Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.mft
File:                     mecgmoybF2-_Yj7fPuC4IAf8LEA.mft (raw, json)
Hash identifier:          dsSb9xXxTL6J+HXt95QFqMV8atDKIW48m3XxFU4ajoo=
Subject key identifier:   83:BC:58:19:1D:64:3C:DE:A3:43:FC:74:89:89:62:4C:DB:BB:7D:B5
Authority key identifier: 99:E7:20:9A:8C:9B:17:6F:BF:62:3E:DF:3E:E0:B8:20:07:FC:2C:40
Certificate issuer:       /CN=99e7209a8c9b176fbf623edf3ee0b82007fc2c40
Certificate serial:       019D98F525BA7771798833BA0A6563D8CCA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.mft
Manifest number:          18C9
Signing time:             Fri 17 Apr 2026 01:01:35 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:35 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:35 +0000
Files and hashes:         1: GMkb7Nfp3e1xwCHzIvQMW8YGBD8.roa (hash: 9tBjV2F1lcd6x85zAmu4+gOihfEhBFtC/fl/CG4h/+o=)
                          2: HNj3awdWSpdbaAsidPiHwTrpk-w.roa (hash: +1Q8zqw8FDmKfGP2AXog0DN3Zr+uSl/yie6I0H2SVv4=)
                          3: PSdQtBy68Y-4k3bCXbHKKLY0ziQ.roa (hash: 0eFbrFvPRaRamJKj2kPYRYq1/ZF/LzpKZfdMeA3TePc=)
                          4: jUS93b3kR9OAk9zT0yFMYbqw9IQ.roa (hash: 3Qwq734MlX1peNwyxgPAyf/XHf3lQhOFPZnpffDz3jU=)
                          5: mecgmoybF2-_Yj7fPuC4IAf8LEA.crl (hash: a/JSMOVypalm5aAJZ8qSANlBku7lggm+4cv5CIr/zPI=)
                          6: yMShbjNcgfYstYDZh-46SweXK1w.roa (hash: OZ6f7McsD/D/eJDsrpr3LQKsSGUTZnYABD4TkkcX4iw=)
                          7: ydJMToJ5B1bUDi2lNS_iW7lmLpE.roa (hash: BRax3SkiLH5mAWfBlAoIZAGF7JI9kbofyKrquNfm0Rg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f5:25:ba:77:71:79:88:33:ba:0a:65:63:d8:cc:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99e7209a8c9b176fbf623edf3ee0b82007fc2c40
        Validity
            Not Before: Apr 17 01:01:35 2026 GMT
            Not After : Apr 18 01:01:35 2026 GMT
        Subject: CN=83bc58191d643cdea343fc748989624cdbbb7db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:47:8d:a3:41:f7:0f:75:2f:69:cf:86:a5:f5:
                    42:b8:8e:24:9f:08:22:d2:c9:e7:98:b0:33:e9:67:
                    59:36:d7:13:bc:59:0b:54:2d:a8:27:19:50:3a:f2:
                    81:21:eb:ec:d7:30:a8:09:9e:b8:3a:34:0b:9a:f1:
                    44:2f:61:44:62:0c:4c:31:43:5e:ab:a1:fa:fd:09:
                    b9:f0:d6:9c:9d:e9:b7:e5:fb:5e:5d:dc:2f:05:17:
                    8d:95:09:8e:a7:f8:41:77:13:c0:12:50:a8:ca:61:
                    5a:49:b9:b2:2d:20:c0:94:49:5a:1d:43:bf:01:68:
                    10:d6:3f:6a:4b:3a:de:16:91:c5:e7:5d:0f:33:62:
                    f5:6d:cf:98:5d:49:b8:88:49:dd:3c:a0:2f:40:f8:
                    86:b5:a9:78:cf:cb:dc:3c:21:9d:d2:50:21:ad:3a:
                    72:8d:c8:4e:9b:4c:ac:04:05:be:f6:71:50:cd:a7:
                    20:e5:90:10:1a:af:b8:fb:00:df:3e:64:2f:a5:8f:
                    17:b2:ca:70:7b:9c:63:9c:ed:a8:bc:17:09:ba:7a:
                    6e:5c:e4:a4:9d:fa:83:76:9b:d1:b7:36:59:4d:4f:
                    54:47:d4:fa:90:c3:b9:b6:54:87:10:3c:3b:bf:34:
                    aa:5d:dd:98:2a:2c:22:b0:78:a8:cd:84:a3:5c:a7:
                    ed:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:BC:58:19:1D:64:3C:DE:A3:43:FC:74:89:89:62:4C:DB:BB:7D:B5
            X509v3 Authority Key Identifier:
                keyid:99:E7:20:9A:8C:9B:17:6F:BF:62:3E:DF:3E:E0:B8:20:07:FC:2C:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:f3:b2:97:d1:08:11:60:34:7c:5c:34:84:0f:9d:19:36:07:
         c7:94:9e:9d:b1:42:37:72:63:76:a5:bc:0c:ff:23:1a:bc:84:
         00:43:df:1c:c6:5c:8e:b8:a0:3f:ab:52:7a:94:e6:81:ae:52:
         a3:3f:86:4f:3f:5a:d4:c0:c2:d6:73:14:54:ce:f9:69:79:db:
         65:64:6f:45:31:d4:5d:87:29:6e:ab:ca:86:ed:23:e2:57:8b:
         a3:22:fb:d5:1c:b0:a4:78:09:01:c9:81:cd:3c:35:b0:73:eb:
         aa:8d:2f:5a:2f:aa:80:15:34:93:ee:08:51:f4:28:46:94:db:
         57:9b:c9:6b:40:e8:7b:c8:0f:5f:8c:30:20:b6:67:7c:a2:ca:
         10:26:df:b0:8d:a2:0a:cd:cc:50:6b:c4:2f:db:b7:ba:d5:c4:
         1b:d8:fc:74:62:5d:d8:c0:92:58:80:92:59:89:4a:e1:aa:c8:
         de:16:65:16:83:27:66:a8:53:0c:c4:81:d0:3b:ac:ce:86:08:
         c9:52:d7:fd:72:02:61:1e:73:b5:52:4e:ca:74:cd:12:fd:70:
         0a:f6:80:75:a0:fa:24:bd:da:94:85:22:50:cf:ce:fe:fb:de:
         b2:7c:9c:fa:84:e0:00:8a:ec:58:f5:28:19:3b:f7:4d:38:b4:
         d5:6d:5f:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9SW6d3F5iDO6CmVj2MynMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZTcyMDlhOGM5YjE3NmZiZjYyM2VkZjNlZTBiODIwMDdm
YzJjNDAwHhcNMjYwNDE3MDEwMTM1WhcNMjYwNDE4MDEwMTM1WjAzMTEwLwYDVQQD
Eyg4M2JjNTgxOTFkNjQzY2RlYTM0M2ZjNzQ4OTg5NjI0Y2RiYmI3ZGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0eNo0H3D3Uvac+GpfVCuI4knwgi
0snnmLAz6WdZNtcTvFkLVC2oJxlQOvKBIevs1zCoCZ64OjQLmvFEL2FEYgxMMUNe
q6H6/Qm58Nacnem35fteXdwvBReNlQmOp/hBdxPAElCoymFaSbmyLSDAlElaHUO/
AWgQ1j9qSzreFpHF510PM2L1bc+YXUm4iEndPKAvQPiGtal4z8vcPCGd0lAhrTpy
jchOm0ysBAW+9nFQzacg5ZAQGq+4+wDfPmQvpY8Xsspwe5xjnO2ovBcJunpuXOSk
nfqDdpvRtzZZTU9UR9T6kMO5tlSHEDw7vzSqXd2YKiwisHiozYSjXKft7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIO8WBkdZDzeo0P8dImJYkzbu321MB8GA1UdIwQY
MBaAFJnnIJqMmxdvv2I+3z7guCAH/CxAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWVjZ21veWJGMi1fWWo3ZlB1QzRJQWY4TEVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9lZjU4NTYtYmJjMC00NWE0LTg5MWUt
YjJkY2MxODYzZThiLzEvbWVjZ21veWJGMi1fWWo3ZlB1QzRJQWY4TEVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9lZjU4NTYtYmJjMC00NWE0LTg5MWUtYjJkY2MxODYzZThi
LzEvbWVjZ21veWJGMi1fWWo3ZlB1QzRJQWY4TEVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr/Oyl9EI
EWA0fFw0hA+dGTYHx5SenbFCN3JjdqW8DP8jGryEAEPfHMZcjrigP6tSepTmga5S
oz+GTz9a1MDC1nMUVM75aXnbZWRvRTHUXYcpbqvKhu0j4leLoyL71RywpHgJAcmB
zTw1sHPrqo0vWi+qgBU0k+4IUfQoRpTbV5vJa0Doe8gPX4wwILZnfKLKECbfsI2i
Cs3MUGvEL9u3utXEG9j8dGJd2MCSWICSWYlK4arI3hZlFoMnZqhTDMSB0DuszoYI
yVLX/XICYR5ztVJOynTNEv1wCvaAdaD6JL3alIUiUM/O/vvesnyc+oTgAIrsWPUo
GTv3TTi01W1fUQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:43:18 2026 by rpki-client