Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
File:                     M7Zai666T_YhSS6-5vweiK2yGwM.mft (raw, json)
Hash identifier:          0m90N+UKaAmdq9NbiZrkVMqucpo5je8Kjd5TfNWPhCs=
Subject key identifier:   1C:B4:BA:B5:71:3E:88:78:2F:12:27:EE:65:EC:D2:02:B5:80:26:A0
Authority key identifier: 33:B6:5A:8B:AE:BA:4F:F6:21:49:2E:BE:E6:FC:1E:88:AD:B2:1B:03
Certificate issuer:       /CN=33b65a8baeba4ff621492ebee6fc1e88adb21b03
Certificate serial:       019DA1F7B4937BDF79AF79003DADEEB4B7FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
Manifest number:          04E2
Signing time:             Sat 18 Apr 2026 19:00:58 +0000
Manifest this update:     Sat 18 Apr 2026 19:00:58 +0000
Manifest next update:     Sun 19 Apr 2026 19:00:58 +0000
Files and hashes:         1: 1-_85ETz5jkHerkVT2dRSmXtqgNo.roa (hash: NQXJJj/OBTH49mc/x3onWdcUiAdq+Dhq5KpAVGXEyBc=)
                          2: M7Zai666T_YhSS6-5vweiK2yGwM.crl (hash: RJQUvY2ILEb1YsngNVd4vs3SQ5+BpPqaTY1wv2v0RAo=)
                          3: TTHbsr6S4A2WiT-5UCVCIBGXt7g.roa (hash: tSI1qiCrhqG5RTuDVwd5YnhpKn7WMz1SwKPqjeiWtZ0=)
                          4: a0eUHcdaR9ti-evhbAEFGBrL0Io.roa (hash: UamqmfD2F3jnX1W9WoKvN8IFkSGGaFQkzJskamkX+iU=)
                          5: n9u8fIoesd4A4uTwrOz4P1zrzO4.roa (hash: cijsYvLKzW1sG0duTGBEtXXlTm9N+GbFilwCze3Bg8c=)
                          6: xR7LKB9cMx20WjaSYnBDWdIRF-g.roa (hash: vumkR84YsHI2dcyHQIVTL0w8JKyaUvc5rnjqJHi4+6U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 17:59:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a1:f7:b4:93:7b:df:79:af:79:00:3d:ad:ee:b4:b7:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33b65a8baeba4ff621492ebee6fc1e88adb21b03
        Validity
            Not Before: Apr 18 19:00:58 2026 GMT
            Not After : Apr 19 19:00:58 2026 GMT
        Subject: CN=1cb4bab5713e88782f1227ee65ecd202b58026a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6e:b3:ff:e1:9d:68:df:53:57:88:1a:fc:aa:
                    dd:33:c1:14:77:93:80:49:77:62:67:e7:0b:e8:ee:
                    bd:ad:c0:31:6b:a1:89:ee:40:07:02:5f:c2:d0:c7:
                    4c:88:59:9d:ca:52:50:33:98:fc:86:c0:1e:28:f1:
                    fc:9c:1e:85:e3:96:e6:fc:a9:50:25:16:14:68:9f:
                    be:f0:97:1b:96:74:16:ab:59:ed:62:8f:c7:4b:5b:
                    db:e8:3c:7c:02:e8:3a:42:57:0e:ee:39:1c:6a:9f:
                    95:57:01:6d:58:d8:6f:8b:23:a4:e9:86:ce:f4:03:
                    f2:95:bd:51:fb:9c:ed:2b:82:dc:1c:55:90:a5:75:
                    57:0c:b6:a6:d3:06:34:90:62:ae:b5:22:a9:1f:62:
                    de:05:ff:2a:f8:7e:e9:9d:59:44:52:4e:19:6e:12:
                    7e:2b:4b:2e:de:71:42:29:7c:6a:a1:2a:0d:7c:21:
                    20:0d:bc:4b:36:9d:03:69:16:23:8d:33:27:ea:b9:
                    fe:42:29:b8:cf:d5:d2:5d:19:61:03:98:07:ae:ef:
                    fa:93:7a:c8:6f:03:1d:4d:ee:bc:61:d2:c7:f6:d0:
                    a7:cc:31:c8:49:fa:0b:14:57:94:a3:dc:3e:8a:79:
                    69:6d:65:24:60:eb:4e:5c:c3:e2:6b:dc:fa:57:3d:
                    91:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B4:BA:B5:71:3E:88:78:2F:12:27:EE:65:EC:D2:02:B5:80:26:A0
            X509v3 Authority Key Identifier:
                keyid:33:B6:5A:8B:AE:BA:4F:F6:21:49:2E:BE:E6:FC:1E:88:AD:B2:1B:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:f8:5a:90:0a:e9:67:73:10:08:a0:42:57:91:3a:20:37:9b:
         37:21:76:f9:88:d9:4e:f8:3c:90:2d:e9:b6:4e:6a:f8:61:fc:
         3e:36:3a:55:90:a1:ec:c6:b2:ef:0a:f3:cf:dc:ec:ce:97:91:
         98:be:6f:f6:81:af:1f:3b:ab:ab:1a:2c:ab:d8:54:a0:bf:5a:
         e1:66:f8:6b:dd:3a:80:8a:5d:d6:d9:01:8a:da:72:92:8b:ba:
         ba:14:ba:28:ee:fe:7a:40:60:e1:ff:06:91:b5:27:28:51:9f:
         b9:c3:17:b1:10:8d:03:e5:c4:32:a7:09:fa:3f:c6:c8:b8:d7:
         89:53:8a:6d:0f:7f:3c:e8:92:01:87:57:95:66:07:75:47:ed:
         f2:2a:4c:85:4a:1f:db:79:a6:b8:f2:bf:cd:12:bc:18:35:05:
         18:d9:6f:95:3f:af:a2:cb:09:a8:2c:4e:b6:f8:fb:31:61:39:
         6e:c4:b4:d4:fc:68:35:34:e4:b9:38:8d:d0:ff:20:6f:fb:f2:
         1d:78:09:11:e9:52:72:14:35:bb:15:12:86:c2:8d:00:49:2c:
         af:6d:99:70:35:ce:ab:71:84:6a:55:3d:9d:e5:ea:6c:d8:66:
         03:df:3a:d1:8e:42:2a:13:ad:e9:2d:2d:4e:f4:1b:9d:83:11:
         c8:28:84:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 23:32:04 2026 by rpki-client