:5d:68:5c:b1:4f:22:ad:7b:ec:
                    5b:87:3e:14:b2:17:16:69:f6:1f:48:d0:6f:d7:1a:
                    d8:7a:49:61:77:4b:d2:0d:a2:7a:5b:02:13:63:6a:
                    14:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:DB:0B:74:46:B8:CB:A3:F2:DC:F6:8A:DB:41:9E:81:B7:08:DA:76
            X509v3 Authority Key Identifier:
                keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:8d:03:d0:57:6f:05:c2:95:3c:34:15:90:1e:97:63:5f:0b:
         ed:cf:aa:76:76:e8:0e:ea:01:47:f8:27:c0:03:9c:75:c3:52:
         6a:bd:7b:44:3c:8b:c7:91:80:d4:28:3f:7b:75:8e:9e:a5:6b:
         f4:cd:cb:53:55:e1:91:8f:bf:54:61:ab:75:28:29:24:20:64:
         f6:d5:0c:a0:f6:d0:cf:8a:29:5b:37:aa:fc:d2:db:2e:11:bd:
         a7:96:63:13:bd:2b:13:50:1e:6e:12:ca:5c:a5:b7:54:07:f7:
         86:c0:30:ea:0d:5c:a9:6a:b3:ea:71:54:bb:f6:79:8f:bb:08:
         14:ee:43:99:22:14:c6:69:e4:57:38:d2:4f:3c:df:0d:81:02:
         b4:2d:4b:a7:ab:8d:1c:30:3a:58:49:a7:e0:3b:3d:4f:4b:e0:
         7f:00:ae:84:cb:56:de:00:eb:18:64:f7:7c:dc:cb:88:cb:a3:
         87:88:ad:05:2a:53:d8:56:84:5f:dd:59:b8:3f:cf:9b:08:7d:
         22:a4:b6:9f:68:12:e2:c2:84:24:78:cb:92:5e:01:79:e8:88:
         77:28:b7:ce:bd:4f:de:04:4a:fc:bf:70:e7:b8:d7:56:81:bf:
         2d:5b:f9:33:c4:6d:15:c5:81:fc:ab:67:2d:4b:f0:37:96:f0:
         74:45:fe:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:19:18 2026 by rpki-client