Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft
File:                     idvHFWpO58Z9nmhHZ6L0uvijW6s.mft (raw, json)
Hash identifier:          CInZJzf1/wGTVIvFXzhZKZ5NCagcUcHjl3Bk51cPGVw=
Subject key identifier:   1F:4C:49:5E:6D:F5:3B:EA:18:1F:EC:6E:D8:8B:DE:64:3C:23:C9:B1
Authority key identifier: 89:DB:C7:15:6A:4E:E7:C6:7D:9E:68:47:67:A2:F4:BA:F8:A3:5B:AB
Certificate issuer:       /CN=89dbc7156a4ee7c67d9e684767a2f4baf8a35bab
Certificate serial:       019E57ED7E9AF1E9FB839086B557BE91FD1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft
Manifest number:          192A
Signing time:             Sun 24 May 2026 03:00:42 +0000
Manifest this update:     Sun 24 May 2026 03:00:42 +0000
Manifest next update:     Mon 25 May 2026 03:00:42 +0000
Files and hashes:         1: 0CdqlW01ACbv3EQD2O6eNsK9tUw.asa (hash: 9WhwZoBfEGd5k4zvC4ZA/vr5vp3EXDon/OkKYutAIU0=)
                          2: GBd4rVL5dJN0-9cuwhBBwNEyoV0.roa (hash: iRjXs3gr4L7byQxpcKRUar4Pisuwylgwnacqi0QdLQQ=)
                          3: PLZ1UvYELfgIKPLrh6OHNKK9acc.roa (hash: Shni7jpvErA8s5MzWpDHouyJxJ3M6Tbya9IWgb+KMM8=)
                          4: idvHFWpO58Z9nmhHZ6L0uvijW6s.crl (hash: EokLZtiAvjS+OzTItycrbJ9xWQMAXynzHzpOJIHzImc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 May 2026 20:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:57:ed:7e:9a:f1:e9:fb:83:90:86:b5:57:be:91:fd:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89dbc7156a4ee7c67d9e684767a2f4baf8a35bab
        Validity
            Not Before: May 24 03:00:42 2026 GMT
            Not After : May 25 03:00:42 2026 GMT
        Subject: CN=1f4c495e6df53bea181fec6ed88bde643c23c9b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ec:a3:b7:38:aa:cc:de:3d:e0:56:c6:83:09:
                    e8:8e:a1:da:01:96:e5:1a:18:79:f1:3c:10:83:81:
                    32:24:21:c3:80:8c:58:14:ee:30:8b:16:c2:34:14:
                    07:b7:0b:31:21:68:27:27:4f:d0:65:7e:40:e7:10:
                    9c:11:c1:e8:9c:91:91:dd:d6:4a:11:b4:c0:ee:7b:
                    8e:25:b8:a4:fd:1d:be:61:21:c6:13:ea:dd:da:19:
                    41:70:b3:17:4e:00:c4:e2:33:6e:b7:da:7f:32:f7:
                    53:b1:5b:f4:1c:6c:c0:b7:48:07:fd:76:00:a5:44:
                    5a:4c:d1:4e:9a:02:79:e3:7f:01:e0:94:d6:3e:1d:
                    29:54:7a:07:da:25:5a:cc:c9:53:db:5a:ff:d3:88:
                    09:f0:2c:f1:f5:16:be:9b:52:26:9e:15:87:57:37:
                    1d:10:97:f1:80:94:49:0d:ab:16:90:fd:af:2c:f1:
                    d7:47:84:f0:bc:3a:19:d8:75:2d:c9:16:52:d3:7c:
                    2f:78:72:d0:63:9c:ac:90:27:dc:51:2d:6e:83:3c:
                    6b:97:a3:c9:03:bc:3f:49:90:8e:11:b4:23:16:da:
                    9b:41:e6:5a:44:22:52:4d:f3:54:59:d8:46:03:47:
                    54:0a:18:0d:fd:a1:15:07:49:26:8f:a5:f3:2c:e2:
                    02:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:4C:49:5E:6D:F5:3B:EA:18:1F:EC:6E:D8:8B:DE:64:3C:23:C9:B1
            X509v3 Authority Key Identifier:
                keyid:89:DB:C7:15:6A:4E:E7:C6:7D:9E:68:47:67:A2:F4:BA:F8:A3:5B:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:26:6b:e2:f4:cc:19:ce:c2:ce:7a:a0:ca:7d:c0:e9:02:62:
         38:86:7d:ae:5f:e3:0a:bb:88:77:f3:7e:53:6b:82:49:f9:b2:
         0f:62:fa:21:1a:8a:87:d4:77:4e:f1:a5:26:c5:44:b9:ca:ca:
         9c:15:e3:41:59:2a:1d:84:6e:00:ad:9e:13:6f:4e:02:ee:e1:
         92:c6:d1:ca:b8:f6:bf:75:9f:cb:d5:5e:8f:31:9b:d0:0b:8f:
         91:06:08:95:79:b8:c0:07:49:2d:b1:9d:eb:04:aa:4f:5a:e4:
         72:a0:87:fe:34:96:4e:2a:2c:d9:db:b9:5e:88:44:55:49:8b:
         eb:28:31:25:80:39:fc:a8:b5:b8:19:91:71:2d:cc:12:9d:ac:
         5c:73:48:ba:bd:64:aa:86:78:c5:2c:4c:4d:39:d5:6b:93:5b:
         af:2b:ce:d3:08:b4:57:e5:de:ee:d9:8e:5b:b4:25:cd:9f:e0:
         a3:7a:58:af:bc:29:69:86:53:8f:07:c4:24:c9:ac:4f:9b:26:
         82:a5:1d:bf:3d:29:1f:98:6e:5b:80:91:80:39:81:b3:41:6f:
         31:0f:fc:7c:f2:59:9f:21:12:f0:0b:98:64:c8:95:8f:04:4c:
         0a:3a:46:62:2d:f4:eb:cd:01:19:ec:52:f2:40:ba:2c:59:d0:
         44:40:36:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 04:38:13 2026 by rpki-client