Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/ImucE4BlqCDJrN9DhcsgEkUDSf4.mft
File:                     ImucE4BlqCDJrN9DhcsgEkUDSf4.mft (raw, json)
Hash identifier:          IL5+HXUKyiCwMbQoqYa4vSZIIv0YoLUe9hRh7g2sHzw=
Subject key identifier:   74:E3:A2:17:F9:DF:87:5A:61:2C:60:13:C0:FA:1B:E0:E2:D9:B0:2C
Authority key identifier: 22:6B:9C:13:80:65:A8:20:C9:AC:DF:43:85:CB:20:12:45:03:49:FE
Certificate issuer:       /CN=226b9c138065a820c9acdf4385cb2012450349fe
Certificate serial:       01A1DEA7143252E571D6C022543054D22562
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ImucE4BlqCDJrN9DhcsgEkUDSf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/ImucE4BlqCDJrN9DhcsgEkUDSf4.mft
Manifest number:          0173
Signing time:             Sun 15 Nov 2026 10:00:53 +0000
Manifest this update:     Sun 15 Nov 2026 10:00:53 +0000
Manifest next update:     Mon 16 Nov 2026 10:00:53 +0000
Files and hashes:         1: 7xVsc6e5HsSEMDSQRNGWAzYh7xw.roa (hash: umMdK2ousPlaPCGUE8QVsbLVa6xFxm0EroZYnaCBL/4=)
                          2: ImucE4BlqCDJrN9DhcsgEkUDSf4.crl (hash: lVLPz1ED8ipiJeE9J/5lPmP1bsXaRBkemFCqTmBENd8=)
                          3: L27Lg8l4vl8uMQxFpGcEsCmSVMc.roa (hash: MmKVAG1nuZbxn4BHXng/K07ASVdY2tArz6SaT43xauM=)
                          4: qsR7TZkWFq0TDf5MckwIwh8zFQM.roa (hash: sxmqqI4u+18AAhXlZEPlMsFP8KQ4AzNJugzw/xraXsU=)
                          5: vLWAWdlYukTIjLKPmSs-pTiSglg.roa (hash: hEeh+2QKPkagHXsyde8usIfFQY2GLUV8EdqzgChw/W0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/ImucE4BlqCDJrN9DhcsgEkUDSf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/ImucE4BlqCDJrN9DhcsgEkUDSf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ImucE4BlqCDJrN9DhcsgEkUDSf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:a7:14:32:52:e5:71:d6:c0:22:54:30:54:d2:25:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226b9c138065a820c9acdf4385cb2012450349fe
        Validity
            Not Before: Nov 15 10:00:53 2026 GMT
            Not After : Nov 16 10:00:53 2026 GMT
        Subject: CN=74e3a217f9df875a612c6013c0fa1be0e2d9b02c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e0:a8:41:35:74:62:db:15:e9:9c:5e:2b:79:
                    38:9c:fc:b6:e0:04:f4:cb:d1:cd:bf:b9:dd:8c:0e:
                    ed:34:5f:9b:4e:f2:cc:3f:48:e8:7f:e6:38:ee:ab:
                    4a:13:5c:40:1f:69:8a:e5:75:f7:df:25:6b:52:f4:
                    5b:f2:a0:4e:2d:f1:a6:e4:ec:44:6e:22:f0:72:50:
                    7d:11:07:eb:02:07:2d:0b:64:07:7f:4d:46:a3:a5:
                    76:8b:0d:09:6f:98:4c:f7:e7:93:3c:68:95:bd:d3:
                    66:00:d8:90:3a:e5:ce:23:cd:23:5b:48:e3:21:68:
                    29:eb:59:47:69:cb:1e:f5:61:e8:a1:77:5b:32:8e:
                    6c:be:18:24:d6:6b:a3:79:36:5d:fc:43:72:be:78:
                    a6:71:9c:86:83:6b:ab:6c:b7:5c:4e:12:2e:21:d1:
                    44:76:2c:a2:9c:fd:e0:ac:8d:80:86:b7:20:06:32:
                    0e:01:c5:bb:90:f8:05:91:47:b3:ce:cb:a6:9a:a2:
                    d1:92:ca:de:4f:c6:c4:14:b7:99:e7:bc:05:6e:46:
                    e7:59:d0:1c:a1:8f:03:45:64:7d:f9:9b:58:ac:04:
                    f9:f8:8b:5f:4b:d4:86:14:fb:61:56:4f:fd:85:d2:
                    a2:29:78:70:29:94:58:83:0e:4a:1f:bf:60:5c:be:
                    0c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E3:A2:17:F9:DF:87:5A:61:2C:60:13:C0:FA:1B:E0:E2:D9:B0:2C
            X509v3 Authority Key Identifier:
                keyid:22:6B:9C:13:80:65:A8:20:C9:AC:DF:43:85:CB:20:12:45:03:49:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ImucE4BlqCDJrN9DhcsgEkUDSf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/ImucE4BlqCDJrN9DhcsgEkUDSf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/ImucE4BlqCDJrN9DhcsgEkUDSf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:b1:07:c4:79:d9:88:c7:a6:e0:ab:ca:6a:b6:cf:61:a9:0b:
         6c:d0:60:b2:4d:17:24:51:cd:fa:65:09:1d:ce:f6:1e:4b:24:
         46:6d:68:a2:86:27:93:08:46:86:95:a4:79:d2:93:4a:38:1d:
         ee:e5:8b:dc:27:cd:8d:ec:fa:86:3c:34:f6:d1:95:b1:74:c8:
         00:61:2f:01:b6:26:5d:37:e3:7b:e1:d6:09:11:a9:0d:bb:e2:
         92:87:81:76:6a:d0:8a:c4:9a:fb:3e:e4:3c:b0:8c:c4:40:b1:
         0b:ce:43:2c:d0:ed:3f:05:f6:50:eb:a4:c2:f9:75:16:de:92:
         56:47:fe:29:21:a2:43:55:4c:87:87:34:e3:a0:b0:c3:e8:f0:
         ed:33:c4:38:ea:0f:15:54:32:97:7a:93:ac:16:10:41:ae:dd:
         c6:25:bd:76:13:dd:28:d2:da:ec:a1:aa:4e:45:dc:70:68:58:
         df:67:ca:7d:7e:ba:c0:07:f5:59:cb:68:35:eb:8c:40:78:93:
         86:d1:27:20:12:b9:56:49:79:68:21:d9:83:45:8e:b2:a5:06:
         d8:20:db:56:39:cf:fa:07:f7:b8:87:f0:e7:57:ad:83:70:ab:
         e1:a0:c7:03:4e:2f:a8:cf:bd:5d:8e:7e:d1:e0:4b:90:ed:80:
         ee:97:d5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:55:15 2026 by rpki-client