Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.mft
File:                     aYROE3TxxFgb-_etRjihEtMW--Q.mft (raw, json)
Hash identifier:          PbYHJ9CkcBvbYkmK5/6uCRHQhw+PxmF7MFzjNwPAIvU=
Subject key identifier:   BF:79:2F:02:42:A0:69:E6:81:E1:26:63:64:FB:03:62:CC:93:B2:02
Authority key identifier: 69:84:4E:13:74:F1:C4:58:1B:FB:F7:AD:46:38:A1:12:D3:16:FB:E4
Certificate issuer:       /CN=69844e1374f1c4581bfbf7ad4638a112d316fbe4
Certificate serial:       019D9A0739C3715372B087798D9684BCA7BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aYROE3TxxFgb-_etRjihEtMW--Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.mft
Manifest number:          010E
Signing time:             Fri 17 Apr 2026 06:00:57 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:57 +0000
Manifest next update:     Sat 18 Apr 2026 06:00:57 +0000
Files and hashes:         1: _YyM5Fz0fRt9WBEEudyzbZgfybs.roa (hash: 4qY+Fv3RexE/YICr0m64zJ0sFOUpiGhvhqq4dKDZLy4=)
                          2: aYROE3TxxFgb-_etRjihEtMW--Q.crl (hash: YqcQaR7kFmjRrx2sezPIK/SCa1FEejPbMAwTfgDNoq0=)
                          3: rYhwjOOa4-7RvBsKuPyCuJ2kOac.roa (hash: EeI2oHDpvRTGlcgIn02601fBNayk3lM8V1SAStGUI1w=)
                          4: seE8MA1IAHQhkFxKO3DiabXwc2k.roa (hash: 3toCWdrJKeaWZ1jR0rxFlsqTNbw+YdEAy/zdrsfgu1c=)
                          5: zvV261hgmMdkR1G7Cy93JC-Zxsw.roa (hash: hneXIhVn6/jTbVYrQJSFmDE3v0R1YG1vWQx+UejdDSs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aYROE3TxxFgb-_etRjihEtMW--Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:07:39:c3:71:53:72:b0:87:79:8d:96:84:bc:a7:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69844e1374f1c4581bfbf7ad4638a112d316fbe4
        Validity
            Not Before: Apr 17 06:00:57 2026 GMT
            Not After : Apr 18 06:00:57 2026 GMT
        Subject: CN=bf792f0242a069e681e1266364fb0362cc93b202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cc:24:d1:db:45:d4:2e:28:00:74:d0:11:fb:
                    f8:17:8b:21:b4:1e:4d:99:c0:da:de:7f:4c:af:ae:
                    2b:82:64:1c:40:2b:fb:df:f1:a0:86:32:b7:ff:a6:
                    7a:35:ff:33:7f:b0:4c:19:de:87:58:51:f6:a8:5a:
                    28:e6:9b:77:f2:5f:2e:73:41:91:c9:be:29:dc:82:
                    32:a8:5a:06:2d:9b:cb:d2:8d:31:6e:f1:fa:f6:8c:
                    91:d7:f4:27:0d:bd:0a:28:28:e1:a3:68:43:ab:03:
                    db:de:7b:d4:c2:56:cf:e8:97:ce:6b:9a:16:c7:48:
                    41:bf:c9:2c:f4:6c:87:cf:f2:16:c8:ce:f5:48:87:
                    dd:e7:01:45:67:40:b3:3a:97:d0:d2:1b:d8:65:7c:
                    8e:cd:95:f0:81:37:13:64:ab:f9:7d:8f:1f:b6:0e:
                    5d:89:5e:d6:11:65:92:da:bd:e6:b4:30:90:1e:f9:
                    07:87:9e:db:3c:cb:53:48:b0:05:9d:57:d2:82:07:
                    5b:be:c6:c5:52:2e:60:62:d8:af:4f:d7:6c:41:2d:
                    73:5d:6f:e5:55:be:03:01:07:05:f2:89:89:29:33:
                    50:fb:8b:88:fc:f5:cb:a2:4f:47:0c:9d:4e:39:42:
                    35:de:2a:a2:0d:15:49:4b:59:34:9b:f9:a6:87:36:
                    93:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:79:2F:02:42:A0:69:E6:81:E1:26:63:64:FB:03:62:CC:93:B2:02
            X509v3 Authority Key Identifier:
                keyid:69:84:4E:13:74:F1:C4:58:1B:FB:F7:AD:46:38:A1:12:D3:16:FB:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYROE3TxxFgb-_etRjihEtMW--Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:d2:39:d8:44:25:11:38:33:a7:02:ba:02:21:6f:44:e6:c8:
         55:45:b9:99:22:75:90:2e:2e:d8:49:2a:0c:88:50:0b:41:e5:
         bb:0c:c5:96:a9:1b:57:c5:66:9c:42:15:18:27:83:35:a7:4e:
         f0:98:d0:b7:b0:36:15:5e:f1:8a:c5:10:07:08:b7:de:e2:64:
         0d:75:fe:72:90:3a:a7:8e:eb:a0:58:24:9c:1a:e8:dc:97:07:
         47:54:b1:0b:f9:9b:22:bf:cd:a8:10:c4:70:22:64:7c:99:0a:
         d0:81:02:d3:4c:2d:f6:46:d4:e7:08:2c:5d:e7:81:60:52:ec:
         2c:41:2f:7e:f1:9e:c1:ab:59:d4:5d:a3:68:a3:bb:ce:9e:dc:
         66:86:a7:c8:4c:27:3b:11:20:65:1d:b9:d0:6c:70:5c:bb:50:
         38:98:24:84:19:d4:2a:66:b6:9e:e0:dc:3e:6b:83:5d:e3:ed:
         a9:88:0c:ef:72:6f:51:03:de:6b:c0:f7:90:8e:2c:68:67:ce:
         f5:c3:a9:e8:1a:f6:f3:0d:d2:1b:9f:10:1c:c1:09:1f:ff:43:
         7c:81:e2:18:c6:73:77:a5:c1:b8:22:06:cd:8b:cf:13:18:d8:
         50:0c:62:e4:28:b8:76:f0:b6:a4:a8:e2:1a:4c:87:2f:04:5d:
         7e:c0:87:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:08:31 2026 by rpki-client