Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft
File:                     rr85Ti8bJRyI2YiocWEIRYB4bvU.mft (raw, json)
Hash identifier:          Sh2hnWEXoxtpDCAcSryxOuX4jItI2YvYrYnwg3bFum0=
Subject key identifier:   4C:9C:43:7C:20:8A:12:A5:BB:82:C3:BE:2D:41:A2:34:D2:2B:D7:C0
Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5
Certificate issuer:       /CN=aebf394e2f1b251c88d988a87161084580786ef5
Certificate serial:       019E2B156B9DEDF9C05BCB72094BC6B4D9AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft
Manifest number:          1927
Signing time:             Fri 15 May 2026 10:01:24 +0000
Manifest this update:     Fri 15 May 2026 10:01:24 +0000
Manifest next update:     Sat 16 May 2026 10:01:24 +0000
Files and hashes:         1: 6GLB9mtHtQ9igAugr-nU-NnOL5I.roa (hash: v+rAB5v9d/a3phjEOAxXcev6bMkZhENGNBYWynOBKZs=)
                          2: A0jJG1saLwhFpwXvphN5KLkIp7E.roa (hash: zfUzOQxZDjIQpzcBLbTZxhWmdADgguB1bEK9a5hzld0=)
                          3: BHJrH90HA7e2j36fHZGtluntvoI.roa (hash: Y13mf0+6dWn2wsiZuzG7gygvh4nWO0T3oCMxSoXnKls=)
                          4: IUNo-G5ABIhSuSWdeiVCc3h9D4A.roa (hash: LzcrEnLFMAnlZ+5zqbHv6+pvv/Iv59lNp1OzlwME3F8=)
                          5: Pwm-W2XqZjbGSCW1vqwh0IMaZZc.roa (hash: MOGwB7iZKu1QkN/hiCIWIk9cs+bF15Y23HgeypcVdhw=)
                          6: _4I_-jCH3XR23JxHVWzlSOPi3_M.roa (hash: tqFTpY9AJoIMPhinhdWGv8n5l6XDT7XH/JbG8DY2pa4=)
                          7: rr85Ti8bJRyI2YiocWEIRYB4bvU.crl (hash: HgzVaDtvxhaYQX5MhVteb0jpGB2FF7B28Zj/kue4cQc=)
                          8: sqmM075pYoIhRN4MwnW9o487rF8.roa (hash: I1CZglIvCm1ewemqOSJLikUmJGVYj4wQzxEvNc+9woA=)
                          9: vCq8VVeEIofiFQLrkv4khGyN3iM.roa (hash: +sZQ4wGcyHE3djaR6nEoYJEVQLBZat/sIPQiTRwtVBU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 10:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2b:15:6b:9d:ed:f9:c0:5b:cb:72:09:4b:c6:b4:d9:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5
        Validity
            Not Before: May 15 10:01:24 2026 GMT
            Not After : May 16 10:01:24 2026 GMT
        Subject: CN=4c9c437c208a12a5bb82c3be2d41a234d22bd7c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:56:c6:99:72:a1:0b:d1:e3:22:d8:ea:c8:c7:
                    a7:fc:19:76:5a:71:a1:a3:83:bd:c5:46:0c:3d:2e:
                    2f:a0:3f:ea:32:ff:a1:65:82:05:81:1f:1b:01:4c:
                    7f:2e:5f:7e:f5:2d:ef:f7:56:5e:91:0a:d7:76:14:
                    96:80:fb:78:18:df:c0:49:1c:34:3d:8c:b3:d6:fa:
                    4f:c7:75:7c:b8:c1:48:4e:45:21:55:1c:e7:8c:28:
                    8b:e9:fc:7a:f2:62:6d:3a:4d:2c:91:83:45:4b:e4:
                    6f:87:45:48:a9:20:32:52:ba:77:e0:f4:38:a4:66:
                    b4:3a:ad:67:f3:ca:5e:b8:c9:a7:e1:a9:11:50:b7:
                    2f:e6:89:3c:61:f9:90:81:af:2c:b0:84:20:96:01:
                    a4:94:de:69:0a:5e:f4:b5:32:dd:74:70:72:d3:c3:
                    ad:5c:73:f8:57:6c:9d:80:20:1e:1a:30:21:ba:6e:
                    1f:6f:69:ca:da:96:47:42:85:12:c1:25:83:3e:5e:
                    ed:cb:ad:e0:9b:0e:da:3d:22:cb:6f:f2:f9:cc:4a:
                    80:cf:9e:bf:75:c8:54:b2:9b:d1:04:dc:49:a4:48:
                    14:4b:15:37:37:7c:44:48:f6:ea:96:08:e6:2e:61:
                    e2:9c:25:85:d4:1b:ee:06:a9:54:fc:a7:ad:b7:09:
                    9d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:9C:43:7C:20:8A:12:A5:BB:82:C3:BE:2D:41:A2:34:D2:2B:D7:C0
            X509v3 Authority Key Identifier:
                keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:ea:09:7e:dc:94:5c:d9:4c:2a:57:cc:12:a1:f8:b0:29:94:
         2f:20:24:38:3f:24:c2:b0:ec:e2:8d:7c:ba:d3:0e:e8:cb:0d:
         0d:e3:cb:40:72:2f:d4:5b:26:c7:c8:d8:f4:f7:7e:ab:fa:46:
         b9:21:73:c6:e4:1f:2f:6e:b4:0d:6c:1e:48:ed:c1:29:c2:46:
         5c:a0:e7:0e:3f:6d:23:b5:bb:79:11:95:3c:bb:2c:df:4c:f1:
         c2:56:5b:f4:50:49:b3:49:87:c9:67:4a:86:b8:b6:03:a1:1e:
         18:b6:9b:10:26:50:93:ad:0e:0d:43:d0:29:af:18:e0:4d:da:
         40:91:80:b8:b4:3e:4c:28:a0:8a:3e:b6:bd:88:91:b7:38:dc:
         ae:33:2c:ba:ef:97:ad:0d:a6:4c:e6:65:9c:e9:7e:23:cb:e2:
         21:63:02:e7:c9:b4:d7:e4:ad:5f:28:f0:3e:a9:92:89:39:9d:
         68:59:01:21:22:9c:ad:00:14:c0:1b:6b:d0:58:be:a8:dd:d2:
         d2:bb:66:7d:ed:86:55:21:03:bd:94:29:3f:da:53:41:cc:bc:
         06:09:75:24:47:14:61:f2:97:29:82:67:5d:71:07:49:a2:72:
         9f:42:2c:78:71:76:c8:08:d2:9e:4c:f3:ca:55:59:87:c9:a4:
         c2:fc:b9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 15:19:24 2026 by rpki-client