Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
File:                     m0FaAwWfspWkuWyc5erbWP6Y-oY.mft (raw, json)
Hash identifier:          lCv4/LI3lt5BlEgK/yd9DR8KFwgbOT4ghdH4dIVgyw4=
Subject key identifier:   B6:9E:96:CB:81:85:34:35:58:2C:CB:82:88:BB:A2:64:72:46:A4:21
Authority key identifier: 9B:41:5A:03:05:9F:B2:95:A4:B9:6C:9C:E5:EA:DB:58:FE:98:FA:86
Certificate issuer:       /CN=9b415a03059fb295a4b96c9ce5eadb58fe98fa86
Certificate serial:       019D9999A3B4E15D00D2523AEBAB77D89A3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
Manifest number:          0B05
Signing time:             Fri 17 Apr 2026 04:01:15 +0000
Manifest this update:     Fri 17 Apr 2026 04:01:15 +0000
Manifest next update:     Sat 18 Apr 2026 04:01:15 +0000
Files and hashes:         1: PyWCYQsc-RXqOD6ZcPJVeLZsTb0.roa (hash: So755h/YppAq4z9zJnxXyj3ozNgia1MYJ3MvAVJ9wDU=)
                          2: m0FaAwWfspWkuWyc5erbWP6Y-oY.crl (hash: 6NOlWaIBHbCC0P7WYbfCLRbhXCvih4+X3PphNVjrNRY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:a3:b4:e1:5d:00:d2:52:3a:eb:ab:77:d8:9a:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b415a03059fb295a4b96c9ce5eadb58fe98fa86
        Validity
            Not Before: Apr 17 04:01:15 2026 GMT
            Not After : Apr 18 04:01:15 2026 GMT
        Subject: CN=b69e96cb81853435582ccb8288bba2647246a421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:df:ff:97:60:f5:25:4b:5c:0f:f0:c8:69:b2:
                    aa:49:00:4f:fa:32:88:d8:67:2f:05:4a:ac:39:cf:
                    f2:b6:0a:80:e0:bf:2b:57:07:3a:6a:ea:ae:94:53:
                    96:30:3b:9a:99:b4:07:4c:20:68:22:91:21:93:0e:
                    ae:fb:ba:a4:4d:49:e7:c7:01:8e:74:28:e9:42:27:
                    27:6e:b3:6c:41:a3:19:c6:ef:84:57:26:6c:b7:9c:
                    9d:7f:cf:91:20:df:29:5a:b6:ce:fb:2d:7e:cb:b3:
                    ca:3c:5e:49:8f:c4:e2:d3:35:e2:c7:c5:b0:0c:91:
                    d0:2b:2a:63:03:ee:25:5f:c4:35:e1:2f:69:7d:27:
                    25:01:36:ab:46:bc:64:91:39:4c:f6:a5:fe:ce:f8:
                    d2:22:f1:13:f3:9c:d2:2a:7f:e2:39:9d:c9:9c:0c:
                    83:9e:ff:64:6b:74:8b:5c:32:99:c8:d4:d8:98:59:
                    fd:6a:34:b0:cf:66:a7:af:65:07:31:a1:2b:84:70:
                    6a:d8:4c:1e:ef:08:a5:75:de:55:f3:37:63:b4:a8:
                    64:4b:fe:4f:92:7a:b3:da:3b:8c:cb:96:1a:50:f1:
                    0c:eb:56:2f:31:04:cb:d1:69:67:8f:1a:11:4d:15:
                    2a:3e:e1:42:b4:41:db:b5:b6:dc:b4:88:9b:2f:5a:
                    06:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:9E:96:CB:81:85:34:35:58:2C:CB:82:88:BB:A2:64:72:46:A4:21
            X509v3 Authority Key Identifier:
                keyid:9B:41:5A:03:05:9F:B2:95:A4:B9:6C:9C:E5:EA:DB:58:FE:98:FA:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:d0:15:b2:24:f6:3a:47:a4:1c:04:29:dc:42:ae:f8:b8:9b:
         e8:9c:42:a2:82:fb:5b:04:fa:b1:7f:2c:9c:fe:22:ae:66:67:
         8d:36:a1:1c:08:3c:52:c9:6f:92:6b:65:95:40:86:bf:82:77:
         3f:0e:9f:07:21:f2:ea:4b:e0:00:60:66:57:1d:c7:b3:85:8d:
         87:90:51:2b:c4:8f:3c:2b:cf:64:93:f0:cc:cc:74:65:63:fe:
         fb:21:b0:7e:ea:ed:b6:d5:96:ab:87:69:b0:fc:6a:29:ce:25:
         f6:5e:17:fb:d1:ce:f6:2e:3d:bb:af:2f:c2:92:51:c0:f8:e3:
         fe:5d:1a:5c:af:b9:55:ee:51:8b:85:de:81:2b:49:66:b6:b1:
         08:12:68:33:80:f2:ea:7a:cd:4d:a2:59:b1:ba:a4:33:11:e5:
         6f:3d:bc:1f:3a:7a:67:61:21:0e:e7:aa:c1:be:6a:26:dd:1a:
         f4:23:a3:de:bf:c9:d9:cd:bc:d5:22:48:b0:2a:a5:27:74:9f:
         20:00:4d:b2:61:ed:b7:d8:c2:f0:bd:c2:84:7b:31:03:f3:c1:
         56:09:78:e3:f5:a5:29:15:a8:8e:3c:10:04:1c:fa:a4:87:39:
         81:72:88:2d:21:1d:d4:de:37:5b:80:e3:a9:b6:3f:85:7d:e4:
         81:4f:eb:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:25:09 2026 by rpki-client