Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.mft
File:                     Sq5Con57wsw1B--n48vCnTLuoTM.mft (raw, json)
Hash identifier:          WaXr+ZWLMjTYkGhPzYiV5QbEXf8tuBybVxAHPFuDDAE=
Subject key identifier:   0F:8A:43:E9:7C:9A:DC:F0:65:84:73:A8:80:59:FD:F6:A3:A4:A0:85
Authority key identifier: 4A:AE:42:A2:7E:7B:C2:CC:35:07:EF:A7:E3:CB:C2:9D:32:EE:A1:33
Certificate issuer:       /CN=4aae42a27e7bc2cc3507efa7e3cbc29d32eea133
Certificate serial:       019D9A3E25DBB13C744543FBB2A9640D5502
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sq5Con57wsw1B--n48vCnTLuoTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.mft
Manifest number:          1619
Signing time:             Fri 17 Apr 2026 07:00:57 +0000
Manifest this update:     Fri 17 Apr 2026 07:00:57 +0000
Manifest next update:     Sat 18 Apr 2026 07:00:57 +0000
Files and hashes:         1: B6NOQ5L6_SMBWsHOp2sNGO8QpMw.roa (hash: BKcVGIsYMVRjDSrmZwIXj+CvyyBzPVUKfR8gvSCiafc=)
                          2: P5V8zRMhjxtwjJTTASMRkvjriAI.roa (hash: cZKIfpLpDtSikSqUawRk4D7lUQdNwOHcWKhwSq/btQY=)
                          3: Sq5Con57wsw1B--n48vCnTLuoTM.crl (hash: 9fKpw/d8qXf8CQ61UxXyOjiEcJx9XGHIRHPF/fA52eA=)
                          4: ex6tJ_sI3NgHQ-pYmZS9gQBGxXs.roa (hash: y94smcNeac7NKCseyzQWs2hBaRavqj38pqssOx+l3ZM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sq5Con57wsw1B--n48vCnTLuoTM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:25:db:b1:3c:74:45:43:fb:b2:a9:64:0d:55:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aae42a27e7bc2cc3507efa7e3cbc29d32eea133
        Validity
            Not Before: Apr 17 07:00:57 2026 GMT
            Not After : Apr 18 07:00:57 2026 GMT
        Subject: CN=0f8a43e97c9adcf0658473a88059fdf6a3a4a085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:58:f1:f7:b0:f7:68:89:47:4d:e7:4f:f6:a5:
                    bd:ac:53:02:72:1b:8a:39:27:6a:ee:e9:d2:52:51:
                    c3:58:4a:97:c8:77:22:f0:ed:10:68:bb:e9:81:27:
                    2a:8c:7c:4a:90:7e:4e:3d:64:70:eb:64:fb:ce:c1:
                    52:a9:fc:18:a0:f8:1f:98:ac:f1:96:ac:77:dd:4c:
                    18:d1:83:c6:7a:bb:4d:ef:44:1a:62:80:15:c0:6f:
                    53:f4:87:45:85:d4:aa:89:5f:fd:1e:a1:3e:f7:32:
                    fa:0b:04:8a:1d:9c:a7:a4:81:85:50:c4:a3:a8:07:
                    03:65:84:ee:d1:c5:9e:1a:aa:6d:af:00:59:6d:72:
                    8b:fc:e3:89:f6:4b:4d:fa:10:17:ac:f9:ce:73:51:
                    3d:69:d8:75:69:c4:84:1b:94:03:6a:ca:42:7a:b8:
                    a2:60:b2:34:de:d7:d0:fc:07:f9:2c:40:29:bd:19:
                    0a:7b:4a:34:a8:14:c1:86:79:71:c7:ff:6f:7e:02:
                    f1:50:4b:49:d9:9f:19:e0:14:1f:f8:58:b8:0d:97:
                    9a:35:f4:d6:91:cf:c2:a4:95:ee:3e:65:53:22:d2:
                    34:95:47:bc:bf:89:d4:fc:99:f2:1a:da:c4:b6:b9:
                    7e:9d:ef:be:b9:22:8a:27:49:84:b3:63:1c:9f:06:
                    f6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:8A:43:E9:7C:9A:DC:F0:65:84:73:A8:80:59:FD:F6:A3:A4:A0:85
            X509v3 Authority Key Identifier:
                keyid:4A:AE:42:A2:7E:7B:C2:CC:35:07:EF:A7:E3:CB:C2:9D:32:EE:A1:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sq5Con57wsw1B--n48vCnTLuoTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:27:7e:42:e8:3a:44:a7:35:f8:0b:ba:1d:1f:75:60:34:5e:
         2a:6d:4c:b4:cb:5a:57:f8:c0:be:45:84:80:e2:d4:ee:62:5a:
         45:73:cb:ab:45:0c:13:24:20:ea:8d:8d:88:1c:51:a7:ac:9d:
         c4:b2:b0:b8:48:58:b1:c5:a7:c8:83:c0:6e:1b:bc:12:5c:13:
         a9:33:a5:cf:67:2c:99:7c:43:18:85:3d:28:a4:77:db:47:c9:
         44:87:e3:79:38:fe:b0:39:5f:e0:ef:08:a5:a1:ed:d5:d7:c9:
         ee:e9:d4:61:65:19:d2:a4:06:8b:d2:e3:b2:76:07:5a:98:f3:
         75:17:5a:25:1b:73:ba:22:6a:37:1e:8f:aa:11:f3:9f:c9:d5:
         3a:39:6b:ce:d5:dc:13:d7:71:6b:0a:ce:8a:d6:55:4b:8f:f8:
         33:7c:44:45:a8:ff:bb:6d:4f:ac:17:ac:35:38:98:e6:c4:22:
         09:ba:b5:25:75:0d:57:00:43:01:3d:2e:46:d2:8e:8f:a3:21:
         84:77:ef:87:ff:68:89:c7:1b:5d:11:e1:60:f9:fe:f8:a0:0c:
         74:c1:46:b3:00:bc:f0:6d:3d:5b:57:a5:3e:46:cb:bf:8e:2b:
         fb:f2:2f:f6:2e:cf:f7:66:59:fd:b7:e0:e4:3a:34:0b:f8:60:
         b0:4a:53:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPiXbsTx0RUP7sqlkDVUCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhYWU0MmEyN2U3YmMyY2MzNTA3ZWZhN2UzY2JjMjlkMzJl
ZWExMzMwHhcNMjYwNDE3MDcwMDU3WhcNMjYwNDE4MDcwMDU3WjAzMTEwLwYDVQQD
EygwZjhhNDNlOTdjOWFkY2YwNjU4NDczYTg4MDU5ZmRmNmEzYTRhMDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVjx97D3aIlHTedP9qW9rFMCchuK
OSdq7unSUlHDWEqXyHci8O0QaLvpgScqjHxKkH5OPWRw62T7zsFSqfwYoPgfmKzx
lqx33UwY0YPGertN70QaYoAVwG9T9IdFhdSqiV/9HqE+9zL6CwSKHZynpIGFUMSj
qAcDZYTu0cWeGqptrwBZbXKL/OOJ9ktN+hAXrPnOc1E9adh1acSEG5QDaspCerii
YLI03tfQ/Af5LEApvRkKe0o0qBTBhnlxx/9vfgLxUEtJ2Z8Z4BQf+Fi4DZeaNfTW
kc/CpJXuPmVTItI0lUe8v4nU/JnyGtrEtrl+ne++uSKKJ0mEs2Mcnwb2NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+KQ+l8mtzwZYRzqIBZ/fajpKCFMB8GA1UdIwQY
MBaAFEquQqJ+e8LMNQfvp+PLwp0y7qEzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3E1Q29uNTd3c3cxQi0tbjQ4dkNuVEx1b1RNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82MmYyNWYtOGIxYi00MTViLTlmYzgt
Y2M5MzVjZDczNjMyLzEvU3E1Q29uNTd3c3cxQi0tbjQ4dkNuVEx1b1RNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC82MmYyNWYtOGIxYi00MTViLTlmYzgtY2M5MzVjZDczNjMy
LzEvU3E1Q29uNTd3c3cxQi0tbjQ4dkNuVEx1b1RNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwCd+Qug6
RKc1+Au6HR91YDReKm1MtMtaV/jAvkWEgOLU7mJaRXPLq0UMEyQg6o2NiBxRp6yd
xLKwuEhYscWnyIPAbhu8ElwTqTOlz2csmXxDGIU9KKR320fJRIfjeTj+sDlf4O8I
paHt1dfJ7unUYWUZ0qQGi9LjsnYHWpjzdRdaJRtzuiJqNx6PqhHzn8nVOjlrztXc
E9dxawrOitZVS4/4M3xERaj/u21PrBesNTiY5sQiCbq1JXUNVwBDAT0uRtKOj6Mh
hHfvh/9oiccbXRHhYPn++KAMdMFGswC88G09W1elPkbLv44r+/Iv9i7P92ZZ/bfg
5Do0C/hgsEpToA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:59:56 2026 by rpki-client