Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.mft
File:                     b_NiwHZa-3uYBLbYGUcAB7AfJi4.mft (raw, json)
Hash identifier:          3mp4IMLdXz529hGqqiGTGOlh9rXZ/6FXtV46q9g/lhA=
Subject key identifier:   6D:AD:81:E8:3D:27:0D:DC:A7:D1:A4:58:5D:A8:34:60:9E:D7:73:4C
Authority key identifier: 6F:F3:62:C0:76:5A:FB:7B:98:04:B6:D8:19:47:00:07:B0:1F:26:2E
Certificate issuer:       /CN=6ff362c0765afb7b9804b6d819470007b01f262e
Certificate serial:       019DEC6D2838A002ACBACBE75E545CE26146
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b_NiwHZa-3uYBLbYGUcAB7AfJi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.mft
Manifest number:          159D
Signing time:             Sun 03 May 2026 06:01:09 +0000
Manifest this update:     Sun 03 May 2026 06:01:09 +0000
Manifest next update:     Mon 04 May 2026 06:01:09 +0000
Files and hashes:         1: 3fWLsk06GP4BDeD7I0N3OoV6xTw.roa (hash: pdVTz/7WIOLzoIyarAvcs4qjKDmV1F3cGRb5yOzIYZg=)
                          2: 9iFdSaW-rEOH9BsaDgdEkFOe_l8.roa (hash: Sa6vsHQLj+q1saewkNEM/Z5+Wij0qrX7tBjQg8hQ5RU=)
                          3: P5IKvyQTo66CbRnN3JS3_C3lAgs.roa (hash: walX3Gp4Gcedyo8ng/52EHxjgKFp90vyv+qcgsHKx/o=)
                          4: b_NiwHZa-3uYBLbYGUcAB7AfJi4.crl (hash: TlAEZ5kBRk9k96lrtRNM4PsdBGIKpofrdg4pXvq+Oqk=)
                          5: coqQltyEL6s_AV_ScSxVWwobaYM.roa (hash: 1OsXtHor/Ia/1YUpRgS+ibS0BUNIKccOCNCjONnFINc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b_NiwHZa-3uYBLbYGUcAB7AfJi4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 May 2026 05:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ec:6d:28:38:a0:02:ac:ba:cb:e7:5e:54:5c:e2:61:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ff362c0765afb7b9804b6d819470007b01f262e
        Validity
            Not Before: May  3 06:01:09 2026 GMT
            Not After : May  4 06:01:09 2026 GMT
        Subject: CN=6dad81e83d270ddca7d1a4585da834609ed7734c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a5:3a:4f:f6:a5:52:20:fd:2d:0a:df:87:7f:
                    e0:7d:9f:b4:c3:87:e2:da:3a:1c:26:04:5e:16:61:
                    7e:40:53:20:24:92:ff:40:23:f3:86:02:0d:19:7a:
                    e0:f8:71:bd:7d:e3:0d:e8:57:4a:57:56:48:47:74:
                    f4:d2:48:e5:8b:3b:50:31:a6:98:96:ff:73:74:e5:
                    e8:49:2a:a6:85:e9:f1:ee:f9:c7:a8:62:da:4b:31:
                    b8:84:ea:84:6e:13:68:50:17:eb:8b:db:f4:a9:9d:
                    35:0a:1a:46:b7:32:65:81:47:f1:31:4b:03:7e:42:
                    f8:81:bd:83:91:60:8f:93:1e:b9:65:33:b8:aa:43:
                    1a:14:e0:90:b2:d4:f5:53:74:41:0e:3a:64:36:ca:
                    70:a6:b4:8a:87:f7:9a:c2:29:b0:e0:4f:84:79:4d:
                    c2:62:a5:97:d3:2d:05:47:3a:17:d8:da:b7:84:c3:
                    a0:31:59:e3:09:64:90:e8:71:2f:2f:8c:3c:4f:05:
                    19:31:5a:03:95:da:70:e1:4e:d7:da:8e:03:a8:65:
                    5b:67:31:06:7f:e4:15:a6:55:38:7d:59:75:fd:7a:
                    67:7e:61:c6:53:9a:f8:ca:4f:ad:59:c8:e4:5a:5e:
                    06:88:5c:4a:61:b4:03:0a:d5:cc:04:6f:1d:38:f9:
                    ea:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:AD:81:E8:3D:27:0D:DC:A7:D1:A4:58:5D:A8:34:60:9E:D7:73:4C
            X509v3 Authority Key Identifier:
                keyid:6F:F3:62:C0:76:5A:FB:7B:98:04:B6:D8:19:47:00:07:B0:1F:26:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_NiwHZa-3uYBLbYGUcAB7AfJi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:58:6a:86:b0:85:7f:a1:20:c4:05:fd:64:18:3c:74:db:de:
         6c:ee:57:93:14:27:5e:e9:09:04:04:d7:45:f6:c3:46:b7:e8:
         ed:f2:18:fe:d9:7d:53:6f:bc:39:82:17:2d:27:fe:1a:66:e7:
         2c:05:ee:d9:d0:c9:2d:64:40:d6:e0:af:26:0d:b2:bb:5a:33:
         f8:4d:6c:80:87:08:ee:67:50:d4:6b:80:64:41:59:20:09:15:
         b0:18:5b:e8:b2:a4:9f:be:9c:c3:26:2b:bf:f0:df:dd:c9:d0:
         ea:9d:82:fd:f7:01:6a:28:2c:c8:9f:5e:7f:50:f9:30:c0:fb:
         7e:fb:0e:67:33:44:1a:8e:8f:71:82:38:e6:7d:b6:9c:b8:26:
         e8:ab:ca:29:b7:51:69:13:22:62:6f:40:e2:9d:aa:61:88:87:
         0b:fb:b5:d8:87:48:52:ff:e0:c2:23:a1:95:b0:d6:95:a9:a7:
         43:7e:65:f7:08:6e:b2:37:af:64:b8:d0:70:f0:60:83:ff:42:
         ee:50:2c:c9:14:a9:b2:54:36:73:a7:7f:7c:8c:b6:f3:c0:f1:
         e1:89:56:3c:45:69:c7:75:16:a5:c2:63:9a:4c:a1:25:b9:5c:
         1d:02:5c:17:b1:61:76:7f:1c:23:66:54:1b:31:e5:09:a2:36:
         b6:3d:8a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 15:34:45 2026 by rpki-client