Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/1cbde8-0426-48d9-bad6-4620a0a161e8/1/MUY2acKBF1OVOAySpRzx_f_ukF8.mft
File:                     MUY2acKBF1OVOAySpRzx_f_ukF8.mft (raw, json)
Hash identifier:          PiFndTjOcuxsdn5yOYkg/oOpZ4zQXlgyiQVA6YfXcSE=
Subject key identifier:   84:E8:5F:A7:6B:F3:30:83:56:8B:A2:35:31:76:C2:9F:1E:AD:A6:B3
Authority key identifier: 31:46:36:69:C2:81:17:53:95:38:0C:92:A5:1C:F1:FD:FF:EE:90:5F
Certificate issuer:       /CN=31463669c281175395380c92a51cf1fdffee905f
Certificate serial:       019DD051C1FF48FCC9CE735C3916D0D40283
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MUY2acKBF1OVOAySpRzx_f_ukF8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/1cbde8-0426-48d9-bad6-4620a0a161e8/1/MUY2acKBF1OVOAySpRzx_f_ukF8.mft
Manifest number:          010D
Signing time:             Mon 27 Apr 2026 19:01:52 +0000
Manifest this update:     Mon 27 Apr 2026 19:01:52 +0000
Manifest next update:     Tue 28 Apr 2026 19:01:52 +0000
Files and hashes:         1: IQtWki5ELUTgi2gsS7IO7ixd2mA.roa (hash: APtYFNUlkTrTGFr0t02Zs6yCyIMFrfeQaS9bMm7zHBU=)
                          2: MUY2acKBF1OVOAySpRzx_f_ukF8.crl (hash: FNxbKOjUz4huJ2YWhsmMVjb+B+7yD1UnsPx8SZl67nU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/1cbde8-0426-48d9-bad6-4620a0a161e8/1/MUY2acKBF1OVOAySpRzx_f_ukF8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/1cbde8-0426-48d9-bad6-4620a0a161e8/1/MUY2acKBF1OVOAySpRzx_f_ukF8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MUY2acKBF1OVOAySpRzx_f_ukF8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 17:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d0:51:c1:ff:48:fc:c9:ce:73:5c:39:16:d0:d4:02:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31463669c281175395380c92a51cf1fdffee905f
        Validity
            Not Before: Apr 27 19:01:52 2026 GMT
            Not After : Apr 28 19:01:52 2026 GMT
        Subject: CN=84e85fa76bf33083568ba2353176c29f1eada6b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e0:b9:e9:f9:e7:d0:97:9c:00:13:de:cb:a0:
                    3a:d9:f3:b0:73:2a:7b:dd:02:f6:41:7f:15:4b:e7:
                    b5:a0:1d:4d:d1:20:08:1f:24:31:ed:6f:3d:d8:d8:
                    09:40:6f:a5:9b:e6:0a:a3:63:0a:3c:03:b2:9f:9d:
                    41:88:ac:39:b7:75:77:9c:7b:85:7c:3a:e3:7b:83:
                    ed:e5:6a:fc:b4:66:d0:2b:80:ab:c2:72:96:3d:e8:
                    d0:d5:a3:cb:98:ac:e2:a8:51:c4:6a:60:bb:b6:e8:
                    4c:47:c5:5e:64:00:27:de:d1:ec:1f:f3:21:f0:0a:
                    4c:6b:dc:96:d0:de:30:ab:66:b5:4e:ba:af:36:de:
                    ee:b5:d0:d8:e1:c3:50:5e:fa:06:2e:82:d5:2d:1b:
                    76:d0:f9:80:53:c2:7a:3c:4d:b2:f1:5e:c0:cd:48:
                    7d:5c:d2:4d:bf:4f:ab:e5:93:9c:d1:b7:0f:b4:ee:
                    1b:5c:2b:82:49:30:78:4b:90:fe:1c:26:1e:9c:73:
                    50:06:85:80:d8:1a:df:3d:40:85:8a:46:7e:7a:b1:
                    c3:10:ed:b1:3d:f8:98:40:1a:97:5c:24:56:f6:dd:
                    54:ab:a9:c7:c1:75:6a:7a:a3:8b:42:36:3d:c1:2a:
                    81:5f:a2:30:bd:1e:8d:05:38:2e:c9:aa:c0:0a:8b:
                    b3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E8:5F:A7:6B:F3:30:83:56:8B:A2:35:31:76:C2:9F:1E:AD:A6:B3
            X509v3 Authority Key Identifier:
                keyid:31:46:36:69:C2:81:17:53:95:38:0C:92:A5:1C:F1:FD:FF:EE:90:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MUY2acKBF1OVOAySpRzx_f_ukF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1cbde8-0426-48d9-bad6-4620a0a161e8/1/MUY2acKBF1OVOAySpRzx_f_ukF8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1cbde8-0426-48d9-bad6-4620a0a161e8/1/MUY2acKBF1OVOAySpRzx_f_ukF8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:f2:82:af:72:b1:e4:7f:75:36:76:1f:3d:2e:91:63:96:1a:
         bc:00:9d:97:b7:e6:04:63:ab:eb:d0:c8:5e:07:ba:4d:49:fc:
         50:a1:25:87:48:df:43:54:ec:cb:d2:19:5d:84:5e:c7:c7:80:
         77:65:27:89:d8:fa:7e:b0:5a:0b:8e:43:5d:f9:5c:79:22:47:
         1e:57:e6:12:54:98:d3:1d:8d:33:79:13:3e:e9:6c:e6:62:93:
         60:eb:36:8e:96:f5:2a:3d:16:fb:db:74:7b:b4:e3:8c:e3:75:
         96:1c:b6:ca:d6:43:57:7e:c8:fc:4a:48:16:f6:77:77:a0:df:
         1c:a9:b8:7c:1b:11:2d:5e:7a:52:de:1a:f5:cd:9f:6a:f7:10:
         15:cf:e0:07:f0:a3:04:e8:21:a3:3e:e7:90:6d:03:cf:a9:ab:
         cf:3b:ee:70:27:93:e1:74:e7:65:cf:0a:68:41:15:e3:c3:2b:
         26:96:95:9c:78:a7:67:23:b0:bb:d5:c0:59:fe:61:b3:43:9f:
         5c:0e:49:ec:fd:f2:ac:6a:25:ee:1a:5f:71:1b:cb:1d:7d:6e:
         44:c2:ad:0e:74:7f:77:bb:f2:c1:5b:b7:5b:dc:bc:c6:fe:01:
         a5:b4:6f:c9:0b:19:ff:80:26:e9:5d:86:f4:d9:5e:02:2d:c8:
         42:e8:17:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 01:14:40 2026 by rpki-client