Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
File:                     alg23em52u81qKf3TWMm9rQtp00.mft (raw, json)
Hash identifier:          BPV/LMGza9bVq3eiT1Y/e48ie4UjNyNT86dIa8HfAkw=
Subject key identifier:   39:50:8E:2D:FB:12:E6:38:3C:00:CE:59:FB:22:39:11:97:1D:70:B7
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Certificate issuer:       /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial:       019D76A0265CA00195E1DC75E8DCDE65DA0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
Manifest number:          0F73
Signing time:             Fri 10 Apr 2026 09:01:40 +0000
Manifest this update:     Fri 10 Apr 2026 09:01:40 +0000
Manifest next update:     Sat 11 Apr 2026 09:01:40 +0000
Files and hashes:         1: 2wOulV0vAbQf8biJXAnQkgGArPI.roa (hash: 7hYlyThHw9PBylpjQHX2//RefihYkxx++H9IszVVhRo=)
                          2: 588PNHg6CncRbEovNSIqaa8i5LI.roa (hash: cKLcHrzYxurc879bXkmUn4CshZz0QJYPGDzoguXub1Y=)
                          3: 8tE1XoXALCHY82O8b8qmwszNbGs.roa (hash: Wenx4p8ARt+i0JB3aRNXys0FukN+g6qNblR6qJZ7KAY=)
                          4: G8BPphhm9oFoNoaDVHCDJOi1A1I.roa (hash: o25EiApUpZto47Wgp7aaZGTEkqSv5P2WX51MC5xNgcg=)
                          5: M0vUEBMIUgT4jDZek6CAIPYaSIg.roa (hash: PIpybvqNjJxeWjfkr7UEGiD+MMuADppLXWFHDY6S5Vc=)
                          6: MZRQk6tT-Iy_0EmbTY5ZwDElyos.roa (hash: pr7kUc7XXbghgioDyj2+ehsGl4rvR5Ny0ZhIypP6qnE=)
                          7: PRl542vKWzERjZy8INPb-TgkXr4.roa (hash: EnUZ2TcojekWId1tvYvvKcumXfp94C7iBeo+v/ZBk5c=)
                          8: alg23em52u81qKf3TWMm9rQtp00.crl (hash: e7g9guSIJ19f3D9tLGRy4qwJS0pr6Fek6tm8sjnfnJo=)
                          9: cx2hNcUqecSEJqe3n2yH1nbkzcQ.roa (hash: VM9cV3NpEOzoGjoegWLpfoVKjMdeb/qreQ0du+7oLuc=)
                          10: mSzzMA6L5QbhcWeV8GJlOnBN0cM.roa (hash: KFpvmdmXJzfhj/vqjMViv2cspmTTL885sm48c0BNhjc=)
                          11: pcGsYQ6WmjLQ7fW-l50FaHq8fAw.roa (hash: OyCY6h+GWUv+mGKdOjMTfLCqD3xuf3tOl0/vrW+coks=)
                          12: pnFO1a6gizeUc-Mp5yF3aD9GKrY.roa (hash: 12+yB/uNotyYBuazoRPVxuRnI9x9XM3niLtRN4n27c0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 11 Apr 2026 08:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:76:a0:26:5c:a0:01:95:e1:dc:75:e8:dc:de:65:da:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
        Validity
            Not Before: Apr 10 09:01:40 2026 GMT
            Not After : Apr 11 09:01:40 2026 GMT
        Subject: CN=39508e2dfb12e6383c00ce59fb223911971d70b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:34:70:fd:a3:44:5f:8c:9c:29:b7:92:e3:af:
                    0f:5b:0f:e5:bc:5a:07:e3:02:e3:5d:de:75:73:b4:
                    f6:78:a5:0d:1f:c6:6f:d7:32:a4:97:dc:d0:1e:41:
                    fe:b8:3f:ef:b3:1e:84:dd:b2:d8:bc:c7:c9:72:89:
                    07:e0:76:56:0e:97:ee:eb:8d:8b:48:0f:6a:39:e9:
                    d2:2e:7c:f7:34:8a:c7:fd:0d:ae:dc:64:04:28:1e:
                    f2:95:01:ad:e5:36:c0:3f:5e:77:f8:5a:4e:32:d5:
                    ab:35:92:ed:a2:4c:f2:86:41:70:62:ea:7d:d3:91:
                    86:b4:10:81:f4:df:19:9d:08:5b:8d:fb:31:a4:0d:
                    03:fd:e2:50:54:df:cc:c1:3c:37:dd:eb:b4:39:b1:
                    15:bd:75:9b:d4:4b:89:e9:de:fe:ea:9b:f0:63:82:
                    3b:43:8f:9e:13:21:62:c3:53:02:3f:fa:f6:d6:c5:
                    37:22:85:16:ea:e4:06:22:5b:7c:25:70:b3:17:fc:
                    35:c9:6c:2b:51:80:40:c7:f9:07:a0:18:a0:97:4d:
                    10:dd:d2:35:26:37:9f:40:31:c5:0c:62:ad:2e:be:
                    98:86:fd:31:9e:83:60:d5:e9:6c:4e:95:3e:6d:ba:
                    b2:08:0e:10:c2:ee:ab:2d:1f:f2:f2:53:9b:66:ce:
                    4c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:50:8E:2D:FB:12:E6:38:3C:00:CE:59:FB:22:39:11:97:1D:70:B7
            X509v3 Authority Key Identifier:
                keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:80:fd:da:91:6c:1e:44:2b:55:20:01:8a:58:d3:53:c4:cf:
         21:a8:9d:8a:ad:da:8f:a1:03:26:4e:70:cd:7d:3f:3a:6c:8d:
         8f:a6:2c:ba:66:e6:40:b1:3b:f4:97:c4:a8:8f:36:36:c9:82:
         e4:83:94:69:b2:11:73:3d:47:cd:8b:d8:8a:d5:67:bf:5d:d2:
         2a:1d:7a:fc:bc:dd:a5:bf:d0:ac:2d:c2:78:25:27:e1:64:6b:
         50:3d:12:9f:42:72:0b:f1:15:6d:cf:c9:27:a5:a3:bb:0b:dd:
         19:b8:b3:a0:5a:83:8a:6d:ef:cf:d9:4b:0d:89:04:b4:c6:f5:
         06:7b:6b:81:fe:c7:e2:df:6c:b5:7f:62:1e:3e:d6:b2:7f:62:
         64:1a:c0:52:fb:50:b0:89:88:c7:6d:8b:19:5a:91:73:48:cb:
         d6:37:6b:b5:76:1d:24:38:d3:95:04:42:a8:dd:bc:6c:f2:3a:
         0a:5d:50:34:d1:12:58:6a:67:39:3a:0c:66:a1:41:3b:e5:6a:
         2b:82:99:85:0f:58:f5:9d:5f:0b:8e:d4:34:ba:3d:98:26:a8:
         12:3e:6d:47:3b:ab:38:63:c2:02:4c:ec:4e:7f:02:7a:12:10:
         56:1d:b1:80:f0:77:0f:64:69:bb:97:e7:d0:cb:52:20:39:3d:
         2f:7f:01:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 10 12:54:55 2026 by rpki-client