Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
File:                     9EjuY_GdDB8ixvYc5Kgezqu455A.mft (raw, json)
Hash identifier:          sP7EOyqVFjatPM9IBNiluuhwrNHVgWlV29de4deWAmU=
Subject key identifier:   0D:4C:6F:38:F8:61:A8:2F:C1:A0:3D:4E:D5:DA:CE:74:7D:5B:6C:2E
Authority key identifier: F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90
Certificate issuer:       /CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
Certificate serial:       019E3185123D57810FAD8F0F72A8CE95759B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
Manifest number:          1912
Signing time:             Sat 16 May 2026 16:01:04 +0000
Manifest this update:     Sat 16 May 2026 16:01:04 +0000
Manifest next update:     Sun 17 May 2026 16:01:04 +0000
Files and hashes:         1: 4QMkscbS6Pf39LzeH_MVqzG_9Ak.roa (hash: m7wSLBG3yMM59qxFhuh+wuLPCbDahbo3ByN0pwy2TGw=)
                          2: 9EjuY_GdDB8ixvYc5Kgezqu455A.crl (hash: EJHrt2hiMW+d7WOfUaxFPUKx2e9BWrjkr+yM7zX51XM=)
                          3: d6fj2hsf73awFuJ9_OrVwzH3RUU.roa (hash: q5EEFAAUQDhZrlGyPfpObbd8Uk9pSouDXHiB9RSx/i0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:85:12:3d:57:81:0f:ad:8f:0f:72:a8:ce:95:75:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
        Validity
            Not Before: May 16 16:01:04 2026 GMT
            Not After : May 17 16:01:04 2026 GMT
        Subject: CN=0d4c6f38f861a82fc1a03d4ed5dace747d5b6c2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:23:2e:16:2d:4e:b7:d5:39:09:44:1a:6e:33:
                    a4:d0:88:72:14:56:24:0e:30:f5:1f:dd:46:71:fd:
                    6a:a9:74:e7:0f:c4:41:3e:ca:eb:ba:4e:3c:95:aa:
                    0b:8c:95:ea:83:b3:39:70:40:2e:bc:eb:cc:5f:a2:
                    ba:a8:4d:b1:b3:96:37:5e:b5:a4:b4:1d:20:d5:06:
                    4a:45:01:dd:9b:cd:7f:e2:5a:d6:ce:07:8f:d7:77:
                    b3:22:9b:eb:eb:2c:e2:5e:45:94:5a:2e:fc:ac:96:
                    17:22:cd:b1:7b:34:0e:ef:83:2a:0d:6a:94:02:40:
                    ea:93:66:98:8d:79:e4:c8:67:ef:8a:a8:55:9a:fc:
                    6d:f9:e3:c5:24:48:89:03:cb:a4:05:6b:1c:59:77:
                    3c:dc:d4:e6:77:e4:a6:42:8a:79:34:48:5c:af:01:
                    ea:29:f1:84:5e:eb:9f:2d:e3:af:ea:93:64:ce:44:
                    76:06:fe:f5:b6:79:55:58:b7:ea:a6:e5:95:f0:30:
                    ec:86:89:9c:d8:c5:07:1c:ec:87:e2:59:60:61:25:
                    f6:47:99:1a:5f:5a:c1:42:80:4b:d4:6c:47:76:cc:
                    cd:28:ec:d0:b7:01:db:6c:2b:86:d6:bd:88:24:6e:
                    ac:e7:e8:88:6d:8a:eb:4b:e4:de:c0:5e:77:bb:5b:
                    15:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:4C:6F:38:F8:61:A8:2F:C1:A0:3D:4E:D5:DA:CE:74:7D:5B:6C:2E
            X509v3 Authority Key Identifier:
                keyid:F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:99:ce:08:03:ad:7b:74:45:e3:52:ad:64:5a:3f:0a:e5:96:
         b8:c7:b3:34:2a:0c:3b:48:7c:22:ce:61:77:12:98:88:e4:0b:
         de:dd:ca:3e:94:12:46:39:80:d6:22:90:19:c3:55:62:f4:a5:
         45:05:21:60:9a:6c:5c:87:35:b5:b3:c0:8e:ac:95:3f:f7:2b:
         67:76:a8:f6:85:5a:41:db:72:81:fb:c8:a1:7d:dc:fa:46:22:
         ba:db:e4:c4:20:1f:31:50:80:21:79:20:b0:1d:7a:fc:0c:b9:
         81:f4:30:50:90:d2:ce:88:44:45:be:0e:5e:59:af:54:0c:c3:
         96:d2:4a:e1:8b:9d:ad:40:e8:da:d9:13:10:8e:3b:30:49:b0:
         d0:ca:f7:cf:a4:da:65:f0:83:3f:96:53:5d:99:8f:bf:70:06:
         d5:ac:c2:c6:27:9e:e6:47:49:91:80:19:fa:b1:db:41:71:58:
         89:a1:d8:e0:45:08:99:cb:bd:b4:a3:11:0c:2c:c8:3d:01:84:
         fc:f0:fc:eb:3c:9f:0e:b0:e6:b7:91:27:fc:33:53:07:3c:49:
         50:b3:21:9a:d9:0a:24:02:fe:f1:3b:fa:84:0c:46:9e:e6:40:
         03:52:42:8d:c5:9f:40:1c:35:38:8f:16:61:42:0d:d1:4c:92:
         3d:87:96:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:56:02 2026 by rpki-client