Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
File:                     1P3VliZ9VvfOVuv67IajJwj-3gA.mft (raw, json)
Hash identifier:          M1WW3qk6kqDyXbifOt6Zdfz/ELrkwrh0Scgs8x7LePo=
Subject key identifier:   39:B0:FE:DE:4B:1B:14:9E:BB:A0:9C:FE:2C:8E:37:F0:75:A6:93:BE
Authority key identifier: D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00
Certificate issuer:       /CN=d4fdd596267d56f7ce56ebfaec86a32708fede00
Certificate serial:       019E3072583F6CFC549879B27E67F7F57D16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
Manifest number:          1916
Signing time:             Sat 16 May 2026 11:01:00 +0000
Manifest this update:     Sat 16 May 2026 11:01:00 +0000
Manifest next update:     Sun 17 May 2026 11:01:00 +0000
Files and hashes:         1: 1P3VliZ9VvfOVuv67IajJwj-3gA.crl (hash: I+TlTSO2bgoZNcEboVIRvlQq01lEbkedLMxmXeFAxfc=)
                          2: iTc4QiTRTDUVzAoc9HgTQBj9vNk.roa (hash: M7YGFKI/ySmqCxDcz0c66t0IiUvrgr0f2weY7qCCabo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:58:3f:6c:fc:54:98:79:b2:7e:67:f7:f5:7d:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4fdd596267d56f7ce56ebfaec86a32708fede00
        Validity
            Not Before: May 16 11:01:00 2026 GMT
            Not After : May 17 11:01:00 2026 GMT
        Subject: CN=39b0fede4b1b149ebba09cfe2c8e37f075a693be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:14:37:2e:64:23:fe:d2:b9:ea:02:2a:d3:53:
                    91:c3:5b:b4:1a:f9:06:f6:fd:56:30:05:52:5a:89:
                    68:61:e6:ba:53:a5:7b:cb:0f:12:61:0f:af:53:27:
                    aa:8a:45:9d:d1:da:20:e1:ba:76:cd:6c:46:3f:3e:
                    a1:30:38:bc:42:cf:d7:0d:70:5c:c3:ce:c1:da:ce:
                    8b:66:a2:c5:2c:1d:ca:cb:22:53:c2:bf:de:b9:fc:
                    e0:af:42:2a:ab:95:dd:19:08:41:05:d1:60:9c:58:
                    5e:17:ac:ad:43:45:3b:cf:d7:92:cf:f3:96:dc:86:
                    f5:12:36:20:ed:23:8d:cf:dc:a3:47:bd:49:c0:c4:
                    9b:cb:b7:07:85:08:77:b6:5c:8f:8a:3c:2e:0e:d1:
                    f0:02:cd:9f:73:91:7c:b9:d7:ea:7b:8f:41:83:7f:
                    88:80:a9:a7:98:13:46:38:77:76:d1:7e:ee:92:b6:
                    a5:78:8d:47:77:f7:d0:e6:00:7d:33:c8:62:db:1f:
                    b6:50:f9:32:0c:2d:a6:49:86:2d:3b:cc:55:17:7c:
                    60:e1:52:52:e2:05:13:e4:10:b8:86:5a:69:25:85:
                    fd:a7:be:79:a4:15:68:6d:11:6f:24:51:86:29:ea:
                    90:e2:a8:c4:3e:20:fd:73:62:4d:eb:b9:62:16:38:
                    64:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B0:FE:DE:4B:1B:14:9E:BB:A0:9C:FE:2C:8E:37:F0:75:A6:93:BE
            X509v3 Authority Key Identifier:
                keyid:D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:7e:14:74:47:60:08:ab:2e:db:d8:c0:1d:d2:21:ef:9a:64:
         b1:95:f7:a3:98:0f:e4:db:44:48:a3:d1:d0:e3:78:ba:0c:de:
         44:df:b2:30:03:ce:ee:26:cc:f7:9d:a8:ef:1b:0e:c8:c7:df:
         c1:1d:fb:e5:04:d3:4a:b5:8a:8f:57:0d:5c:da:41:6c:03:a0:
         46:0d:46:82:39:39:4c:9f:a7:5b:66:dd:36:ca:9b:91:e6:8b:
         13:79:76:e4:21:01:a0:42:e7:e2:c3:e7:c0:c7:c1:ec:d9:96:
         26:cf:e3:f4:70:06:04:65:2c:d5:c2:77:30:f2:6d:5a:0a:c6:
         91:b1:fd:dc:c6:1c:50:15:25:ad:e7:65:4e:99:11:a0:e0:88:
         cd:bd:c6:1e:ed:20:68:aa:23:1d:c6:34:92:86:29:09:ee:fb:
         2a:8b:42:49:dd:c7:3f:57:83:5f:af:3f:0b:66:6a:9d:a7:06:
         68:ab:eb:f3:8d:98:56:3e:b8:97:e2:53:86:37:4e:7d:77:2c:
         1b:49:dc:b3:f3:ec:9d:be:08:df:86:96:66:5f:96:b4:19:18:
         fe:cf:2c:51:48:4f:5b:bb:ee:5c:49:06:ea:78:75:b8:44:2d:
         35:70:82:66:f7:71:c1:9c:0a:9a:7f:86:45:fb:ef:13:b8:9b:
         aa:07:06:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:39:33 2026 by rpki-client