Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft
File:                     V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft (raw, json)
Hash identifier:          lwjgrJhlk/eGK5hFmnNI2YWdyWURrEKAaNC+iOENrDk=
Subject key identifier:   8E:6B:26:55:F5:1C:14:06:B0:62:DC:9E:E6:CC:9C:DB:77:82:67:62
Authority key identifier: 57:DB:14:3C:17:FB:05:19:44:42:6A:79:F2:43:34:C2:5C:DB:C2:34
Certificate issuer:       /CN=57db143c17fb051944426a79f24334c25cdbc234
Certificate serial:       019DD1D29CC798315A5E296D1763063D24A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V9sUPBf7BRlEQmp58kM0wlzbwjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft
Manifest number:          03B4
Signing time:             Tue 28 Apr 2026 02:02:13 +0000
Manifest this update:     Tue 28 Apr 2026 02:02:13 +0000
Manifest next update:     Wed 29 Apr 2026 02:02:13 +0000
Files and hashes:         1: T5e0TgseHoV5T0D1V0ELGlI9FBc.roa (hash: Q9H/hI7Y9VsQ4ugMF8ryTSl2yPuCfHdqE0UId9QIWbI=)
                          2: V9sUPBf7BRlEQmp58kM0wlzbwjQ.crl (hash: pARisWH21O6DwWjEcsd5Yh7y7eiJUZOWtKzPkX/VqHk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V9sUPBf7BRlEQmp58kM0wlzbwjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Apr 2026 02:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d1:d2:9c:c7:98:31:5a:5e:29:6d:17:63:06:3d:24:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57db143c17fb051944426a79f24334c25cdbc234
        Validity
            Not Before: Apr 28 02:02:13 2026 GMT
            Not After : Apr 29 02:02:13 2026 GMT
        Subject: CN=8e6b2655f51c1406b062dc9ee6cc9cdb77826762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a4:eb:bd:27:af:56:6f:42:2b:82:51:48:fb:
                    43:49:c0:a8:d9:6e:f0:aa:6a:5e:1e:5f:b0:8a:ea:
                    24:20:df:ed:9e:10:04:1e:5b:0e:97:ed:a0:22:66:
                    be:a6:7d:0a:05:c0:b4:b1:ca:d5:9e:d1:4c:9e:cb:
                    15:14:e6:7e:a7:de:89:e7:03:b9:b6:92:cd:73:69:
                    3c:c5:62:0b:ed:0b:12:67:47:66:7b:bc:4f:47:20:
                    e7:89:96:2b:b8:65:a0:1e:7a:20:33:06:67:b9:75:
                    f7:75:44:bd:11:c3:08:e5:5a:b3:f7:e2:de:af:82:
                    2a:f0:d6:c3:9c:2b:4b:ca:9e:5b:52:97:51:4f:6d:
                    8e:50:ea:c6:76:04:29:87:b1:1a:00:bf:16:dc:f6:
                    a7:06:3c:e9:38:ab:74:49:15:bb:a3:d5:f3:5b:11:
                    bb:ec:36:34:0d:90:20:b8:d4:72:30:59:c3:2e:31:
                    30:03:0a:8f:76:e3:50:b7:01:cf:d4:4c:24:8a:10:
                    77:e2:77:f3:c2:8d:2c:8e:b3:d0:82:90:6b:f1:79:
                    91:4b:eb:11:a6:c2:59:16:60:fa:42:e3:b2:67:90:
                    78:13:f2:a2:2e:c5:db:88:d2:ae:14:f2:68:01:85:
                    d1:7c:1e:c5:52:67:53:ad:30:9f:fd:a5:70:a9:40:
                    85:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:6B:26:55:F5:1C:14:06:B0:62:DC:9E:E6:CC:9C:DB:77:82:67:62
            X509v3 Authority Key Identifier:
                keyid:57:DB:14:3C:17:FB:05:19:44:42:6A:79:F2:43:34:C2:5C:DB:C2:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9sUPBf7BRlEQmp58kM0wlzbwjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:ef:3b:32:dd:2a:e3:27:9b:5e:d1:af:a7:70:eb:89:6f:fd:
         68:d5:6d:d2:33:02:b1:87:1f:08:5f:ee:3c:28:1b:45:e8:9c:
         1c:3e:a1:a2:24:45:fb:8e:5e:b9:ef:8e:26:8b:0a:7f:77:a0:
         a8:5a:67:7d:4c:62:4f:e9:09:21:f2:2f:49:94:4a:e8:9e:c5:
         b2:b0:7c:59:af:46:40:d6:62:7f:34:5e:95:24:85:0b:34:96:
         c3:d4:41:6c:55:17:b8:a1:dc:ed:37:9c:95:53:95:15:c5:09:
         06:bb:0c:f7:96:f8:c0:8f:82:aa:fc:e9:b9:7f:dc:98:3e:82:
         1c:0d:68:21:52:df:0a:16:81:92:03:7a:ea:a7:a3:5e:7c:60:
         a5:c2:65:aa:a5:3e:1f:eb:54:51:78:a7:9b:48:58:14:8e:cb:
         3a:13:8e:70:aa:c6:0c:01:a3:92:69:52:17:a5:b8:0b:7b:fa:
         a2:c6:00:0d:dd:18:38:54:24:5d:9e:e9:2d:64:9c:1a:77:f6:
         7b:a6:a5:81:28:b6:73:04:9b:85:c4:42:25:85:d9:59:95:f7:
         97:90:1f:c0:a1:cc:07:e2:b5:67:24:99:38:08:f9:ee:98:47:
         67:8a:c2:f0:70:2f:f3:77:83:24:d7:e7:9a:08:cb:02:92:2f:
         6c:5e:45:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 04:27:29 2026 by rpki-client