Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
File:                     P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft (raw, json)
Hash identifier:          cEYM3PE6Am690AB78/lErv+uptRc//DWHL+Rl/Fqw+E=
Subject key identifier:   38:43:4C:FA:68:D9:83:DA:B7:4C:80:78:75:83:D4:C1:38:57:D8:FD
Authority key identifier: 3F:D4:D2:FD:BE:E3:AA:3E:12:14:28:EA:70:50:C9:43:9D:88:86:A9
Certificate issuer:       /CN=3fd4d2fdbee3aa3e121428ea7050c9439d8886a9
Certificate serial:       019D9886B8B91D0D94CF923FF2E4204AAF89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
Manifest number:          14D7
Signing time:             Thu 16 Apr 2026 23:00:59 +0000
Manifest this update:     Thu 16 Apr 2026 23:00:59 +0000
Manifest next update:     Fri 17 Apr 2026 23:00:59 +0000
Files and hashes:         1: 3W2kBgMIvhcXUhUq2YtKk1xN_AU.roa (hash: CAsZ3C2TdySi/ZWvlReBuoW/T5KbXTvFwU9q/tZJ4e0=)
                          2: P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl (hash: GP9IaIb9KVtFNTM1FhtRUJ2IQSvnE1KKNONy4lkQxlk=)
                          3: RbC01VwFxiZgBTALS-uMjRZzAhY.roa (hash: q9hSu3/IMM4HWr9vjCMGx9EywT+vVqNbYQnoN0MBA20=)
                          4: W9owpqcA8Ky_UkMpYTsSDjecJMU.roa (hash: 4m0qKyQs2oTTQD8xTXHhJx+IhKz/9ELu9P/CqiTewAM=)
                          5: _FgKHiwZ54ey0goItnrxJYHRboo.roa (hash: sg5CvvnTfG2oD+toERRbafBqjfE3xSjzejxaJO1LxU8=)
                          6: z2A2T1nq3TaPFhF11ccXgPg0K_M.roa (hash: FIAAHyPL1J0jzI8B5mvusigwqLIBDgZSTDh7qjXNzTM=)
                          7: zXZDjCl_wpe20vJI7Svnpaah_LM.roa (hash: Uex3ZzOS035SmbmtX2k6Jvjfz1dsWhh2Uu53J7YkHiU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:86:b8:b9:1d:0d:94:cf:92:3f:f2:e4:20:4a:af:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd4d2fdbee3aa3e121428ea7050c9439d8886a9
        Validity
            Not Before: Apr 16 23:00:59 2026 GMT
            Not After : Apr 17 23:00:59 2026 GMT
        Subject: CN=38434cfa68d983dab74c80787583d4c13857d8fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b5:39:f0:f6:27:06:90:c7:8e:6b:ca:e7:3d:
                    e2:63:26:a9:3b:93:e6:f2:d3:63:19:e0:75:47:40:
                    e2:26:52:37:76:b2:76:35:88:c8:bf:2e:a6:78:77:
                    fe:ae:10:9b:3b:ec:89:74:47:41:a2:91:f5:d5:4a:
                    0d:81:be:b3:e4:0c:0a:e6:65:e6:f6:5f:a8:b1:47:
                    9e:bb:cb:06:60:6a:41:4c:bc:43:55:ea:c5:41:86:
                    38:15:d9:c7:ff:a1:21:f4:34:b3:6e:51:74:7d:7f:
                    77:c2:79:2f:17:54:e6:23:21:23:8f:83:84:52:78:
                    35:78:c1:e5:0d:97:00:78:1e:b0:5e:4c:3a:e1:d4:
                    c2:f9:c6:84:fa:e0:22:a0:04:a2:06:cd:c3:31:89:
                    3f:f6:fa:c9:98:91:1f:74:65:2e:d1:57:d8:b0:a9:
                    57:ed:2c:01:b9:c1:db:14:f5:9b:cd:d0:17:ca:b2:
                    a5:51:c1:0f:9d:13:fb:50:9b:4d:2c:19:fb:5f:fa:
                    d9:d0:fd:ab:a3:36:88:dc:30:e2:25:f5:8a:79:48:
                    cd:9e:08:d4:4c:d7:eb:32:93:96:60:e7:03:84:8d:
                    78:df:19:fb:6a:07:59:e2:e9:3c:48:4b:a1:8f:c5:
                    6d:dc:5b:8a:00:66:33:60:a2:20:97:76:ab:6a:a4:
                    e1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:43:4C:FA:68:D9:83:DA:B7:4C:80:78:75:83:D4:C1:38:57:D8:FD
            X509v3 Authority Key Identifier:
                keyid:3F:D4:D2:FD:BE:E3:AA:3E:12:14:28:EA:70:50:C9:43:9D:88:86:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:e7:d6:ca:bd:1e:f6:bf:c5:b2:8f:25:d7:10:a6:2d:82:3b:
         45:b4:97:a0:4b:9e:c0:92:e2:83:9f:55:4f:ca:62:07:72:ad:
         10:35:9d:1a:9b:0c:ad:ab:48:ca:25:a1:cb:17:61:3b:3d:d1:
         4c:e8:9a:82:ea:c7:48:35:51:e7:6b:b2:13:ba:34:7f:98:65:
         b0:c9:49:18:1c:ff:9d:43:1e:f5:a7:59:80:20:95:7f:78:a1:
         6c:f4:f0:6e:c3:8b:d7:c4:73:a4:55:16:9f:63:b1:f9:26:b1:
         6a:0d:9b:dd:90:75:d2:f9:0c:1d:7a:7f:e8:fc:6e:d3:7e:bc:
         ec:af:6e:82:7d:d2:29:1b:65:59:0b:51:88:f7:e1:db:fa:df:
         f0:fe:74:04:c7:9c:ec:e9:47:5b:69:e5:aa:b1:39:51:4d:2e:
         df:96:65:7c:3b:37:e1:b0:77:0e:db:f7:ff:8a:22:8f:f6:ee:
         c6:88:4a:73:45:75:d2:81:ae:3c:44:8a:5c:c6:d3:04:92:23:
         70:d3:81:2c:45:8f:b1:c5:51:11:23:d6:59:51:df:2a:a2:68:
         42:3b:9f:62:44:51:fc:99:41:bd:54:6b:08:a5:51:10:78:26:
         4f:fe:3b:8e:a3:0b:6f:34:97:2b:00:a8:41:e8:65:16:b9:3e:
         f6:4a:be:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:27:09 2026 by rpki-client