Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft
File:                     sLVtEMytnWnAGFa-CvqhfsaCrL8.mft (raw, json)
Hash identifier:          acrDLk+W2FDVbTVu0IP0mV3ESgeqphFH77TnH+rcnN4=
Subject key identifier:   88:A6:1E:85:C6:1F:4D:3E:6B:4A:10:02:17:4F:2E:9B:5D:4F:D7:3D
Authority key identifier: B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF
Certificate issuer:       /CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
Certificate serial:       019D99D0D2497552B7FA96CE59AF3D8DB799
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft
Manifest number:          066F
Signing time:             Fri 17 Apr 2026 05:01:32 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:32 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:32 +0000
Files and hashes:         1: FQXBjAd3Dnc1J9QyFOiM0wLQijQ.roa (hash: 64JwonKPGO05f6cKy1kGP317euMNwxh4v/Kd97Zrixk=)
                          2: Hbb2tJo76oQa-wtw39RcEwlrnXM.roa (hash: zQKmQxHagrt8snJj/oZAtBi6Ifdl6mTU9nAZ70t8Osc=)
                          3: VNBOO8P6mkX9aew0cn-Kdehk6rE.roa (hash: b079DtAWi+r0sT4AC8Tk8haPaIa/jl6bQiwLRkAOdcE=)
                          4: XmOJsEGeK1X1k4sjTD8axMQNgIo.roa (hash: 62rzs7DtWMOgiQjH9Y4WSH2h0Vk4tGyGCEaC6rrLo7A=)
                          5: evZm8lwJ83Ra2gzpHn4lhHkJDzg.roa (hash: 54FCOYYN42LEii2+4I3cfpiMUraNJ7gBfh9JPajAgpM=)
                          6: gvnOqyA9yS9fC_0IndVo0nLKxi0.roa (hash: YIdIEEO7s/IVaedtwWuT+dklb2cM9dk0cP8F29Lf9ao=)
                          7: hgzWYX75YIVr9-Fa-K5n1VgEzh4.roa (hash: Tyh/z0nHaYyQHgjz1bbuG9Z7KXkDQwBPffpAutwwQZI=)
                          8: iB1yqzobHZgkeYyjgD24fdDMrSI.roa (hash: zZkMxbemW0AGoPi/lyDYstjw3mF8p7nYB8fNtwbbBHY=)
                          9: sLVtEMytnWnAGFa-CvqhfsaCrL8.crl (hash: dRA4wOejtGLey6qT1pXHycceR+z8ds9W6xwH07iKcnI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:d2:49:75:52:b7:fa:96:ce:59:af:3d:8d:b7:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
        Validity
            Not Before: Apr 17 05:01:32 2026 GMT
            Not After : Apr 18 05:01:32 2026 GMT
        Subject: CN=88a61e85c61f4d3e6b4a1002174f2e9b5d4fd73d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:9a:91:75:84:4f:99:da:01:34:18:48:a6:b9:
                    ff:87:e6:8b:a3:ec:7a:35:af:99:3a:b3:70:58:6b:
                    02:3e:64:e6:d0:65:da:f0:62:36:6a:f9:2b:5b:59:
                    f5:b4:51:92:e7:cf:ef:08:7f:d5:77:b8:73:9f:cb:
                    3a:8e:c9:9a:df:54:34:db:af:61:cb:b7:53:80:96:
                    7a:7e:04:e5:6d:51:63:89:a7:7d:b8:64:34:03:36:
                    5b:0c:77:ff:21:79:5e:4b:75:35:97:e4:5c:d4:34:
                    c3:a7:26:d1:3b:40:1e:52:53:8d:b9:7c:c2:7d:86:
                    58:d7:e1:99:1b:21:15:9a:4d:b7:26:f6:0c:e1:d5:
                    47:69:f7:be:d4:36:93:2c:e1:b9:56:98:2d:04:ac:
                    fe:4e:8f:fa:88:7c:28:6a:1a:c5:ce:26:1d:d6:f8:
                    56:d6:70:11:ac:8a:e3:19:56:ed:02:a8:0b:99:f1:
                    99:91:c4:bf:82:9d:55:27:b8:ae:ea:52:72:66:ce:
                    c6:52:f9:bd:db:26:e0:1d:00:27:e3:be:ec:8e:6d:
                    d6:19:d8:62:c8:0c:46:d7:ac:68:e0:a4:87:c2:60:
                    77:38:78:e3:67:ad:b9:fe:87:2d:f7:7c:2f:f0:9f:
                    1f:3b:f6:bf:3d:44:36:ff:14:b3:6e:2b:76:60:97:
                    f9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A6:1E:85:C6:1F:4D:3E:6B:4A:10:02:17:4F:2E:9B:5D:4F:D7:3D
            X509v3 Authority Key Identifier:
                keyid:B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:5d:bd:01:a4:bd:18:1f:2e:d1:0d:3c:93:5d:3f:b2:a4:af:
         bd:24:c9:30:70:03:b4:e3:7e:64:47:7e:89:e5:19:e8:53:98:
         8e:2d:32:2d:f3:bb:c3:1d:59:86:42:49:0a:0b:20:9e:f1:78:
         80:4a:0d:22:77:01:f4:5a:fe:38:b0:8a:a8:76:fe:b4:fb:28:
         1e:67:fa:42:ee:ec:79:2a:ee:75:b8:5d:df:ff:75:ce:d3:45:
         f2:8b:af:08:79:50:eb:5e:84:c7:83:3c:4f:84:1b:30:da:88:
         db:5f:53:e7:bb:93:65:13:64:54:20:71:be:af:45:ab:69:cd:
         f2:a1:94:97:9f:29:14:5a:44:c2:2f:d3:10:d9:59:87:67:f2:
         70:b6:c4:e3:8d:88:8b:5e:59:8b:cb:4a:e6:de:90:ed:6f:1b:
         7a:45:d8:10:20:a4:f1:23:cc:ec:34:67:e2:e3:20:88:5e:c4:
         f3:27:b8:09:b3:21:71:b4:6e:5a:02:0d:26:eb:da:f9:28:5f:
         7b:b7:6b:4b:b7:4f:82:b8:43:60:56:32:55:97:ee:00:84:63:
         52:37:db:1b:4a:31:00:02:ed:60:4e:1a:1d:e5:86:a9:c5:dc:
         29:b7:b6:b9:32:e4:20:b1:80:27:28:1a:38:a9:3e:f9:60:e7:
         5e:a3:fe:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0NJJdVK3+pbOWa89jbeZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYjU2ZDEwY2NhZDlkNjljMDE4NTZiZTBhZmFhMTdlYzY4
MmFjYmYwHhcNMjYwNDE3MDUwMTMyWhcNMjYwNDE4MDUwMTMyWjAzMTEwLwYDVQQD
Eyg4OGE2MWU4NWM2MWY0ZDNlNmI0YTEwMDIxNzRmMmU5YjVkNGZkNzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZqRdYRPmdoBNBhIprn/h+aLo+x6
Na+ZOrNwWGsCPmTm0GXa8GI2avkrW1n1tFGS58/vCH/Vd7hzn8s6jsma31Q0269h
y7dTgJZ6fgTlbVFjiad9uGQ0AzZbDHf/IXleS3U1l+Rc1DTDpybRO0AeUlONuXzC
fYZY1+GZGyEVmk23JvYM4dVHafe+1DaTLOG5VpgtBKz+To/6iHwoahrFziYd1vhW
1nARrIrjGVbtAqgLmfGZkcS/gp1VJ7iu6lJyZs7GUvm92ybgHQAn477sjm3WGdhi
yAxG16xo4KSHwmB3OHjjZ625/oct93wv8J8fO/a/PUQ2/xSzbit2YJf5pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIimHoXGH00+a0oQAhdPLptdT9c9MB8GA1UdIwQY
MBaAFLC1bRDMrZ1pwBhWvgr6oX7Ggqy/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0xWdEVNeXRuV25BR0ZhLUN2cWhmc2FDckw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC82OTQwOWUtMWVjNC00ODlkLWI2MWYt
YTE5Y2M4YTc2ZDA0LzEvc0xWdEVNeXRuV25BR0ZhLUN2cWhmc2FDckw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC82OTQwOWUtMWVjNC00ODlkLWI2MWYtYTE5Y2M4YTc2ZDA0
LzEvc0xWdEVNeXRuV25BR0ZhLUN2cWhmc2FDckw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALF29AaS9
GB8u0Q08k10/sqSvvSTJMHADtON+ZEd+ieUZ6FOYji0yLfO7wx1ZhkJJCgsgnvF4
gEoNIncB9Fr+OLCKqHb+tPsoHmf6Qu7seSrudbhd3/91ztNF8ouvCHlQ616Ex4M8
T4QbMNqI219T57uTZRNkVCBxvq9Fq2nN8qGUl58pFFpEwi/TENlZh2fycLbE442I
i15Zi8tK5t6Q7W8bekXYECCk8SPM7DRn4uMgiF7E8ye4CbMhcbRuWgINJuva+Shf
e7drS7dPgrhDYFYyVZfuAIRjUjfbG0oxAALtYE4aHeWGqcXcKbe2uTLkILGAJyga
OKk++WDnXqP+RA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:45:26 2026 by rpki-client