Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft
File:                     Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft (raw, json)
Hash identifier:          YsBx/pzOiWY0P7OYI2loFIeGKWe+baJLCL95QpjWJ8w=
Subject key identifier:   89:12:89:94:FB:50:9A:34:19:C8:76:51:3F:37:E3:8D:51:3E:0B:E3
Authority key identifier: 4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A
Certificate issuer:       /CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a
Certificate serial:       019DEE5C693D6F8F997015457C6A49D98118
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft
Manifest number:          15B3
Signing time:             Sun 03 May 2026 15:02:06 +0000
Manifest this update:     Sun 03 May 2026 15:02:06 +0000
Manifest next update:     Mon 04 May 2026 15:02:06 +0000
Files and hashes:         1: 1-PTdsM_AGC5XNTFED_Bd1lKJUrY.roa (hash: t/bF8BVKmcIucBirQ4iHEKuh8d9LX26p0NPMDv8nEak=)
                          2: 6PInJ2tbRTip0fDT1jftw8w7R7I.roa (hash: JDGvPisnEK8vyfb4vuVlQuoioDUHeR2I2cF0Dy3S3VU=)
                          3: B3ZEk8Cap2g9KplZIsoRlruoyZE.roa (hash: g43dat6xdrbXP10ocqQ6N9VTX+6RhA4yXEtNgHAbATA=)
                          4: Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl (hash: cdp5bKzABRp0Fa0TbaHsf3bHCdp+Ba+IRdo7ax5c6vg=)
                          5: hxyFg93cyoODusD3h3L8hfc5HG0.roa (hash: BPNhbAxVULf2vc9aGDatTvAGnPVmpDD0d77IZ2F/Ui8=)
                          6: nj4mvFqfvEUyr5giiKwR4BVZQno.roa (hash: 9KFIbmVJvCtQC4dokjtpRH9fFECm3xNQnDEDkj0ZLgE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 May 2026 11:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ee:5c:69:3d:6f:8f:99:70:15:45:7c:6a:49:d9:81:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a
        Validity
            Not Before: May  3 15:02:06 2026 GMT
            Not After : May  4 15:02:06 2026 GMT
        Subject: CN=89128994fb509a3419c876513f37e38d513e0be3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:85:07:bd:f4:64:07:21:ef:b3:cd:60:7f:d0:
                    43:b2:1b:3e:f2:35:d6:92:59:99:9f:c0:70:9f:1a:
                    28:7b:55:1c:1c:41:e2:01:0a:48:0e:d7:61:72:c3:
                    02:65:92:5d:c1:33:84:55:6e:e2:34:80:70:60:f7:
                    77:46:33:58:07:ee:a6:91:85:1f:fe:80:91:df:75:
                    f8:6a:c7:2e:fe:ba:e1:05:93:03:4b:1b:e7:07:46:
                    ba:5f:b7:24:02:98:27:7d:b5:dd:4d:28:dc:4c:50:
                    b0:a5:a9:84:cd:a4:42:5d:87:11:69:02:35:18:a4:
                    bd:a8:f4:24:15:e1:85:a8:a2:c1:11:bc:a5:32:9f:
                    04:2c:89:67:63:89:8d:b1:3b:e3:85:17:fe:06:fa:
                    af:24:b9:8a:cc:89:50:05:de:7f:de:05:79:c3:8f:
                    cd:56:13:b4:46:2e:7b:c7:10:8b:9a:67:ac:09:c7:
                    4c:92:ab:54:24:b0:0c:9c:b8:26:03:0a:45:51:b4:
                    ba:73:5c:87:94:10:41:c6:60:a5:6c:04:cc:11:bb:
                    ea:68:fa:97:5a:97:b5:57:7d:6f:94:7a:7b:ee:3e:
                    04:68:45:77:78:d3:92:0d:91:0a:6d:9a:db:6d:64:
                    5c:08:49:1f:83:3c:c7:7b:03:ce:ed:cb:b4:b0:80:
                    1e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:12:89:94:FB:50:9A:34:19:C8:76:51:3F:37:E3:8D:51:3E:0B:E3
            X509v3 Authority Key Identifier:
                keyid:4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:e5:06:4d:ec:a8:a6:39:f8:32:ac:f8:77:91:3c:0f:ea:b3:
         de:aa:e9:d1:33:ea:07:98:60:93:9f:47:e3:eb:34:55:a7:42:
         8f:39:81:f2:ae:d1:a0:75:1c:26:23:a2:ba:f9:46:d1:73:54:
         d6:f2:21:a2:b1:cf:16:f8:5c:c6:df:06:a2:fb:23:8f:9f:bb:
         58:84:ff:80:02:f3:4f:41:f1:df:fe:b2:40:2c:49:8e:14:20:
         5d:f8:da:d1:13:11:5d:f2:d6:8a:0a:ae:e3:b9:b7:e9:2a:85:
         29:d9:7f:ad:e5:26:68:39:e9:7d:ca:71:51:34:a2:c7:57:29:
         4b:cc:9a:4b:d0:72:5d:df:60:61:73:09:e2:2a:7b:c8:2a:c6:
         57:36:10:d5:9a:26:5e:f8:82:52:75:9b:ec:fa:ef:75:86:a8:
         d6:cf:6b:2a:cb:8f:87:b7:b1:e0:ad:d8:2c:e7:73:3d:90:ca:
         b4:92:0a:c7:ec:c2:8a:8f:f4:d0:bf:51:bc:d3:3c:e7:c5:3c:
         7b:03:7a:fa:69:9a:bc:06:bf:c7:df:b1:e6:32:d4:8c:24:e9:
         53:32:04:71:16:95:8c:7b:f8:46:5b:5f:9e:c0:d1:25:6c:b4:
         ae:6f:e5:38:2f:18:56:ce:3f:49:17:d5:c6:4a:73:21:31:03:
         7b:83:2d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:07:58 2026 by rpki-client