Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
File:                     TD6do79ZOALMgz_l2UelJpb1jI0.mft (raw, json)
Hash identifier:          zpKmt9oS0lom/l6dyA57OlpoJ008T0WXuJof1mttSDs=
Subject key identifier:   5A:41:08:7F:0A:DF:7C:BC:D2:04:08:DA:BE:89:2E:56:E5:CA:9F:0A
Authority key identifier: 4C:3E:9D:A3:BF:59:38:02:CC:83:3F:E5:D9:47:A5:26:96:F5:8C:8D
Certificate issuer:       /CN=4c3e9da3bf593802cc833fe5d947a52696f58c8d
Certificate serial:       019DEE24C4237FE268D3B18D1F739A7605FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
Manifest number:          182E
Signing time:             Sun 03 May 2026 14:01:19 +0000
Manifest this update:     Sun 03 May 2026 14:01:19 +0000
Manifest next update:     Mon 04 May 2026 14:01:19 +0000
Files and hashes:         1: TD6do79ZOALMgz_l2UelJpb1jI0.crl (hash: r/c8x/rNFUdRGnG3kPjPEWMoQQmwYtcCDsH/m6iI6x8=)
                          2: xoBSepf056vB7VihaJfLbbA7rl8.roa (hash: FqEFR7+yy5fGMc3KqbC1V37aXIXlQqiTJ1sLZ3ECBNg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 May 2026 11:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ee:24:c4:23:7f:e2:68:d3:b1:8d:1f:73:9a:76:05:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c3e9da3bf593802cc833fe5d947a52696f58c8d
        Validity
            Not Before: May  3 14:01:19 2026 GMT
            Not After : May  4 14:01:19 2026 GMT
        Subject: CN=5a41087f0adf7cbcd20408dabe892e56e5ca9f0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:63:9c:e8:6c:82:a7:c2:b3:96:9c:f4:a2:92:
                    31:6e:33:1b:14:08:77:ff:a1:42:ac:56:31:50:d5:
                    50:6c:dd:c8:87:60:08:4c:a7:1b:e5:c8:6b:8d:70:
                    5e:43:b1:f0:f4:f6:f9:a2:8f:6a:21:5b:bd:94:07:
                    6f:8d:5f:f3:be:45:19:af:01:36:f5:c3:ab:dc:fc:
                    4e:a3:fe:17:98:9c:f7:19:52:4a:33:b3:b4:af:77:
                    10:30:6f:c0:e8:17:9c:3a:c2:e7:1c:d9:ee:dc:db:
                    16:5c:5c:c7:f8:50:9b:d4:08:79:3f:5c:55:ec:52:
                    c9:e3:13:43:3b:f7:53:9c:04:db:50:24:84:3a:2f:
                    5b:c3:f7:35:5e:1b:85:77:0e:d5:db:43:f1:a1:00:
                    7c:39:4e:35:2b:8d:89:ce:7e:15:14:d1:2d:8c:ee:
                    c9:f5:df:1e:e9:9d:de:f2:32:8b:4a:60:31:9a:cf:
                    fe:b5:a6:0b:14:98:54:77:04:81:ef:84:ff:e1:f5:
                    71:28:fb:e3:ad:42:72:95:7a:aa:e2:c2:1f:d8:3b:
                    22:2a:25:f2:f0:4f:74:fe:74:4d:6e:b7:48:48:d2:
                    0f:47:d7:be:9c:f3:dc:06:77:3e:85:76:55:da:da:
                    ba:9b:5f:26:cd:da:54:3a:71:7f:99:d8:1f:f3:06:
                    e3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:41:08:7F:0A:DF:7C:BC:D2:04:08:DA:BE:89:2E:56:E5:CA:9F:0A
            X509v3 Authority Key Identifier:
                keyid:4C:3E:9D:A3:BF:59:38:02:CC:83:3F:E5:D9:47:A5:26:96:F5:8C:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:67:eb:e0:2a:12:d2:a5:38:71:33:cc:f6:f6:95:36:7c:98:
         e0:0e:3a:d9:e1:a2:15:ea:44:3a:56:67:9d:8e:63:fc:2c:bf:
         bd:b8:50:96:47:43:40:a5:d1:dd:35:8e:22:e3:6f:e4:eb:52:
         30:93:2b:c0:2b:f2:05:0f:7f:c8:42:1b:17:14:2f:ab:ee:f4:
         28:bc:23:ba:f7:ed:6b:51:ad:e9:3d:58:48:31:6f:82:5a:95:
         fd:1b:a4:00:5d:4e:7f:4f:f4:d0:d9:c3:9c:13:88:69:0b:ef:
         9a:3f:31:b2:72:fc:40:90:0a:a3:86:4a:ff:4b:33:03:d6:14:
         36:4f:9a:0f:9b:4d:21:58:2c:f9:0c:02:74:b6:35:e9:20:d3:
         45:20:7b:a5:63:e7:01:3b:7f:45:96:b4:4b:c1:3a:87:2e:d5:
         7a:58:59:10:a6:fd:ef:93:1e:44:77:c4:9e:51:26:26:6b:53:
         d8:15:98:e7:9f:a3:38:33:ea:55:55:c3:d4:ad:67:4b:9f:e9:
         3e:4b:c5:b9:f0:68:87:21:05:52:3d:97:1b:62:81:58:3d:5e:
         76:f4:b6:42:42:28:d1:b2:53:4d:45:9d:ce:e9:9b:f1:a5:8d:
         ef:8e:2f:ac:53:1f:2a:4c:70:7f:85:17:ff:d8:d9:e5:ca:f7:
         af:00:e3:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3uJMQjf+Jo07GNH3OadgX7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjM2U5ZGEzYmY1OTM4MDJjYzgzM2ZlNWQ5NDdhNTI2OTZm
NThjOGQwHhcNMjYwNTAzMTQwMTE5WhcNMjYwNTA0MTQwMTE5WjAzMTEwLwYDVQQD
Eyg1YTQxMDg3ZjBhZGY3Y2JjZDIwNDA4ZGFiZTg5MmU1NmU1Y2E5ZjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWOc6GyCp8Kzlpz0opIxbjMbFAh3
/6FCrFYxUNVQbN3Ih2AITKcb5chrjXBeQ7Hw9Pb5oo9qIVu9lAdvjV/zvkUZrwE2
9cOr3PxOo/4XmJz3GVJKM7O0r3cQMG/A6BecOsLnHNnu3NsWXFzH+FCb1Ah5P1xV
7FLJ4xNDO/dTnATbUCSEOi9bw/c1XhuFdw7V20PxoQB8OU41K42Jzn4VFNEtjO7J
9d8e6Z3e8jKLSmAxms/+taYLFJhUdwSB74T/4fVxKPvjrUJylXqq4sIf2DsiKiXy
8E90/nRNbrdISNIPR9e+nPPcBnc+hXZV2tq6m18mzdpUOnF/mdgf8wbjLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpBCH8K33y80gQI2r6JLlblyp8KMB8GA1UdIwQY
MBaAFEw+naO/WTgCzIM/5dlHpSaW9YyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEQ2ZG83OVpPQUxNZ3pfbDJVZWxKcGIxakkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9iOWE4MzAtNjk5Mi00OWM2LTg5NzMt
ZWFjYjQ5NjVmZTM4LzEvVEQ2ZG83OVpPQUxNZ3pfbDJVZWxKcGIxakkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9iOWE4MzAtNjk5Mi00OWM2LTg5NzMtZWFjYjQ5NjVmZTM4
LzEvVEQ2ZG83OVpPQUxNZ3pfbDJVZWxKcGIxakkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGGfr4CoS
0qU4cTPM9vaVNnyY4A462eGiFepEOlZnnY5j/Cy/vbhQlkdDQKXR3TWOIuNv5OtS
MJMrwCvyBQ9/yEIbFxQvq+70KLwjuvfta1Gt6T1YSDFvglqV/RukAF1Of0/00NnD
nBOIaQvvmj8xsnL8QJAKo4ZK/0szA9YUNk+aD5tNIVgs+QwCdLY16SDTRSB7pWPn
ATt/RZa0S8E6hy7VelhZEKb975MeRHfEnlEmJmtT2BWY55+jODPqVVXD1K1nS5/p
PkvFufBohyEFUj2XG2KBWD1edvS2QkIo0bJTTUWdzumb8aWN744vrFMfKkxwf4UX
/9jZ5cr3rwDjgA==
-----END CERTIFICATE-----
Generated at Sun May 3 18:36:13 2026 by rpki-client