Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
File:                     1MOxLI1jUZDskoQ3u9bLDow4-ak.mft (raw, json)
Hash identifier:          4x03+AyVGsASZSpu2ImoeNRE4vD+3Pche8j9TAanlEk=
Subject key identifier:   19:98:9B:77:2F:E2:20:E0:2E:BB:2E:D3:6C:DD:2C:B6:08:C1:DB:DE
Authority key identifier: D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9
Certificate issuer:       /CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9
Certificate serial:       019E30A92302D87F4E1E243E362DCA9FE6BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
Manifest number:          191F
Signing time:             Sat 16 May 2026 12:00:51 +0000
Manifest this update:     Sat 16 May 2026 12:00:51 +0000
Manifest next update:     Sun 17 May 2026 12:00:51 +0000
Files and hashes:         1: 1MOxLI1jUZDskoQ3u9bLDow4-ak.crl (hash: VIpKKrfsrotCXi810Jltz1AasvO8OXDkFQ4fevf81nE=)
                          2: 2_chmdN9KFFBZIvF9VY89f23PGs.roa (hash: oIVNlGlquIUtlwcT49BOjBM2tIxXAOLbTnaR8cakqIw=)
                          3: Oc47hB2V6Cw8HP5aVnlKZA_fX5E.roa (hash: Pp00MhcImciNgzTEsbEKZbcegIMR6Roel0Kkv3+T7oc=)
                          4: oSGKhwEc_oyA4GgI1H0hJOveCVI.roa (hash: 1SINNHx3FHxT/JXf8IpEHqdou86CS2g7FnWo+nB+dSQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a9:23:02:d8:7f:4e:1e:24:3e:36:2d:ca:9f:e6:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9
        Validity
            Not Before: May 16 12:00:51 2026 GMT
            Not After : May 17 12:00:51 2026 GMT
        Subject: CN=19989b772fe220e02ebb2ed36cdd2cb608c1dbde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8d:1d:49:33:9d:69:17:7f:1c:c5:62:0f:f9:
                    8d:07:80:dc:e0:7b:2f:9b:76:7e:43:fd:97:42:20:
                    48:ce:5c:7b:14:e1:64:d3:4d:68:6d:e0:af:96:f2:
                    ad:12:db:79:70:e8:80:13:70:91:9b:44:33:f1:48:
                    e1:68:0f:b7:93:94:62:d2:7f:d2:a4:47:81:f3:af:
                    a6:a4:c7:3e:0c:e3:33:b6:84:6e:cd:92:cc:67:99:
                    da:ad:c6:19:cd:a2:9d:63:42:44:5a:3f:f9:ba:91:
                    66:49:dd:53:eb:3c:e7:21:7f:b1:c3:b6:56:f7:ac:
                    0d:bc:16:f1:c3:ab:93:29:cf:f0:65:c7:93:57:d1:
                    28:3e:26:f8:f5:21:92:83:12:d8:6d:ef:6b:52:27:
                    34:dd:b1:47:f0:37:6e:ba:d0:8d:70:6f:0e:5a:ca:
                    74:b6:06:19:3f:03:21:9b:d7:a0:61:58:2f:9a:67:
                    aa:e4:5e:00:b7:40:b2:31:2d:f2:b6:21:4a:db:82:
                    c6:47:a2:f5:07:ee:0f:1d:35:a3:19:42:14:93:a5:
                    58:60:85:e5:b4:ab:19:06:3a:4c:46:fe:75:db:5e:
                    b4:3d:7d:7d:02:86:b9:19:36:d9:dd:c5:56:bb:a0:
                    94:f8:59:62:5c:8a:4f:da:f5:a8:2e:7f:9a:d6:ed:
                    c5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:98:9B:77:2F:E2:20:E0:2E:BB:2E:D3:6C:DD:2C:B6:08:C1:DB:DE
            X509v3 Authority Key Identifier:
                keyid:D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:45:f0:a4:99:06:9c:b2:77:17:40:6e:f5:ce:8f:0f:88:4b:
         f9:26:eb:ba:ce:52:d8:f5:4a:f2:07:b0:87:68:30:f1:d7:f7:
         84:3e:e0:0b:d5:b9:da:da:b7:0f:cb:f7:84:26:cd:b5:ea:a8:
         34:da:2a:6a:19:9c:42:c2:8c:99:33:ea:62:99:df:57:f6:9c:
         f4:f8:ce:89:48:4a:aa:f7:1d:3f:be:19:0e:fb:90:e6:ee:2b:
         ee:01:04:d7:a2:c3:5d:0f:3a:e0:8a:12:4c:b4:a9:a6:f4:fb:
         b6:d6:97:8f:f6:ca:72:3e:8d:5e:b9:73:e2:02:ad:4e:74:aa:
         dd:7a:dc:de:bf:75:da:1b:40:ff:12:b5:15:fd:72:a8:e7:0f:
         be:93:70:a3:65:99:c3:39:29:45:6b:36:f6:07:7c:fb:49:9f:
         c7:17:77:dd:5c:e8:e4:f6:85:44:7d:eb:ed:be:13:c0:bd:52:
         b6:93:6c:cb:54:f0:e2:55:51:0a:e0:3f:fa:92:cc:60:e5:e0:
         a7:f8:f9:e6:08:4d:0e:9a:2d:64:23:9e:e3:e4:47:bf:d0:c0:
         7a:dc:1a:dd:0e:d4:c1:92:35:69:ec:c5:b3:00:af:a2:40:28:
         1b:b8:9c:4b:16:cc:5c:86:8f:e4:9c:8d:af:4c:0c:3f:9c:95:
         ed:2a:fc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:39 2026 by rpki-client