Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft
File:                     pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft (raw, json)
Hash identifier:          sqc1Q6JiMv5GZ65Cim+RoYZJfWYxuna5kQrMOzXcCpc=
Subject key identifier:   27:05:97:83:B9:4A:F3:EE:84:09:A7:45:11:D4:35:2C:96:83:42:3E
Authority key identifier: A5:D9:4C:40:47:0C:6D:B9:88:01:F7:BD:06:0D:AC:94:1E:9D:D3:16
Certificate issuer:       /CN=a5d94c40470c6db98801f7bd060dac941e9dd316
Certificate serial:       019E2C2875255D3BAAD957A15E7E4BDC30DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pdlMQEcMbbmIAfe9Bg2slB6d0xY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft
Manifest number:          0193
Signing time:             Fri 15 May 2026 15:01:49 +0000
Manifest this update:     Fri 15 May 2026 15:01:49 +0000
Manifest next update:     Sat 16 May 2026 15:01:49 +0000
Files and hashes:         1: ehySIEsads4WV7sp7DowBNHPfFg.roa (hash: ohb8lCN0GiTjkBMaW/noESadzME7qDDXrl39PuJ5qFI=)
                          2: pdlMQEcMbbmIAfe9Bg2slB6d0xY.crl (hash: ndcNpf7fBmwx+495tKKsxVSwnnrWZYmV1Ngv0rHKeHk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pdlMQEcMbbmIAfe9Bg2slB6d0xY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 11:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2c:28:75:25:5d:3b:aa:d9:57:a1:5e:7e:4b:dc:30:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5d94c40470c6db98801f7bd060dac941e9dd316
        Validity
            Not Before: May 15 15:01:49 2026 GMT
            Not After : May 16 15:01:49 2026 GMT
        Subject: CN=27059783b94af3ee8409a74511d4352c9683423e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:64:9e:79:4e:2d:b1:63:48:f6:33:dd:ff:b7:
                    03:b8:ab:75:a0:45:fa:b3:05:0f:1c:e0:5a:3d:5c:
                    f2:22:87:0b:2a:e3:70:c7:5b:a7:f9:b9:65:4c:4d:
                    e5:79:08:59:7a:0c:bc:6a:fe:c6:f7:be:c4:29:67:
                    b7:29:7e:bc:9a:dc:fd:35:37:a4:d9:cb:d5:d2:89:
                    51:57:42:05:0c:7d:17:b6:a4:6c:12:e9:8d:7a:66:
                    73:b6:0a:6c:ed:3f:9c:38:f4:67:c5:03:92:b9:92:
                    7f:47:3d:05:6b:e3:a6:7f:50:68:50:78:81:62:c6:
                    8a:78:29:c1:06:ee:2d:04:fb:0c:82:55:d5:4c:f2:
                    a3:44:2a:9d:a5:bf:bc:86:61:d3:7f:2e:4a:2f:06:
                    a9:eb:12:be:79:e9:54:cf:32:11:8d:96:7a:7a:2d:
                    8d:67:59:83:a5:44:c8:59:0a:4a:50:fe:5e:d9:ce:
                    c8:f8:f5:05:60:85:46:a5:c5:be:93:7a:92:d9:f6:
                    8c:53:08:4f:87:c2:c9:52:5f:42:64:bc:55:37:62:
                    f5:cc:bc:fc:81:dd:c1:68:7d:56:0d:16:96:1a:fa:
                    0c:0e:2b:ee:d8:c8:ed:59:c7:01:4e:9c:7f:aa:19:
                    54:2b:41:e8:b4:be:ed:46:12:ad:38:78:2f:68:97:
                    1c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:05:97:83:B9:4A:F3:EE:84:09:A7:45:11:D4:35:2C:96:83:42:3E
            X509v3 Authority Key Identifier:
                keyid:A5:D9:4C:40:47:0C:6D:B9:88:01:F7:BD:06:0D:AC:94:1E:9D:D3:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdlMQEcMbbmIAfe9Bg2slB6d0xY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:a5:d1:16:e5:d1:d1:22:83:8c:e0:34:31:71:4d:49:5a:d6:
         c0:b6:6f:31:b7:9a:ab:4d:df:b3:8f:97:78:36:0b:1c:70:bb:
         55:1e:ea:60:5f:b0:83:79:04:d6:59:c3:1a:0a:4f:37:9e:cf:
         10:84:17:8a:c6:88:f9:6e:9b:5b:83:95:e3:c2:72:dd:ae:2a:
         b5:17:60:d3:c5:82:fc:b3:ca:79:26:bb:c6:f2:7e:d6:32:df:
         b1:34:08:ee:fe:81:19:b1:d2:ae:4f:6b:0a:45:d4:96:4e:53:
         c4:89:03:46:b5:7c:99:bb:2f:91:f9:0d:93:af:d5:50:f0:25:
         b4:56:f4:25:98:45:76:3b:28:bb:f5:7f:41:18:d8:df:ac:f2:
         05:ed:9a:95:df:f0:1b:30:2b:d2:4f:34:59:e3:f2:20:2d:59:
         13:f4:f0:38:5f:a4:74:e7:94:ee:0c:17:d5:22:b0:fb:7c:4f:
         7a:68:6a:05:8a:b0:33:26:a5:d4:6e:d2:3e:67:fa:c7:a5:07:
         15:d4:5d:39:b4:0b:08:ab:06:69:2a:72:9b:4a:3d:e4:d9:b1:
         71:90:3d:19:fa:5f:30:d0:74:e5:49:f8:58:7e:18:db:51:91:
         98:b3:f6:df:cd:f9:67:88:eb:97:12:eb:73:4e:6f:7f:98:27:
         e4:f2:a0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 21:07:21 2026 by rpki-client