Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
File:                     mryiPS4rrR-1eI3bX1pvx6tiyiA.mft (raw, json)
Hash identifier:          VXz4hXQhL/oB0PHpsu5RhAxG4jdwRQ1peEmKmRukToI=
Subject key identifier:   D6:A6:B2:BD:79:BF:F6:79:2F:67:60:0C:C2:E4:96:08:EC:B8:1E:5A
Authority key identifier: 9A:BC:A2:3D:2E:2B:AD:1F:B5:78:8D:DB:5F:5A:6F:C7:AB:62:CA:20
Certificate issuer:       /CN=9abca23d2e2bad1fb5788ddb5f5a6fc7ab62ca20
Certificate serial:       019DA378ED755428B0748D3CBC2DFEBC5463
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
Manifest number:          0297
Signing time:             Sun 19 Apr 2026 02:01:44 +0000
Manifest this update:     Sun 19 Apr 2026 02:01:44 +0000
Manifest next update:     Mon 20 Apr 2026 02:01:44 +0000
Files and hashes:         1: cAKVqYBd9IcAL6r2ZvxM_Qj1ndI.roa (hash: XqFaKsdiSRNsnwScS0QPlL53huZcp/xfhEBOIjWXbkk=)
                          2: mryiPS4rrR-1eI3bX1pvx6tiyiA.crl (hash: YgrFPkW0x9xL+KI6lULxh77TZBRhFCcQSdjSp40ocUE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:78:ed:75:54:28:b0:74:8d:3c:bc:2d:fe:bc:54:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9abca23d2e2bad1fb5788ddb5f5a6fc7ab62ca20
        Validity
            Not Before: Apr 19 02:01:44 2026 GMT
            Not After : Apr 20 02:01:44 2026 GMT
        Subject: CN=d6a6b2bd79bff6792f67600cc2e49608ecb81e5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5c:fb:3c:f3:31:11:4a:b2:56:1e:c3:46:26:
                    9f:05:3d:75:95:4a:24:db:46:21:ea:f0:44:ac:c5:
                    42:59:bf:fa:29:43:38:27:94:8d:c6:9c:e3:2b:fd:
                    6e:c9:b8:98:40:29:51:7b:24:b6:f0:42:7c:d7:23:
                    76:1b:93:51:ca:85:40:d9:19:40:e1:84:7a:5c:e7:
                    48:4c:1e:6f:d1:08:1b:cc:66:be:88:14:cf:e1:14:
                    fa:74:79:33:1c:a2:90:dd:7b:fb:b0:ba:b2:d9:3c:
                    7c:5e:d6:03:d7:c2:72:07:f9:2f:2e:1b:7b:d1:8e:
                    d4:21:7c:b7:79:6c:f8:d7:97:f2:17:86:1d:ff:57:
                    e5:5a:60:cd:91:d1:5c:50:c7:08:cf:8d:65:52:ac:
                    d0:b0:fe:a2:30:67:4a:5d:a7:40:e7:8e:4d:89:83:
                    64:cf:a8:5a:73:0f:93:8f:e2:87:ff:72:0e:39:0d:
                    ec:8a:6b:d2:95:df:9e:de:9f:45:80:6b:53:58:07:
                    3c:09:20:33:b3:fa:2b:14:bd:e8:9b:ba:e8:5a:22:
                    9d:af:3d:13:5c:4d:ae:6c:cf:4b:98:e9:1c:77:25:
                    b7:88:bb:ef:42:37:06:1b:95:e7:79:65:dd:ad:b5:
                    55:fd:87:48:74:b1:31:9c:78:f6:e3:70:c1:53:9a:
                    a2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A6:B2:BD:79:BF:F6:79:2F:67:60:0C:C2:E4:96:08:EC:B8:1E:5A
            X509v3 Authority Key Identifier:
                keyid:9A:BC:A2:3D:2E:2B:AD:1F:B5:78:8D:DB:5F:5A:6F:C7:AB:62:CA:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:c8:87:9f:0c:d2:83:43:ff:fc:4d:25:7a:c7:87:2c:39:14:
         79:d2:95:1e:3c:25:df:bb:4e:89:63:3a:5b:cf:e3:a3:76:6c:
         c0:4f:ed:b4:2b:ed:4b:52:dd:8d:84:80:a5:c3:16:c7:ce:15:
         0f:96:df:53:e1:91:14:f1:0a:78:0b:2f:dd:78:9a:cc:8f:48:
         27:a4:27:cc:c1:3b:3b:fa:00:35:f3:b1:32:40:22:fe:fa:cf:
         32:80:2f:a9:95:07:a2:bc:c2:95:60:b5:58:bf:eb:6b:f3:b4:
         be:e6:ef:b2:7b:56:50:fe:32:bf:42:e6:c3:31:73:5c:31:63:
         0b:83:f7:74:bb:49:16:4e:25:6b:22:f9:9b:9b:d8:5c:72:67:
         38:79:49:a2:cb:42:27:16:76:6e:7f:36:e4:67:d8:e9:2f:1c:
         62:6b:d0:51:d4:dd:5f:c0:eb:60:00:d5:b7:fd:12:99:ea:95:
         c4:48:11:7e:e0:f8:6c:90:cb:9d:5a:7c:0e:db:43:fd:b8:1a:
         a7:f8:da:17:41:64:69:d3:b1:36:82:26:69:36:41:4c:ca:c8:
         c8:a8:03:8c:c5:2d:09:4d:f2:95:8d:e2:79:ca:bc:23:41:c5:
         2e:d8:93:4d:05:2f:e6:1c:20:a2:dc:96:0c:e3:ae:ff:cd:3e:
         92:e8:c5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:19:10 2026 by rpki-client