Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft
File:                     rUyDCxEmFIOmK2aWpMNyDorYig0.mft (raw, json)
Hash identifier:          9rfwAyoH9FMOlC0tbj3+VrlJfOY9tO82lCrIOJwOCJQ=
Subject key identifier:   75:96:B8:20:2F:DE:40:DC:BE:0F:5E:FB:A6:B7:28:11:01:82:EC:46
Authority key identifier: AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D
Certificate issuer:       /CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d
Certificate serial:       019DA3AEDC16F9E37443024322018D9C41F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft
Manifest number:          1791
Signing time:             Sun 19 Apr 2026 03:00:38 +0000
Manifest this update:     Sun 19 Apr 2026 03:00:38 +0000
Manifest next update:     Mon 20 Apr 2026 03:00:38 +0000
Files and hashes:         1: 5A_9S0_k2z9CIFI_8Yk78IZDaEI.roa (hash: nmz/iYmV6mKVOLZrYAox5VaizjrAFHQfQwQAyHHQgTM=)
                          2: Axc_E2xRyuIueu7MxwSrAbNKRdM.roa (hash: BDjOOm0VSjHKXhROcrzw3kdn2+1ifBZy1hpq2pHuv2A=)
                          3: PaurkzffyErdpNi4ejYNr7FnWdc.roa (hash: jPNQ7UykvWYwuvPZ1rpjnsZHusFbctpC3HqhplZrHe4=)
                          4: Uryh4fThyDLMPt3qMbkDETFPkjs.roa (hash: /xcRZ3cub7ymv3GtgsooN/HcmqZzVT8RJVzKbGyx/dQ=)
                          5: rUyDCxEmFIOmK2aWpMNyDorYig0.crl (hash: qdzopM9H0vhJ85SfMRG9yr/isXpLP0HPjb//2SX2nT8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:ae:dc:16:f9:e3:74:43:02:43:22:01:8d:9c:41:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d
        Validity
            Not Before: Apr 19 03:00:38 2026 GMT
            Not After : Apr 20 03:00:38 2026 GMT
        Subject: CN=7596b8202fde40dcbe0f5efba6b728110182ec46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:72:3e:2e:95:8f:67:a5:09:10:fb:23:5f:a3:
                    5c:34:57:4c:6e:80:d6:2b:58:ae:ea:42:03:0b:d3:
                    16:c7:08:b6:55:88:b3:10:07:0a:e3:7a:08:ba:64:
                    ad:73:f6:b6:e4:f2:99:66:7a:0b:63:9f:ef:80:f2:
                    bf:29:d5:4c:82:69:9f:d9:4a:0a:0c:c1:3e:29:f7:
                    d2:4c:b6:dd:4b:cf:70:94:fe:b0:d8:4a:02:f1:df:
                    5c:37:8d:ba:fb:a3:c0:67:09:73:f1:d1:dc:50:1b:
                    55:85:bf:45:54:29:4a:2d:f4:57:86:f7:79:8f:f2:
                    fb:72:fc:ff:5c:56:2a:6a:20:60:ac:e3:92:d6:ce:
                    00:60:3c:f4:b8:87:18:af:7c:89:3c:02:9a:23:38:
                    64:28:1f:5b:03:2a:93:c7:87:aa:ea:88:66:21:1f:
                    2b:e9:63:10:84:d2:3b:00:82:52:59:61:d0:b4:7c:
                    04:1e:18:07:c9:da:53:e8:3c:fa:c5:d0:c6:6e:49:
                    e1:4c:8a:b9:c3:75:9b:e2:f0:6c:77:43:03:e8:e4:
                    89:d7:1f:a7:4b:9c:ed:2a:2a:81:94:33:c9:86:ec:
                    e1:5b:19:99:58:29:60:85:a1:75:d6:26:d6:bd:59:
                    8a:31:4c:20:81:85:a5:2a:db:e8:71:98:51:a6:d6:
                    77:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:96:B8:20:2F:DE:40:DC:BE:0F:5E:FB:A6:B7:28:11:01:82:EC:46
            X509v3 Authority Key Identifier:
                keyid:AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:dd:4a:c8:d9:9b:16:5f:a3:c9:84:e0:18:36:40:30:39:06:
         92:66:17:06:dd:5b:2d:8f:72:7b:41:13:9b:87:b8:01:f0:dd:
         36:5a:00:a4:d2:77:77:6f:fa:e5:c9:70:80:97:11:06:ac:55:
         d3:7a:2f:f8:b1:0f:6d:93:3c:7d:93:96:63:da:24:91:59:04:
         2b:4e:ab:ad:46:6a:a4:ea:b9:5c:20:4e:a9:19:8a:69:56:15:
         bb:2e:b3:72:e5:4a:34:51:e3:ab:c5:5f:8f:db:4f:ec:6d:6d:
         22:27:ea:f5:5d:45:cc:a8:f6:04:7e:ef:6b:32:03:4b:62:62:
         13:bd:16:36:4a:88:cc:6b:18:cc:1d:11:26:80:75:02:5c:5f:
         29:80:df:3a:93:11:f2:a4:25:4f:53:68:70:a0:f2:40:e1:b7:
         29:88:80:2a:b9:6f:de:b9:89:96:09:bd:a1:f0:79:09:93:97:
         f5:4b:99:e2:0e:6f:1e:13:4e:c9:ce:4f:3d:53:de:2a:7a:1b:
         ee:7a:88:26:2f:73:a8:c8:ed:cc:00:2c:82:6a:a1:21:96:fc:
         66:f5:24:97:a0:df:4c:76:d0:ca:73:dd:b7:92:07:6e:56:22:
         7b:98:6d:48:24:e5:89:3b:9b:f2:03:93:dc:07:64:97:2b:a4:
         15:bc:37:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jrtwW+eN0QwJDIgGNnEHxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkNGM4MzBiMTEyNjE0ODNhNjJiNjY5NmE0YzM3MjBlOGFk
ODhhMGQwHhcNMjYwNDE5MDMwMDM4WhcNMjYwNDIwMDMwMDM4WjAzMTEwLwYDVQQD
Eyg3NTk2YjgyMDJmZGU0MGRjYmUwZjVlZmJhNmI3MjgxMTAxODJlYzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznI+LpWPZ6UJEPsjX6NcNFdMboDW
K1iu6kIDC9MWxwi2VYizEAcK43oIumStc/a25PKZZnoLY5/vgPK/KdVMgmmf2UoK
DME+KffSTLbdS89wlP6w2EoC8d9cN426+6PAZwlz8dHcUBtVhb9FVClKLfRXhvd5
j/L7cvz/XFYqaiBgrOOS1s4AYDz0uIcYr3yJPAKaIzhkKB9bAyqTx4eq6ohmIR8r
6WMQhNI7AIJSWWHQtHwEHhgHydpT6Dz6xdDGbknhTIq5w3Wb4vBsd0MD6OSJ1x+n
S5ztKiqBlDPJhuzhWxmZWClghaF11ibWvVmKMUwggYWlKtvocZhRptZ3XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHWWuCAv3kDcvg9e+6a3KBEBguxGMB8GA1UdIwQY
MBaAFK1MgwsRJhSDpitmlqTDcg6K2IoNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclV5REN4RW1GSU9tSzJhV3BNTnlEb3JZaWcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jNmE2YmEtYWUwNS00NTI0LTg0ZDEt
MjIyY2ViNmMzNDRjLzEvclV5REN4RW1GSU9tSzJhV3BNTnlEb3JZaWcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9jNmE2YmEtYWUwNS00NTI0LTg0ZDEtMjIyY2ViNmMzNDRj
LzEvclV5REN4RW1GSU9tSzJhV3BNTnlEb3JZaWcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfN1KyNmb
Fl+jyYTgGDZAMDkGkmYXBt1bLY9ye0ETm4e4AfDdNloApNJ3d2/65clwgJcRBqxV
03ov+LEPbZM8fZOWY9okkVkEK06rrUZqpOq5XCBOqRmKaVYVuy6zcuVKNFHjq8Vf
j9tP7G1tIifq9V1FzKj2BH7vazIDS2JiE70WNkqIzGsYzB0RJoB1AlxfKYDfOpMR
8qQlT1NocKDyQOG3KYiAKrlv3rmJlgm9ofB5CZOX9UuZ4g5vHhNOyc5PPVPeKnob
7nqIJi9zqMjtzAAsgmqhIZb8ZvUkl6DfTHbQynPdt5IHblYie5htSCTliTub8gOT
3AdklyukFbw3Ag==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:16:51 2026 by rpki-client