Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
File:                     sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft (raw, json)
Hash identifier:          9WsW2RsaZYOMJF30H2iu46fSy6WoVnl+7pO+K6XGYS4=
Subject key identifier:   E6:CD:1F:9B:A7:C3:7C:0E:FE:43:94:25:6F:06:D8:4B:C6:3B:38:78
Authority key identifier: B0:BE:ED:6E:DE:9E:B2:85:BD:2A:6A:BB:98:5A:DC:DB:E8:F2:77:9A
Certificate issuer:       /CN=b0beed6ede9eb285bd2a6abb985adcdbe8f2779a
Certificate serial:       019E2B15A574F7F06E42F4C59E370656D516
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
Manifest number:          190C
Signing time:             Fri 15 May 2026 10:01:39 +0000
Manifest this update:     Fri 15 May 2026 10:01:39 +0000
Manifest next update:     Sat 16 May 2026 10:01:39 +0000
Files and hashes:         1: Q-FFM01cbkfw_d8UfrmIQr3mDSE.roa (hash: SPQggi+U+SwusUS7292cc4kZDqdLk+Y6Fxy1n2N8dxo=)
                          2: sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl (hash: tlZw/4TaWznOL5Keku3Iq+RQuDU7uyiJlb5ZNYuWE5Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 10:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2b:15:a5:74:f7:f0:6e:42:f4:c5:9e:37:06:56:d5:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0beed6ede9eb285bd2a6abb985adcdbe8f2779a
        Validity
            Not Before: May 15 10:01:39 2026 GMT
            Not After : May 16 10:01:39 2026 GMT
        Subject: CN=e6cd1f9ba7c37c0efe4394256f06d84bc63b3878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:01:73:5b:99:8a:18:c1:7d:b0:29:6e:62:48:
                    c8:fa:be:1d:88:e0:c7:52:53:84:5d:31:b9:07:ce:
                    b0:97:97:50:6f:3b:bd:a8:0f:c8:7c:b2:c8:89:a2:
                    c9:70:c1:01:18:f8:16:95:43:44:98:84:09:69:95:
                    12:87:04:db:54:d7:22:ee:e9:bc:b2:2b:b1:79:73:
                    e3:16:6d:18:7f:f4:6c:11:c3:21:4d:15:83:20:9c:
                    83:d8:8e:8b:8b:55:0f:92:1b:b7:1f:0d:47:94:20:
                    3b:f0:73:04:34:81:67:e1:88:fd:49:86:8c:98:de:
                    f5:cd:c1:c1:0d:7f:cf:2e:3b:e7:e8:e4:9e:54:2d:
                    a3:70:52:fe:96:c0:98:b6:67:7e:12:6b:fb:d5:bb:
                    6c:dd:c8:48:74:34:be:b5:d3:34:c6:92:25:9b:f1:
                    f7:56:ed:e1:ad:15:29:9f:b8:25:cb:f4:71:43:9b:
                    7b:de:d3:99:56:5e:83:84:43:68:c3:81:00:fc:35:
                    2f:e1:5d:b2:b6:ac:a0:87:ec:3f:b4:4a:c2:29:9c:
                    5d:05:9f:19:5a:8d:71:f6:f7:7d:83:fc:4c:1e:62:
                    ea:01:9d:2d:61:94:87:07:11:7e:b2:e0:53:bc:a1:
                    9e:d0:b1:18:d3:7c:18:ea:10:cc:8b:23:be:c1:66:
                    57:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:CD:1F:9B:A7:C3:7C:0E:FE:43:94:25:6F:06:D8:4B:C6:3B:38:78
            X509v3 Authority Key Identifier:
                keyid:B0:BE:ED:6E:DE:9E:B2:85:BD:2A:6A:BB:98:5A:DC:DB:E8:F2:77:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:a4:24:07:e8:52:95:fb:48:b8:13:c5:61:8b:e9:7a:a1:24:
         04:d8:9a:27:ee:19:d5:2f:24:64:da:0c:dd:6a:6c:61:cc:b7:
         df:bc:c9:bc:82:f3:41:21:a1:40:dd:7c:dc:b7:d7:a0:94:5b:
         02:60:3f:ed:b3:f8:78:db:01:c4:de:5a:ab:98:0a:61:02:0e:
         e6:73:79:8c:2d:55:8e:89:02:3e:97:9f:5d:56:53:72:b9:0c:
         ad:c4:79:4c:a6:89:3a:38:1d:5d:17:77:e9:61:4e:51:35:d3:
         7d:cb:01:c5:19:f4:dd:0c:02:06:50:d7:53:94:44:12:15:ba:
         73:7b:2c:e2:13:8d:77:68:e9:0b:6a:da:59:19:83:b0:e1:0a:
         77:21:9d:bb:de:43:ce:52:ce:e4:25:31:aa:45:00:7e:1b:07:
         fa:4a:3f:6c:d9:8d:07:9b:31:e2:ea:a8:b8:3b:17:9b:b2:83:
         69:fc:7d:b7:fa:29:ec:5e:cb:86:45:7f:30:e2:3f:b7:cb:53:
         58:82:3f:eb:30:88:4c:c0:24:40:51:04:86:44:27:ae:da:7b:
         e7:93:37:2e:d6:25:23:e5:c7:1b:d9:01:5a:e2:97:07:24:1e:
         83:93:a2:6c:46:be:61:9a:03:8b:b6:d3:c7:9c:41:6d:f8:3a:
         e6:d4:3d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 17:55:45 2026 by rpki-client