Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
File:                     mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft (raw, json)
Hash identifier:          Cj1AFFQlxhFLrMHmUlHnQrfIIXgogmhrej8AWfUw9Og=
Subject key identifier:   F5:9E:F6:76:18:85:49:53:30:E5:CA:EB:F6:36:CC:81:61:B8:37:BD
Authority key identifier: 99:1B:54:22:CD:55:78:D4:71:5E:BE:4C:50:97:20:25:23:DD:56:58
Certificate issuer:       /CN=991b5422cd5578d4715ebe4c5097202523dd5658
Certificate serial:       019D9B19A04FE34B5218191B6B5A54E51D48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
Manifest number:          174B
Signing time:             Fri 17 Apr 2026 11:00:41 +0000
Manifest this update:     Fri 17 Apr 2026 11:00:41 +0000
Manifest next update:     Sat 18 Apr 2026 11:00:41 +0000
Files and hashes:         1: HMeFeWtw9N7rk3aYVC_VTWXgzMM.roa (hash: iTEJqDydJmTzPI0AxKyGiy/lzp+8Axti0R4ZxzfqlZo=)
                          2: mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl (hash: 8pSll/k+d7arhxC2W0UXCqmzQ5A2/r2/DYn9rCb2BTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:19:a0:4f:e3:4b:52:18:19:1b:6b:5a:54:e5:1d:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=991b5422cd5578d4715ebe4c5097202523dd5658
        Validity
            Not Before: Apr 17 11:00:41 2026 GMT
            Not After : Apr 18 11:00:41 2026 GMT
        Subject: CN=f59ef6761885495330e5caebf636cc8161b837bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d0:04:ac:fe:13:11:c5:17:c0:a9:4b:62:d6:
                    30:78:48:23:cf:01:a5:48:d4:62:fb:34:44:ce:36:
                    a7:41:b3:3d:e6:c9:f0:b2:ba:4b:ab:a6:38:06:4b:
                    a1:23:92:b2:aa:aa:92:a6:ea:8a:fa:8e:02:7f:5f:
                    91:b8:aa:f7:2b:2d:9a:ff:e1:78:ef:81:7d:bd:3f:
                    73:65:a3:f7:e0:b7:f3:27:b6:4a:97:55:69:37:8f:
                    58:75:fb:77:42:e8:cb:3d:b7:68:0a:be:9e:18:f3:
                    6f:a4:fb:9e:59:24:b5:48:b1:ec:30:f8:58:3e:df:
                    30:47:1c:71:6e:0b:e5:87:80:6c:80:c8:37:d0:23:
                    0d:2b:0d:60:b8:df:7c:e4:40:20:20:13:55:c0:45:
                    9b:4e:cc:10:3a:13:89:fe:c6:fa:9c:ed:ea:6d:cf:
                    b0:0c:ce:7e:23:fc:74:35:3c:39:54:5c:c6:ba:39:
                    1b:d2:e8:c5:c1:aa:3c:77:24:a1:3e:25:5b:ae:cb:
                    6c:e0:0d:ff:5f:15:fc:52:3c:af:48:3c:21:59:91:
                    78:04:a8:3d:81:ba:1b:e8:52:68:1b:65:4d:b4:0e:
                    77:b6:71:5c:15:4f:ce:ef:26:97:6e:b8:99:ae:0e:
                    a2:a6:20:9b:88:f4:2f:df:82:88:36:c9:a1:26:07:
                    9a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:9E:F6:76:18:85:49:53:30:E5:CA:EB:F6:36:CC:81:61:B8:37:BD
            X509v3 Authority Key Identifier:
                keyid:99:1B:54:22:CD:55:78:D4:71:5E:BE:4C:50:97:20:25:23:DD:56:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:00:ba:11:b0:0b:c3:e4:42:7c:f5:c4:4f:d3:d6:b3:d1:ec:
         91:af:f7:2f:4b:a9:6c:80:44:1e:80:77:e3:3a:27:4e:93:3c:
         ce:ce:52:64:d6:e7:0a:73:10:e9:4a:12:a6:a1:d2:69:01:1a:
         0e:d7:05:f8:91:39:99:55:ca:20:f9:30:7f:f9:3c:3a:62:82:
         a8:fc:17:54:ed:f6:12:f3:57:7b:4a:0a:1b:e6:94:eb:8a:36:
         d7:df:a4:62:51:02:6c:f0:36:55:20:47:48:cc:e3:57:fa:bc:
         6d:79:47:e9:53:80:c3:fb:ab:ea:c0:4e:f5:80:79:3c:7f:fd:
         72:ea:dc:30:19:25:81:11:b2:76:15:ae:aa:83:92:55:fd:fa:
         13:e0:bd:f0:c2:03:76:a3:16:ca:46:01:34:4f:d3:85:ec:a1:
         46:cc:5a:6c:95:bd:0e:e0:08:96:a5:8b:22:ce:e5:83:eb:f8:
         aa:cf:79:d7:e1:eb:10:7e:7b:f9:27:fc:1b:d2:63:75:fa:cc:
         86:77:23:aa:9c:f7:1c:13:ae:b5:a7:35:af:bf:95:5c:09:6b:
         d6:f9:2f:cb:48:d7:a5:8b:21:40:91:63:27:81:a7:ab:76:9c:
         bc:b6:7e:28:67:6b:54:b6:f2:4f:f0:c7:d6:4e:2e:ac:a3:c5:
         8b:70:fe:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bGaBP40tSGBkba1pU5R1IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MWI1NDIyY2Q1NTc4ZDQ3MTVlYmU0YzUwOTcyMDI1MjNk
ZDU2NTgwHhcNMjYwNDE3MTEwMDQxWhcNMjYwNDE4MTEwMDQxWjAzMTEwLwYDVQQD
EyhmNTllZjY3NjE4ODU0OTUzMzBlNWNhZWJmNjM2Y2M4MTYxYjgzN2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNAErP4TEcUXwKlLYtYweEgjzwGl
SNRi+zREzjanQbM95snwsrpLq6Y4BkuhI5KyqqqSpuqK+o4Cf1+RuKr3Ky2a/+F4
74F9vT9zZaP34LfzJ7ZKl1VpN49Ydft3QujLPbdoCr6eGPNvpPueWSS1SLHsMPhY
Pt8wRxxxbgvlh4BsgMg30CMNKw1guN985EAgIBNVwEWbTswQOhOJ/sb6nO3qbc+w
DM5+I/x0NTw5VFzGujkb0ujFwao8dyShPiVbrsts4A3/XxX8UjyvSDwhWZF4BKg9
gbob6FJoG2VNtA53tnFcFU/O7yaXbriZrg6ipiCbiPQv34KINsmhJgeaSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWe9nYYhUlTMOXK6/Y2zIFhuDe9MB8GA1UdIwQY
MBaAFJkbVCLNVXjUcV6+TFCXICUj3VZYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVJ0VUlzMVZlTlJ4WHI1TVVKY2dKU1BkVmxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy81ODExYzAtNmRhZS00ZGQ0LTk4N2Mt
ZDQ2ZmZjNTAxZjM2LzEvbVJ0VUlzMVZlTlJ4WHI1TVVKY2dKU1BkVmxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy81ODExYzAtNmRhZS00ZGQ0LTk4N2MtZDQ2ZmZjNTAxZjM2
LzEvbVJ0VUlzMVZlTlJ4WHI1TVVKY2dKU1BkVmxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALwC6EbAL
w+RCfPXET9PWs9Hska/3L0upbIBEHoB34zonTpM8zs5SZNbnCnMQ6UoSpqHSaQEa
DtcF+JE5mVXKIPkwf/k8OmKCqPwXVO32EvNXe0oKG+aU64o219+kYlECbPA2VSBH
SMzjV/q8bXlH6VOAw/ur6sBO9YB5PH/9curcMBklgRGydhWuqoOSVf36E+C98MID
dqMWykYBNE/TheyhRsxabJW9DuAIlqWLIs7lg+v4qs951+HrEH57+Sf8G9JjdfrM
hncjqpz3HBOutac1r7+VXAlr1vkvy0jXpYshQJFjJ4Gnq3acvLZ+KGdrVLbyT/DH
1k4urKPFi3D+cA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:01:52 2026 by rpki-client