Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
File:                     rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft (raw, json)
Hash identifier:          PaTFJz81b8eKjo0FXYnHU+/XFy2U/O3LHYWvC03SJ2I=
Subject key identifier:   33:51:AB:7C:59:7A:34:A5:86:FE:87:CE:92:4C:79:39:AE:F1:A8:F3
Authority key identifier: AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC
Certificate issuer:       /CN=adce3c2aafc7783cce8234551f3e9661d27eefbc
Certificate serial:       019E29CC036CD564540C7CAAFF58106BE737
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
Manifest number:          130A
Signing time:             Fri 15 May 2026 04:01:36 +0000
Manifest this update:     Fri 15 May 2026 04:01:36 +0000
Manifest next update:     Sat 16 May 2026 04:01:36 +0000
Files and hashes:         1: CEaoQwoKe32gXLS8xrDkZN95-LU.roa (hash: 3B+1jOz57ND8z/Cc76ODdU/PdomfAHvLxw8vMmK0i5M=)
                          2: D-eIJMBlUgsV2EKXzikcwUfJ8a4.roa (hash: uzfe0JHrQ3H4xrAH5ZMRf3GDL4lVYto1KjiBlRbDnQQ=)
                          3: rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl (hash: STg/74zk3AviGgh3/j5TjvOUn9YM3Q36BAUt/qXMKiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:cc:03:6c:d5:64:54:0c:7c:aa:ff:58:10:6b:e7:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adce3c2aafc7783cce8234551f3e9661d27eefbc
        Validity
            Not Before: May 15 04:01:36 2026 GMT
            Not After : May 16 04:01:36 2026 GMT
        Subject: CN=3351ab7c597a34a586fe87ce924c7939aef1a8f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:87:24:e8:2e:40:0d:52:46:50:91:c8:6f:1b:
                    49:4f:17:c0:60:37:c7:5e:d2:43:05:ca:1b:60:89:
                    f6:50:8b:41:52:36:1d:ac:f8:1b:10:11:aa:3b:b8:
                    58:93:dd:a5:e8:4c:84:4d:e5:ba:01:f5:98:8b:39:
                    d1:cd:56:b1:cb:f3:49:14:b1:fe:63:bc:de:0a:ee:
                    1b:83:67:31:d6:c7:fa:ea:6e:43:be:b3:88:b8:f5:
                    b9:e2:57:d0:ad:aa:84:5d:46:ca:c5:bb:10:d8:28:
                    54:75:82:56:51:b5:d5:83:2c:08:36:99:78:89:e3:
                    5c:cd:f0:af:d1:eb:ed:75:cd:52:07:87:35:87:07:
                    89:f9:7f:32:be:20:36:83:54:ab:4e:db:19:3b:b7:
                    ed:18:e4:81:93:9f:9b:0a:c6:c6:86:27:09:d6:0f:
                    08:5d:61:62:70:a0:c4:f1:e4:59:0d:5f:6c:95:62:
                    25:e8:3a:fb:58:ec:59:c2:29:4d:0e:a7:d1:9e:f4:
                    e3:9e:c7:f8:f4:dd:4b:84:03:42:a5:c1:2b:41:19:
                    39:bb:45:88:8d:11:75:47:41:2b:df:ee:1b:2a:e9:
                    d4:e8:6f:58:55:dc:be:58:62:57:f0:9f:b7:78:29:
                    65:83:60:a7:37:a1:e5:44:e9:7f:44:93:4a:10:26:
                    7c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:51:AB:7C:59:7A:34:A5:86:FE:87:CE:92:4C:79:39:AE:F1:A8:F3
            X509v3 Authority Key Identifier:
                keyid:AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:fe:51:57:90:b2:e0:93:d5:15:ad:eb:3b:10:94:5d:47:32:
         34:40:4d:27:d6:59:65:3f:22:ef:8e:42:e4:66:a3:41:8e:74:
         56:8d:9d:14:3b:68:9c:9a:d4:f1:1f:99:89:1d:e5:85:bb:83:
         7e:f3:d0:b6:0d:6c:90:4d:44:fd:82:e7:15:ba:47:5f:d4:36:
         f8:b6:8b:91:e0:ef:bd:8d:2e:a4:fc:f9:75:56:e0:c2:8b:9b:
         bb:c3:e7:53:7f:28:38:c5:c7:07:19:8e:2c:6c:9e:86:13:9d:
         35:70:1e:1e:f8:a4:b5:1c:1b:74:c2:4b:ff:d6:e3:83:d8:36:
         fb:a1:0e:be:58:3a:09:79:95:e9:54:a3:78:75:09:60:27:65:
         5a:20:ba:cd:21:bc:7c:0a:ab:8f:40:4c:c4:00:fc:71:42:35:
         44:43:9a:dc:63:60:26:ac:2f:8a:11:0f:4e:60:76:33:46:e5:
         fa:9b:78:bf:f6:a5:64:c5:cd:76:38:e0:87:0e:a9:bc:3f:db:
         0e:9b:cc:dc:fb:17:4d:2d:70:d7:5b:cf:d5:8a:7f:78:e2:98:
         ab:8e:c5:2f:95:17:22:36:c5:86:66:d5:8a:d4:d4:45:b4:37:
         e1:4b:ce:19:57:bf:32:aa:39:3d:fd:86:57:88:54:62:b0:0a:
         eb:33:64:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4pzANs1WRUDHyq/1gQa+c3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkY2UzYzJhYWZjNzc4M2NjZTgyMzQ1NTFmM2U5NjYxZDI3
ZWVmYmMwHhcNMjYwNTE1MDQwMTM2WhcNMjYwNTE2MDQwMTM2WjAzMTEwLwYDVQQD
EygzMzUxYWI3YzU5N2EzNGE1ODZmZTg3Y2U5MjRjNzkzOWFlZjFhOGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApock6C5ADVJGUJHIbxtJTxfAYDfH
XtJDBcobYIn2UItBUjYdrPgbEBGqO7hYk92l6EyETeW6AfWYiznRzVaxy/NJFLH+
Y7zeCu4bg2cx1sf66m5DvrOIuPW54lfQraqEXUbKxbsQ2ChUdYJWUbXVgywINpl4
ieNczfCv0evtdc1SB4c1hweJ+X8yviA2g1SrTtsZO7ftGOSBk5+bCsbGhicJ1g8I
XWFicKDE8eRZDV9slWIl6Dr7WOxZwilNDqfRnvTjnsf49N1LhANCpcErQRk5u0WI
jRF1R0Er3+4bKunU6G9YVdy+WGJX8J+3eCllg2CnN6HlROl/RJNKECZ8oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDNRq3xZejSlhv6HzpJMeTmu8ajzMB8GA1UdIwQY
MBaAFK3OPCqvx3g8zoI0VR8+lmHSfu+8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmM0OEtxX0hlRHpPZ2pSVkh6NldZZEotNzd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS84MjRjY2QtYmM5Yi00YTgyLWJlOTEt
NjMxMDRkYjZhN2E1LzEvcmM0OEtxX0hlRHpPZ2pSVkh6NldZZEotNzd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS84MjRjY2QtYmM5Yi00YTgyLWJlOTEtNjMxMDRkYjZhN2E1
LzEvcmM0OEtxX0hlRHpPZ2pSVkh6NldZZEotNzd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/5RV5Cy
4JPVFa3rOxCUXUcyNEBNJ9ZZZT8i745C5GajQY50Vo2dFDtonJrU8R+ZiR3lhbuD
fvPQtg1skE1E/YLnFbpHX9Q2+LaLkeDvvY0upPz5dVbgwoubu8PnU38oOMXHBxmO
LGyehhOdNXAeHviktRwbdMJL/9bjg9g2+6EOvlg6CXmV6VSjeHUJYCdlWiC6zSG8
fAqrj0BMxAD8cUI1REOa3GNgJqwvihEPTmB2M0bl+pt4v/alZMXNdjjghw6pvD/b
DpvM3PsXTS1w11vP1Yp/eOKYq47FL5UXIjbFhmbVitTURbQ34UvOGVe/Mqo5Pf2G
V4hUYrAK6zNkNA==
-----END CERTIFICATE-----
Generated at Fri May 15 07:03:00 2026 by rpki-client