Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.mft
File:                     4SOGDiDNss_fLO-zdToVuCKCkmY.mft (raw, json)
Hash identifier:          U/vyux7iOBuP/DVJX2lSBiCLlbsy3QxOphT5crkEJIo=
Subject key identifier:   5F:A9:22:43:8A:74:05:A0:F9:32:28:2D:BB:F5:E7:5F:19:F5:B8:11
Authority key identifier: E1:23:86:0E:20:CD:B2:CF:DF:2C:EF:B3:75:3A:15:B8:22:82:92:66
Certificate issuer:       /CN=e123860e20cdb2cfdf2cefb3753a15b822829266
Certificate serial:       019E314DEED649FC3A395641CD7BF94DA213
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.mft
Manifest number:          1922
Signing time:             Sat 16 May 2026 15:00:51 +0000
Manifest this update:     Sat 16 May 2026 15:00:51 +0000
Manifest next update:     Sun 17 May 2026 15:00:51 +0000
Files and hashes:         1: 4SOGDiDNss_fLO-zdToVuCKCkmY.crl (hash: t7DVxkw5OpZ58+98eZSn5lgEBaXPrCFjFbGsNgrraRs=)
                          2: S7Uz_I8IzeD7hTGoQXYS9N__GC0.roa (hash: FP7SIZ/7iLDFogtQKcQOvCQlmpm4Vmx1iE/C1QcnQWM=)
                          3: _0nCseq1FCkVbzbEBFv3dRP0CRo.roa (hash: OhfKgZoueIF3fYUkheqntTclHjDepm3uHFhyWV7IKyI=)
                          4: tEWXmnOT8-tMqoRFm6EyOLojzhA.roa (hash: Qf0eR7/hJrKNYOJsvae06sHOvRAjRyYfjiFaNgfMGTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4d:ee:d6:49:fc:3a:39:56:41:cd:7b:f9:4d:a2:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e123860e20cdb2cfdf2cefb3753a15b822829266
        Validity
            Not Before: May 16 15:00:51 2026 GMT
            Not After : May 17 15:00:51 2026 GMT
        Subject: CN=5fa922438a7405a0f932282dbbf5e75f19f5b811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d0:45:ee:1b:e4:6c:55:90:69:bd:2a:da:aa:
                    f4:f7:0c:73:62:67:a9:43:a7:2c:cd:7c:3e:2a:74:
                    f0:3a:cc:a2:20:20:47:4e:a5:f0:bb:3b:5c:45:5a:
                    af:f0:ec:92:85:65:af:a9:7d:c8:06:03:3d:13:83:
                    1e:08:bd:b6:d3:aa:1c:80:5e:73:b8:b5:07:b3:b7:
                    9c:6a:e3:6c:66:36:44:a1:96:7a:08:5b:ae:ac:3e:
                    4b:4d:bc:74:43:70:e0:f1:7d:77:5b:93:f4:2c:49:
                    7a:7d:78:b1:ea:08:73:05:7d:56:f9:be:c6:70:33:
                    b3:fa:85:48:a2:cf:f9:3e:48:93:2b:e4:4f:22:f4:
                    12:4a:e0:91:2f:db:02:98:0c:1e:53:2b:62:ce:74:
                    e8:98:44:14:93:3e:f8:e7:24:d4:42:ff:43:c8:ce:
                    b1:5a:c3:58:05:e9:92:24:5b:e9:ab:a1:23:80:78:
                    18:71:a8:b6:bd:e0:d1:fd:81:6a:0d:f5:bf:e1:1e:
                    af:86:be:3f:17:9f:14:ab:a4:b0:36:52:b1:34:de:
                    12:13:fd:aa:01:2b:f7:de:ec:84:df:87:14:93:96:
                    0f:20:f4:ea:32:b3:41:89:7f:58:96:3a:77:cb:80:
                    2f:46:90:14:ad:bb:a4:c4:56:ab:ec:16:dc:9f:f1:
                    cf:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A9:22:43:8A:74:05:A0:F9:32:28:2D:BB:F5:E7:5F:19:F5:B8:11
            X509v3 Authority Key Identifier:
                keyid:E1:23:86:0E:20:CD:B2:CF:DF:2C:EF:B3:75:3A:15:B8:22:82:92:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:03:dc:13:9e:d9:c5:cd:87:d8:ff:6a:94:97:90:3f:97:ac:
         11:dd:c8:61:26:4e:42:74:3d:f3:b8:8a:cd:9d:4a:68:cb:73:
         e3:49:4c:3a:bb:d5:ba:0f:84:88:2b:cd:30:e6:96:47:42:2b:
         14:b4:a6:d8:8c:22:23:e4:bd:45:2d:b8:37:cd:6c:0c:63:0c:
         20:27:ae:38:99:c4:b8:dd:95:37:d9:99:1a:17:57:34:2f:3d:
         ba:c6:d9:f8:2a:b1:e5:82:6b:d7:4a:67:9a:69:f4:75:08:c8:
         a2:ec:03:0c:6a:66:76:76:88:1b:42:ae:20:bf:93:e4:61:1a:
         4d:e9:d7:f4:37:b8:bc:f1:6b:64:da:24:84:7c:60:26:9e:f8:
         9e:28:a3:0d:2e:32:7d:b6:71:bc:cb:d4:0d:29:4a:ff:f1:60:
         0e:d1:d0:10:2b:fc:7e:09:cd:4f:bc:39:76:de:7a:a9:0a:2c:
         34:8e:c2:8d:44:94:37:07:35:6c:d1:bb:0c:24:95:42:6d:d8:
         11:b4:e2:b4:e0:66:e4:fd:12:ea:d5:4d:7b:f9:e6:84:9b:f4:
         59:23:5f:4e:53:5a:48:dc:44:9f:39:46:0c:02:f2:ce:42:f2:
         93:d7:bb:54:c2:23:37:9b:62:ab:0c:4a:f8:94:ff:b3:7d:eb:
         42:21:b2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:55:29 2026 by rpki-client