Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
File:                     ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft (raw, json)
Hash identifier:          j55nejAMmAdTvKWGvlOu5O8TJPDC3dt+Ixy67vf/iA8=
Subject key identifier:   E6:98:68:05:80:65:B6:1B:9D:1D:99:C9:10:03:EA:69:AA:65:60:6C
Authority key identifier: 92:C4:24:84:D7:5A:D7:A4:27:DC:F6:1B:5A:C9:AC:56:54:3E:9F:33
Certificate issuer:       /CN=92c42484d75ad7a427dcf61b5ac9ac56543e9f33
Certificate serial:       019D992B46B56B29618ADCACDF251584DF46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
Manifest number:          0558
Signing time:             Fri 17 Apr 2026 02:00:43 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:43 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:43 +0000
Files and hashes:         1: 6XhRNflwuCiYF9gQ2g_easWtUa4.roa (hash: yHoCFnKYnwnTFsYyGnaFZYpzrID8T0Yi654/H4Ihcpg=)
                          2: ksQkhNda16Qn3PYbWsmsVlQ-nzM.crl (hash: /k+pt/ZhT34x8GJd3Da0+WWc20Wae8xsbVO2ZhPrJgI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:46:b5:6b:29:61:8a:dc:ac:df:25:15:84:df:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92c42484d75ad7a427dcf61b5ac9ac56543e9f33
        Validity
            Not Before: Apr 17 02:00:43 2026 GMT
            Not After : Apr 18 02:00:43 2026 GMT
        Subject: CN=e69868058065b61b9d1d99c91003ea69aa65606c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bd:11:d6:fb:c7:d5:76:25:16:ce:93:f7:93:
                    aa:60:7e:8b:d7:95:2a:8e:48:ca:6e:4b:c8:60:a9:
                    bb:40:89:80:a7:d9:e5:a6:ee:82:c6:62:b8:38:63:
                    74:00:07:7c:57:b2:6f:bb:f1:1d:68:86:2f:db:0d:
                    d9:2e:36:2b:f5:d4:97:9d:64:15:e2:49:a0:e5:2d:
                    e5:77:e2:f2:b4:7c:05:41:bf:c9:59:6e:8c:e3:3e:
                    29:a3:0d:bc:57:93:c6:f0:7b:dd:8d:1d:08:9f:dd:
                    4f:35:73:02:51:26:9a:be:53:46:43:87:a2:86:0d:
                    01:50:91:fa:67:b4:2b:d9:dd:9f:d4:c8:fb:9e:f2:
                    c0:e2:64:85:50:4e:8d:85:8a:d1:5f:be:68:4d:61:
                    41:1b:3f:56:17:aa:67:67:03:51:9b:99:b5:6d:5c:
                    3c:8c:c2:e4:28:be:e8:b9:1e:22:b4:cd:ea:cf:b9:
                    66:5d:1b:5c:94:44:38:af:cf:ac:29:da:18:c6:77:
                    ff:f4:3b:54:16:d3:c6:82:d9:29:30:2b:40:81:08:
                    6d:91:08:a5:b1:a4:f0:77:64:c3:3d:db:40:ce:d1:
                    a9:90:34:c2:93:00:02:a8:ab:0c:70:40:52:86:cd:
                    19:cc:e2:1e:2c:74:f0:7a:dc:8c:df:92:72:0e:20:
                    72:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:98:68:05:80:65:B6:1B:9D:1D:99:C9:10:03:EA:69:AA:65:60:6C
            X509v3 Authority Key Identifier:
                keyid:92:C4:24:84:D7:5A:D7:A4:27:DC:F6:1B:5A:C9:AC:56:54:3E:9F:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:68:26:6e:13:8b:aa:98:02:de:27:d0:4a:04:5c:98:f5:bc:
         c0:3f:e4:05:5a:fd:69:4f:80:9f:33:48:ee:ea:11:8b:37:2c:
         1d:d5:08:b1:fe:03:40:75:6d:51:73:e8:48:bb:ae:8f:7f:71:
         9d:65:c5:05:c8:21:1e:e1:95:31:25:be:a5:bf:cb:bb:57:48:
         40:6b:5c:4f:19:b6:ac:18:6c:33:97:4c:07:1e:b5:c8:60:6b:
         bd:d9:62:10:f1:67:81:f8:e8:77:f5:60:d5:54:e5:5c:26:a7:
         79:23:f1:ef:30:ab:50:02:f9:66:17:05:32:5f:4d:f6:54:75:
         cc:66:92:fe:b9:97:3f:1b:15:f5:3b:d9:2e:65:7a:fe:eb:9a:
         f8:e2:d1:ec:cc:ef:b0:94:26:9e:90:20:2a:22:e9:30:32:e7:
         39:6d:07:ad:45:eb:3f:3d:59:e9:46:c0:0c:a5:33:23:a8:d4:
         a0:4e:da:2d:c2:9c:93:8e:c7:b2:4b:f9:04:44:62:41:c1:cf:
         6d:c2:b8:c6:44:b1:18:9a:a4:81:d1:4b:14:3a:36:fb:4c:60:
         b7:2f:64:f1:b1:8d:29:a1:3c:43:03:48:20:ed:ce:71:8e:35:
         02:5f:fd:58:cc:ec:cd:ec:ca:60:2f:88:50:87:96:06:54:b4:
         ad:9c:ef:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZK0a1aylhitys3yUVhN9GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYzQyNDg0ZDc1YWQ3YTQyN2RjZjYxYjVhYzlhYzU2NTQz
ZTlmMzMwHhcNMjYwNDE3MDIwMDQzWhcNMjYwNDE4MDIwMDQzWjAzMTEwLwYDVQQD
EyhlNjk4NjgwNTgwNjViNjFiOWQxZDk5YzkxMDAzZWE2OWFhNjU2MDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyr0R1vvH1XYlFs6T95OqYH6L15Uq
jkjKbkvIYKm7QImAp9nlpu6CxmK4OGN0AAd8V7Jvu/EdaIYv2w3ZLjYr9dSXnWQV
4kmg5S3ld+LytHwFQb/JWW6M4z4pow28V5PG8HvdjR0In91PNXMCUSaavlNGQ4ei
hg0BUJH6Z7Qr2d2f1Mj7nvLA4mSFUE6NhYrRX75oTWFBGz9WF6pnZwNRm5m1bVw8
jMLkKL7ouR4itM3qz7lmXRtclEQ4r8+sKdoYxnf/9DtUFtPGgtkpMCtAgQhtkQil
saTwd2TDPdtAztGpkDTCkwACqKsMcEBShs0ZzOIeLHTwetyM35JyDiByowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOaYaAWAZbYbnR2ZyRAD6mmqZWBsMB8GA1UdIwQY
MBaAFJLEJITXWtekJ9z2G1rJrFZUPp8zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3NRa2hOZGExNlFuM1BZYldzbXNWbFEtbnpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iOTJkMGQtMzZmMS00NmY2LWE2NjEt
MjkyZmVhZDEyZDU5LzEva3NRa2hOZGExNlFuM1BZYldzbXNWbFEtbnpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9iOTJkMGQtMzZmMS00NmY2LWE2NjEtMjkyZmVhZDEyZDU5
LzEva3NRa2hOZGExNlFuM1BZYldzbXNWbFEtbnpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYmgmbhOL
qpgC3ifQSgRcmPW8wD/kBVr9aU+AnzNI7uoRizcsHdUIsf4DQHVtUXPoSLuuj39x
nWXFBcghHuGVMSW+pb/Lu1dIQGtcTxm2rBhsM5dMBx61yGBrvdliEPFngfjod/Vg
1VTlXCaneSPx7zCrUAL5ZhcFMl9N9lR1zGaS/rmXPxsV9TvZLmV6/uua+OLR7Mzv
sJQmnpAgKiLpMDLnOW0HrUXrPz1Z6UbADKUzI6jUoE7aLcKck47Hskv5BERiQcHP
bcK4xkSxGJqkgdFLFDo2+0xgty9k8bGNKaE8QwNIIO3OcY41Al/9WMzszezKYC+I
UIeWBlS0rZzvkg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:23 2026 by rpki-client