Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
File:                     RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft (raw, json)
Hash identifier:          0URUof64sVAmlYeDQR2cPikyjWHD1iqr0ePxtyDC7CY=
Subject key identifier:   A2:3B:B0:28:69:80:FE:5B:82:F9:BF:5C:99:AF:16:EA:03:69:90:36
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Certificate issuer:       /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial:       019E00999297B27241C66DEF4F5AF2C1DDED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
Manifest number:          1923
Signing time:             Thu 07 May 2026 04:02:04 +0000
Manifest this update:     Thu 07 May 2026 04:02:04 +0000
Manifest next update:     Fri 08 May 2026 04:02:04 +0000
Files and hashes:         1: 8Tje-qV6QLUefgoToblFnjxFOug.roa (hash: RaGHLexPAGlKd+1GFvQT68V+7VmWYOnxyCrKQ89UTuM=)
                          2: A6U93TPy254S5BjM4H7y1qRp4dY.roa (hash: AobGsfJ1WuRAdN8W9Nmg4b8l6RkF6PoSoTCjgklNWCg=)
                          3: RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl (hash: FHiVpCNaeP9l8/ojW4wZRFs4yY2zsT0arL/R28XbbAk=)
                          4: efFZNkV_9R76LBUEiCt9lJ0sXAw.roa (hash: EcZHGVhV5rtZW2h/D/nkyrejk12jAAWi5WJT/KtNz9o=)
                          5: gjksxvc8k4y0XXIS6sm4k5BKgmU.roa (hash: llURtuag8MOJGpx7pVNs4iiTs/jH9TAextZUe/qwrSo=)
                          6: kJ0DgJ8GncRn7ZZPIIWQuMqNGDU.roa (hash: B/NzJ7GlRVz7Qb3N74n5NGR3KvZ1Kbru2Tpi67t35QU=)
                          7: mZml4UltSWqYKsmpHLsrvVHIDGw.roa (hash: qDyWgBMf7ijB69O7qYcktZRhcmS49eWjuhDtFSCzusE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 May 2026 04:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:00:99:92:97:b2:72:41:c6:6d:ef:4f:5a:f2:c1:dd:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
        Validity
            Not Before: May  7 04:02:04 2026 GMT
            Not After : May  8 04:02:04 2026 GMT
        Subject: CN=a23bb0286980fe5b82f9bf5c99af16ea03699036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:0a:21:6a:12:15:d1:9c:da:67:35:00:7f:8e:
                    05:2c:61:aa:f5:69:ba:a6:c9:a0:14:36:c4:72:b5:
                    08:12:50:70:3a:04:d7:9a:b5:4d:e6:4e:e1:e8:07:
                    cf:a3:62:64:fe:d0:88:48:0d:fc:91:f5:79:bd:6f:
                    46:6e:9a:eb:b3:83:71:12:18:06:44:70:ff:61:21:
                    8c:b3:bf:8a:82:94:94:05:8b:92:fd:5f:28:ff:0f:
                    ff:c0:58:a9:a5:7e:14:0b:c0:aa:ca:d9:35:15:55:
                    27:d4:7d:5d:d0:85:23:af:c9:27:0b:f0:b3:bc:36:
                    55:8d:82:0a:70:56:a8:79:55:59:ca:ba:02:27:b3:
                    78:34:18:88:7c:18:87:79:3f:78:11:70:08:e4:dd:
                    28:30:4c:29:c3:98:c9:ff:7b:eb:ce:70:4a:e4:e6:
                    7c:68:07:69:0b:2f:0f:1a:39:ca:74:24:87:72:83:
                    55:ba:06:4f:76:1d:4c:03:bb:fb:a6:f3:b8:1a:66:
                    5c:6d:2f:6e:54:d7:f1:59:26:6b:87:4d:a4:54:dd:
                    15:49:df:cd:83:98:6d:ce:3b:7a:84:34:7b:05:f3:
                    a8:7c:aa:22:5b:b1:2e:86:08:0f:c9:e9:91:0d:06:
                    3d:cb:be:85:95:93:fc:5c:31:70:7c:13:ad:09:16:
                    6a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:3B:B0:28:69:80:FE:5B:82:F9:BF:5C:99:AF:16:EA:03:69:90:36
            X509v3 Authority Key Identifier:
                keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:76:8f:08:97:94:51:bd:b7:22:58:a3:cd:14:a8:f3:c5:c2:
         83:26:34:eb:0e:0b:3f:b1:a6:6a:c0:b6:a0:71:a4:92:4b:cb:
         57:ed:0a:71:4f:61:2a:35:71:ee:1f:a6:95:cd:86:53:e4:85:
         52:f8:51:a1:d5:bd:ee:a5:66:be:40:05:3a:81:b4:c5:7c:4f:
         9e:a0:e8:81:6d:7e:72:ea:66:06:ea:aa:cc:56:36:6a:8b:7e:
         49:77:b7:83:c9:fa:12:2e:0e:fa:9e:4d:02:07:5d:51:c2:98:
         24:ff:d1:8d:8f:71:27:de:3f:8e:84:c9:bd:a6:91:7a:89:bb:
         8e:61:26:d8:25:22:4a:ec:7e:6d:61:a6:25:be:f4:c5:30:fb:
         ab:4c:e9:bf:aa:e4:1e:fa:24:29:4f:48:78:70:4d:75:71:69:
         57:55:ce:04:55:f3:35:6a:b8:90:8d:b2:cd:99:ad:7b:00:61:
         05:be:84:36:2d:0f:8d:10:cc:72:78:0a:3c:17:7d:25:9b:d8:
         7e:9b:90:cc:dd:b6:c2:fc:f7:a0:a2:40:05:ba:47:28:82:84:
         13:66:57:e4:d2:a7:2d:e9:46:5f:f2:fe:14:76:8e:bb:e3:a5:
         43:57:6e:30:00:9d:59:52:8e:ce:3b:90:f2:5c:0f:51:fc:57:
         e1:68:60:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 14:28:55 2026 by rpki-client