Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
File:                     i992xUueaTXDCptMm6kwmsRw7AI.mft (raw, json)
Hash identifier:          v99mUEOuH5w1OWQl94DY9/40BlG0BWDGpjP3Dank5Yk=
Subject key identifier:   01:8E:FB:DF:40:96:CB:83:27:DD:51:BE:D6:F0:10:29:5D:B6:02:D6
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Certificate issuer:       /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial:       019DA4C14FDCDEF832DBF4FCA55BA5E96C46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
Manifest number:          160B
Signing time:             Sun 19 Apr 2026 08:00:25 +0000
Manifest this update:     Sun 19 Apr 2026 08:00:25 +0000
Manifest next update:     Mon 20 Apr 2026 08:00:25 +0000
Files and hashes:         1: 7cAN5cdu2_S9bDQVNC5QqKrYvmc.roa (hash: CLStmuiko/zgT60qCZzYYWQkc+wkCRkeSaDCC+s+3Mo=)
                          2: A4nWZcqbIB6mZ3r4TPebwidgzO8.roa (hash: vRgpw5CyOzE9dkBiBgcBt+Pz32kRFcheCMuET86c6fc=)
                          3: FO34XpplAW7QlRa_nhaWh0bzK1M.roa (hash: OY8jMW/Q0/vSfJsf4E0K4jOzUbbQOka6dbLisQTbUTM=)
                          4: MHoXsCGkCviv_tamPQmmc_UIU2g.roa (hash: BvLZIMCUMEKg7RoFHDEe1S8EApTrbc82zqTvetdte5U=)
                          5: QAN7swOnI3Ff5VrqxOQMitejWug.roa (hash: 2Y2g+wJB1OvwtX1AmkRTWuOoQzygFkkQrXjxXMRfp4s=)
                          6: i992xUueaTXDCptMm6kwmsRw7AI.crl (hash: pNHNKFfGub+7KrT6A+AcsdgOePdwJVXBcxQPvxHbvmc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:c1:4f:dc:de:f8:32:db:f4:fc:a5:5b:a5:e9:6c:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
        Validity
            Not Before: Apr 19 08:00:25 2026 GMT
            Not After : Apr 20 08:00:25 2026 GMT
        Subject: CN=018efbdf4096cb8327dd51bed6f010295db602d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:aa:c9:04:87:e3:ae:d4:5e:34:74:c8:39:e5:
                    12:8e:30:00:b2:9d:1e:8b:62:48:5b:e0:27:36:83:
                    9f:21:8b:70:49:6d:13:ab:67:80:72:5d:2c:28:92:
                    b8:6d:ec:e1:ba:0c:ea:a0:5c:c5:c3:60:3a:5f:5a:
                    5b:71:5e:a1:af:f1:4e:3f:3b:36:ac:cf:b3:7d:95:
                    02:c8:ea:5e:87:1c:73:27:ba:71:a7:5c:84:e6:e5:
                    27:d9:24:d4:9b:3e:ff:2c:dc:df:f6:51:af:0e:23:
                    24:bd:5d:4a:99:9d:51:9d:c4:2e:51:02:a0:75:4b:
                    e0:ae:c6:b3:7d:60:2b:a6:a6:f3:c1:2c:ac:96:71:
                    fd:4e:e3:61:1a:96:c5:54:3b:8c:bc:c0:0c:98:29:
                    51:c5:f1:01:52:a7:cc:c5:fd:86:86:78:f2:5b:e6:
                    34:89:eb:91:15:44:72:f3:41:0f:fc:0b:c1:b4:c9:
                    13:ff:06:4c:10:75:b5:d1:cd:6a:a7:d5:4a:cd:b9:
                    47:91:a8:59:e5:f1:43:e0:7a:0d:24:d9:ce:bf:2a:
                    17:f6:a2:f8:a0:34:4b:cf:92:8c:60:c1:fa:6f:27:
                    34:4d:7d:99:ec:95:22:8e:f3:c6:a2:fe:19:41:8d:
                    a0:9c:06:27:f8:cf:53:71:ed:db:85:c3:1c:49:ac:
                    3a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:8E:FB:DF:40:96:CB:83:27:DD:51:BE:D6:F0:10:29:5D:B6:02:D6
            X509v3 Authority Key Identifier:
                keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:c6:df:36:93:ea:3c:36:cf:97:30:2f:8b:5c:a8:40:b9:7a:
         c6:d4:78:1d:b1:05:eb:e5:b5:1d:7e:fb:01:e2:6d:1a:f8:33:
         39:9e:9e:bd:eb:95:86:ae:de:2f:af:d4:80:b8:26:c1:90:17:
         85:2a:3f:0e:c8:cb:d1:f5:ee:86:93:40:ed:ca:a1:68:18:9f:
         45:e6:1e:54:44:82:c4:c6:30:d9:f1:16:48:48:76:d9:f0:c1:
         4e:54:68:25:e4:05:ee:b4:1b:3a:37:4d:b9:bc:5b:e6:a7:fb:
         c6:53:d9:e7:65:6a:e5:32:92:0e:7a:54:c0:64:2d:58:5b:33:
         66:9e:c2:84:da:74:30:56:66:ab:4f:2c:36:83:6d:ef:33:cf:
         fe:6d:04:56:45:2c:a5:27:ac:ce:82:91:9c:45:dc:0f:f4:d7:
         8a:e3:76:38:46:1a:8a:62:da:04:8b:23:89:a2:14:73:e9:3e:
         d2:2c:a3:10:0e:83:8f:8e:86:1a:bb:59:c5:ef:63:73:b4:62:
         4a:42:04:4c:dc:bd:2a:c3:3a:9d:42:37:a3:bf:94:73:de:7d:
         66:c8:6b:d2:bf:10:2d:26:70:d3:77:31:66:0e:a4:86:e1:88:
         8e:df:69:53:92:67:58:2d:a9:bb:65:39:7a:7b:ce:d9:7f:8b:
         72:08:ad:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:21:32 2026 by rpki-client