Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
File:                     89SUuLJxr7fGLxOX9xLPLc02QYU.mft (raw, json)
Hash identifier:          nc6b1kBYvESuyft+NjrUuLkWdhpCJeKqEc0MHbHN/8c=
Subject key identifier:   65:16:1C:EC:62:87:60:FC:0D:0A:F7:99:4A:F1:D5:E6:97:A2:DA:38
Authority key identifier: F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85
Certificate issuer:       /CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
Certificate serial:       019E2C276681B0E512755827B69906DA36CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
Manifest number:          1911
Signing time:             Fri 15 May 2026 15:00:39 +0000
Manifest this update:     Fri 15 May 2026 15:00:39 +0000
Manifest next update:     Sat 16 May 2026 15:00:39 +0000
Files and hashes:         1: 89SUuLJxr7fGLxOX9xLPLc02QYU.crl (hash: nAGB7TuCGhWftLHN9SUIeJ1l4oIBTjQlnQnvIOYFvyI=)
                          2: mhvprDFBImPl7iFEWW3FxFWOZ6g.roa (hash: YcvQtGrqc9rsfbkzmvXWNEdP5V2+qw1zO++Zl2+6+Eo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 15:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2c:27:66:81:b0:e5:12:75:58:27:b6:99:06:da:36:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
        Validity
            Not Before: May 15 15:00:39 2026 GMT
            Not After : May 16 15:00:39 2026 GMT
        Subject: CN=65161cec628760fc0d0af7994af1d5e697a2da38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:52:00:01:89:d4:1d:c7:a8:90:38:8f:a7:44:
                    dd:6f:e2:54:5b:bd:df:c7:04:3c:e7:e3:39:f2:24:
                    a0:25:9d:4f:b2:1a:8d:98:37:3e:91:08:97:05:9e:
                    70:6e:45:60:65:c8:60:7d:5c:17:e3:36:1d:a4:d2:
                    48:42:c5:82:14:20:e1:02:d2:3e:8e:8f:ae:27:39:
                    83:97:34:c5:c7:8b:36:92:2c:af:b3:a2:b0:cc:b1:
                    00:ef:a7:14:ff:8a:6c:9b:5a:e4:06:6f:98:d7:01:
                    44:77:3b:e3:16:fc:63:b1:5e:8b:7d:6b:1a:16:3c:
                    e8:31:14:c5:79:32:48:16:84:35:fa:d6:2a:e8:8c:
                    41:12:3e:0c:c2:e9:a0:b8:2d:b2:c9:21:55:81:13:
                    c7:6e:17:b2:92:e8:77:75:a6:86:4e:6d:df:40:96:
                    f9:09:cb:ee:bf:39:96:4e:4e:5e:40:f7:8c:56:68:
                    11:6a:4d:48:05:6e:61:0d:a1:a7:4c:e5:63:ff:ee:
                    f3:b9:0a:fa:15:14:19:30:29:85:72:76:b6:65:3d:
                    b1:e2:20:06:ff:da:99:0a:68:e9:2b:80:78:8d:ea:
                    cd:89:27:dc:41:cf:01:c6:39:42:56:e4:9d:91:2c:
                    66:07:9a:73:e0:7a:f4:9c:8c:b8:fe:0d:fe:4d:e6:
                    cd:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:16:1C:EC:62:87:60:FC:0D:0A:F7:99:4A:F1:D5:E6:97:A2:DA:38
            X509v3 Authority Key Identifier:
                keyid:F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:ee:57:43:76:0d:99:68:84:7a:f1:aa:22:1b:b8:ae:76:19:
         39:26:d4:62:91:60:8c:ae:c2:5a:8a:af:d6:7b:ae:0d:be:f1:
         17:4b:ac:51:01:48:5a:f4:06:70:38:34:47:73:d3:90:9c:36:
         75:61:8f:40:92:24:71:dc:a2:4c:4d:27:a4:8d:ae:c5:89:42:
         a6:21:ea:51:4e:8e:84:08:65:1d:87:13:dd:15:94:80:5b:2e:
         0b:08:c3:7b:97:df:98:d2:a2:df:19:ef:cd:6a:d8:79:18:05:
         e0:ec:2e:3b:31:0d:08:c1:55:d5:6e:e4:57:58:27:54:68:ae:
         ec:07:23:d3:c6:15:1a:3e:d0:8f:6f:7a:c4:e1:c1:77:2a:cd:
         60:90:ff:c6:41:9b:d6:c9:98:ac:9a:05:f2:58:2d:b7:2f:a7:
         7f:13:f9:38:fb:2e:a3:13:86:12:3c:2f:c3:e2:56:68:f0:f6:
         24:f3:83:3e:f2:5e:a5:dc:59:2f:bd:58:f7:37:ce:b9:0b:3e:
         ee:62:bc:52:93:49:27:3a:59:7f:3d:8f:b4:81:b0:dd:27:7d:
         a8:b7:15:f5:82:7e:92:e8:47:40:05:ba:94:0b:19:e9:a0:9c:
         40:91:21:fb:55:39:d8:52:78:c8:15:3b:cb:dc:05:a3:50:cd:
         68:91:8c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 23:08:08 2026 by rpki-client