Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
File:                     1-aNSD9nCmaKHTfXke2MCpCUqcms.mft (raw, json)
Hash identifier:          bRZBhKDsnaPh8I46+k6c3xCY/fgDcbQRjRbNJkwyxMs=
Subject key identifier:   69:42:B7:73:02:FB:FF:08:5F:9A:92:5D:8F:39:16:DC:4D:19:A5:97
Authority key identifier: F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
Certificate issuer:       /CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Certificate serial:       019E2F5F8F7E940A630CF50DEB3B193FC3C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
Manifest number:          190F
Signing time:             Sat 16 May 2026 06:00:52 +0000
Manifest this update:     Sat 16 May 2026 06:00:52 +0000
Manifest next update:     Sun 17 May 2026 06:00:52 +0000
Files and hashes:         1: 1-aNSD9nCmaKHTfXke2MCpCUqcms.crl (hash: sxPfNXDGv00RYkbYglkGXbxMEjCA3dZhCx4HRcS3wWw=)
                          2: N-LVGcOt1MezkkjodOon2CCwIQE.roa (hash: dnw95zCsk17+SCVYKoXvBd4Jkoy6x8AD/1mR659V304=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 06:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:5f:8f:7e:94:0a:63:0c:f5:0d:eb:3b:19:3f:c3:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
        Validity
            Not Before: May 16 06:00:52 2026 GMT
            Not After : May 17 06:00:52 2026 GMT
        Subject: CN=6942b77302fbff085f9a925d8f3916dc4d19a597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:05:d2:84:54:91:2c:d8:bd:8e:9e:65:61:9d:
                    1b:00:77:e5:c6:d4:47:0a:8b:cc:c5:a5:52:ee:12:
                    a9:1c:d7:37:c2:db:ee:c9:26:29:de:35:2c:f6:d0:
                    6e:91:e1:9a:28:66:ab:da:b3:a1:b4:3e:6e:04:2e:
                    74:da:74:68:3b:1c:a0:0f:33:3e:24:a8:0b:e3:29:
                    ba:8f:8f:57:c5:de:aa:d3:36:46:6f:ff:9b:07:bd:
                    d0:69:4c:52:e7:4d:21:e6:a4:10:25:5a:d8:d0:bd:
                    84:73:36:f9:26:06:99:72:17:41:cc:49:45:69:7b:
                    f2:e2:82:42:2f:c4:39:00:81:ce:bc:8c:7a:6f:ac:
                    ae:61:8b:37:f3:b0:f7:5a:d4:ca:03:43:30:b2:7e:
                    0d:14:10:d3:c7:4c:51:16:43:bc:29:39:85:f6:3f:
                    e5:0c:75:b0:2d:d1:1e:31:b6:32:97:ca:61:ef:25:
                    b9:c2:78:2d:3f:e7:32:01:32:94:6e:07:30:df:21:
                    c3:04:cf:dd:6d:b5:ae:7d:d2:ff:4d:43:37:26:2c:
                    e4:a2:a5:09:43:93:ba:53:be:0c:b4:56:e9:06:b1:
                    01:ae:cd:54:b7:74:cd:ea:2a:65:8a:cc:6a:87:e5:
                    d2:9a:3e:a8:8f:77:13:ce:70:56:dd:f8:ef:e3:2a:
                    2c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:42:B7:73:02:FB:FF:08:5F:9A:92:5D:8F:39:16:DC:4D:19:A5:97
            X509v3 Authority Key Identifier:
                keyid:F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:4f:bc:a8:4d:a3:d5:67:d4:59:b8:92:cf:7c:80:59:59:22:
         ac:ba:b6:fd:9e:8f:07:ac:9a:93:1d:c6:0e:a6:a2:0b:6d:b5:
         f8:b0:cc:b8:86:cd:a1:f1:84:d6:24:29:48:7e:60:38:b5:96:
         43:de:82:97:37:9a:75:23:66:43:23:0f:f5:dc:cd:4d:39:90:
         d9:91:82:b6:66:de:7f:68:00:a1:c6:ac:5d:ec:72:fe:67:89:
         64:b8:06:82:5f:c2:d2:7e:85:e2:b0:91:11:34:fe:ac:6f:b1:
         1f:9a:e6:1d:ca:83:7f:c5:b7:42:bf:01:b1:bb:89:fc:a5:57:
         ea:f4:c4:7d:78:9f:c2:4d:b6:ad:17:b2:d9:65:51:9a:4e:09:
         fe:6d:c6:93:da:ec:27:67:f2:37:67:de:7e:52:57:9b:c2:78:
         d2:bf:d3:bd:9e:a4:89:6e:96:bc:c6:43:bc:3e:3d:6a:9f:c2:
         f0:1b:c3:ea:9d:f6:8c:61:9e:27:34:54:f9:0f:ab:b0:cf:d5:
         90:15:ee:c5:41:ea:6f:3c:8f:d2:af:24:fa:ef:3a:99:9b:e1:
         5c:41:b8:e5:d5:ef:c7:e8:b2:6a:51:2d:87:ab:5d:de:0d:d2:
         67:48:b2:7d:33:76:b8:67:6b:cf:34:2b:ff:0b:41:e3:6d:3e:
         9a:11:0d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:21 2026 by rpki-client