Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.mft
File:                     MTie9MqM5oHWuD4L5MiGo6dFYCg.mft (raw, json)
Hash identifier:          x+JZSFQuhW2Ahq5aGQqwwdS3CzAXyFD/h+0kH5Qqmm8=
Subject key identifier:   DC:68:00:3A:AC:19:72:E0:8B:D6:63:27:A9:E8:27:F9:D6:89:19:34
Authority key identifier: 31:38:9E:F4:CA:8C:E6:81:D6:B8:3E:0B:E4:C8:86:A3:A7:45:60:28
Certificate issuer:       /CN=31389ef4ca8ce681d6b83e0be4c886a3a7456028
Certificate serial:       019DA59D3FFEB788BE68F32A817D45A2B073
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MTie9MqM5oHWuD4L5MiGo6dFYCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.mft
Manifest number:          022F
Signing time:             Sun 19 Apr 2026 12:00:39 +0000
Manifest this update:     Sun 19 Apr 2026 12:00:39 +0000
Manifest next update:     Mon 20 Apr 2026 12:00:39 +0000
Files and hashes:         1: MTie9MqM5oHWuD4L5MiGo6dFYCg.crl (hash: 6dYiynN8v7nz+qllScNwskIoXd/P/ksOQMw0g9UAuWs=)
                          2: dAvQklqaFgS7nuGcHDCAEFSzz7s.roa (hash: B5/JGeN0RNoqJRO7nGvJRd8pXhY+SDcSmh+pqHEkxm0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MTie9MqM5oHWuD4L5MiGo6dFYCg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a5:9d:3f:fe:b7:88:be:68:f3:2a:81:7d:45:a2:b0:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31389ef4ca8ce681d6b83e0be4c886a3a7456028
        Validity
            Not Before: Apr 19 12:00:39 2026 GMT
            Not After : Apr 20 12:00:39 2026 GMT
        Subject: CN=dc68003aac1972e08bd66327a9e827f9d6891934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7a:aa:de:99:8c:66:16:fc:93:0a:01:6c:e6:
                    38:26:e4:2e:07:7e:98:dc:80:00:28:d7:06:e1:4c:
                    07:4c:63:bf:6e:85:b2:a6:90:bf:6e:29:6e:9e:ee:
                    49:e5:74:3f:88:32:0c:28:2c:72:7b:ed:a7:35:82:
                    4b:cb:f0:f2:a5:e8:d5:c4:86:c1:8c:ae:6a:45:e4:
                    c8:93:cf:e9:d7:15:45:48:53:fc:ab:64:42:de:73:
                    ef:aa:d3:83:ed:b2:26:99:ba:ac:02:9a:71:a4:8a:
                    71:c8:ea:8f:2e:71:48:45:ef:a3:59:67:3d:3f:cc:
                    e9:af:e2:85:4e:4f:ed:e9:59:7a:2b:6a:2b:c8:ac:
                    01:e4:98:a6:83:46:ab:e0:24:bb:0c:e1:51:a2:f4:
                    ca:75:65:72:43:bf:1e:c2:a4:2a:e9:3e:64:41:0a:
                    0f:ed:5c:08:7e:ba:00:1f:54:2e:d5:62:e5:92:7c:
                    9b:d4:16:e2:dc:5c:cb:4f:e9:49:eb:ff:24:7d:93:
                    f4:cb:a4:e3:dd:ae:a5:97:75:16:f6:2e:1f:25:8d:
                    1c:e8:26:1c:a9:c0:5a:1e:ae:87:44:9f:45:cd:36:
                    3d:98:51:3b:7d:04:17:b9:3d:31:1c:77:45:64:be:
                    39:aa:3d:78:9d:8f:55:c5:5e:18:8b:93:c5:9d:82:
                    8b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:68:00:3A:AC:19:72:E0:8B:D6:63:27:A9:E8:27:F9:D6:89:19:34
            X509v3 Authority Key Identifier:
                keyid:31:38:9E:F4:CA:8C:E6:81:D6:B8:3E:0B:E4:C8:86:A3:A7:45:60:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTie9MqM5oHWuD4L5MiGo6dFYCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:4b:a8:5c:8c:80:f6:82:18:6b:a9:6c:63:70:5e:69:72:e5:
         12:09:5c:41:de:68:bc:9a:eb:a1:4f:8c:b8:08:ba:23:42:70:
         13:8e:39:f4:63:c1:6c:74:a2:4f:74:5e:51:25:d6:9e:23:f0:
         ac:58:58:77:1b:df:a9:42:b9:f7:08:af:89:8c:13:41:92:d1:
         59:69:23:d5:4e:66:8b:99:10:ee:f7:85:50:97:63:3f:08:27:
         ef:a8:b2:e2:15:8a:74:13:16:40:7f:cb:a1:0b:8f:b2:a6:bd:
         58:97:f9:c6:ae:88:39:88:ac:13:02:38:17:ca:21:af:f7:1d:
         56:7d:8c:9b:4f:e6:17:61:50:68:0c:d7:e1:f1:a2:f1:9c:8f:
         33:d6:c4:67:97:d5:ca:19:86:4f:9a:30:34:cb:c3:f1:ad:cf:
         d7:10:c9:a8:a4:7a:a8:af:c5:a0:f1:01:e8:76:69:70:54:3e:
         ff:29:6f:83:a1:63:ee:6a:e7:5c:39:20:67:6b:2d:7a:11:e0:
         53:a6:71:4b:06:61:02:40:c8:8b:57:39:d8:d7:6e:bb:a0:2b:
         78:4d:68:6e:0f:dc:5e:9a:25:bf:b8:db:87:a2:71:15:c0:d1:
         b8:6a:aa:ae:78:78:66:d0:dc:55:0b:71:b4:0a:10:4d:70:91:
         3a:ce:03:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2lnT/+t4i+aPMqgX1ForBzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMzg5ZWY0Y2E4Y2U2ODFkNmI4M2UwYmU0Yzg4NmEzYTc0
NTYwMjgwHhcNMjYwNDE5MTIwMDM5WhcNMjYwNDIwMTIwMDM5WjAzMTEwLwYDVQQD
EyhkYzY4MDAzYWFjMTk3MmUwOGJkNjYzMjdhOWU4MjdmOWQ2ODkxOTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHqq3pmMZhb8kwoBbOY4JuQuB36Y
3IAAKNcG4UwHTGO/boWyppC/bilunu5J5XQ/iDIMKCxye+2nNYJLy/DypejVxIbB
jK5qReTIk8/p1xVFSFP8q2RC3nPvqtOD7bImmbqsAppxpIpxyOqPLnFIRe+jWWc9
P8zpr+KFTk/t6Vl6K2oryKwB5Jimg0ar4CS7DOFRovTKdWVyQ78ewqQq6T5kQQoP
7VwIfroAH1Qu1WLlknyb1Bbi3FzLT+lJ6/8kfZP0y6Tj3a6ll3UW9i4fJY0c6CYc
qcBaHq6HRJ9FzTY9mFE7fQQXuT0xHHdFZL45qj14nY9VxV4Yi5PFnYKLtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxoADqsGXLgi9ZjJ6noJ/nWiRk0MB8GA1UdIwQY
MBaAFDE4nvTKjOaB1rg+C+TIhqOnRWAoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVRpZTlNcU01b0hXdUQ0TDVNaUdvNmRGWUNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8yOWEzZDgtZmI0Ni00MGM1LThmMzYt
MzcxYjE2ZTUxNzkwLzEvTVRpZTlNcU01b0hXdUQ0TDVNaUdvNmRGWUNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8yOWEzZDgtZmI0Ni00MGM1LThmMzYtMzcxYjE2ZTUxNzkw
LzEvTVRpZTlNcU01b0hXdUQ0TDVNaUdvNmRGWUNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuEuoXIyA
9oIYa6lsY3BeaXLlEglcQd5ovJrroU+MuAi6I0JwE4459GPBbHSiT3ReUSXWniPw
rFhYdxvfqUK59wiviYwTQZLRWWkj1U5mi5kQ7veFUJdjPwgn76iy4hWKdBMWQH/L
oQuPsqa9WJf5xq6IOYisEwI4F8ohr/cdVn2Mm0/mF2FQaAzX4fGi8ZyPM9bEZ5fV
yhmGT5owNMvD8a3P1xDJqKR6qK/FoPEB6HZpcFQ+/ylvg6Fj7mrnXDkgZ2stehHg
U6ZxSwZhAkDIi1c52Nduu6AreE1obg/cXpolv7jbh6JxFcDRuGqqrnh4ZtDcVQtx
tAoQTXCROs4D7w==
-----END CERTIFICATE-----
Generated at Sun Apr 19 14:51:59 2026 by rpki-client