Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
File:                     r-xPShbMUb1RYhARU5zrV0rBXQI.mft (raw, json)
Hash identifier:          UGnfgF7Wtt0lu3lJd60vLmL1KB4NnvQkAsE/DwxxOzU=
Subject key identifier:   4A:13:C3:8B:CD:77:AD:89:1F:35:55:21:5D:8A:F6:40:02:4C:FF:D3
Authority key identifier: AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02
Certificate issuer:       /CN=afec4f4a16cc51bd51621011539ceb574ac15d02
Certificate serial:       019E2881D65E60C35EA8DA1FCA7EDC9B9DE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
Manifest number:          1912
Signing time:             Thu 14 May 2026 22:00:58 +0000
Manifest this update:     Thu 14 May 2026 22:00:58 +0000
Manifest next update:     Fri 15 May 2026 22:00:58 +0000
Files and hashes:         1: 1-kk5YtawRkJQwdDT4MsBuFBc3Yo.roa (hash: Aamvd7Z6s9hiJAa6DbrukXmWAwrVI2PPj/AOKYI7G4U=)
                          2: PoqWbVHh-FUr2dkHNr-gmxi2c-8.roa (hash: YLgUsuGSocGrObs4G25+Ghw9LtEJ63hht/5KGdZnHW0=)
                          3: pjM3LX3IWBwhVZCLWvigLJvSQJQ.roa (hash: 3UYX3NqDLCGEU8dgjIHi5102NNO+66HkfR/cZxzpA3A=)
                          4: r-xPShbMUb1RYhARU5zrV0rBXQI.crl (hash: osjHiz/DgeHCyj2FJOJDMNRtXO6ucQtu1VwH1Bvjh48=)
                          5: t5ZpdQdakz93WmXWJ_al0M0qYog.roa (hash: ZYC1omK7NgO2nQPCpRlt52kAchXz0Fe3jlMw43xrEYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 22:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:28:81:d6:5e:60:c3:5e:a8:da:1f:ca:7e:dc:9b:9d:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afec4f4a16cc51bd51621011539ceb574ac15d02
        Validity
            Not Before: May 14 22:00:58 2026 GMT
            Not After : May 15 22:00:58 2026 GMT
        Subject: CN=4a13c38bcd77ad891f3555215d8af640024cffd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b9:dc:94:c6:30:1b:83:5d:5d:e8:1d:5e:bf:
                    68:47:56:2d:96:3d:b8:57:f7:b7:7d:ce:55:91:9e:
                    e4:85:b5:79:b8:40:00:50:2f:d0:5c:27:2f:5f:8c:
                    a4:56:e6:c0:87:39:04:9e:62:04:9b:99:aa:6a:86:
                    64:67:a6:8c:c9:7d:51:f0:e7:bb:7e:b9:e4:1f:b4:
                    de:46:00:11:af:00:63:66:e1:6a:5c:9e:4d:66:92:
                    4e:3e:36:1a:5a:05:f7:b5:f0:a2:51:6e:6c:06:f2:
                    ba:4f:2e:b5:78:fb:30:eb:cf:a8:c4:90:e1:a4:6e:
                    96:98:bc:df:be:9d:c9:e7:d5:6f:39:53:cd:49:f3:
                    91:dd:c6:93:96:a8:29:a1:de:3f:74:69:1c:5a:92:
                    e0:77:6d:16:cd:97:93:bb:ea:7e:63:6c:1c:2e:61:
                    f8:b1:27:4e:95:5b:10:6e:40:92:eb:05:6f:9f:34:
                    4c:27:52:b3:fc:3c:a7:dd:db:f1:eb:f6:ef:96:3a:
                    01:d9:5a:5b:0d:fc:87:33:39:10:3e:61:46:57:4e:
                    6e:ed:b7:82:ef:84:5a:6e:49:62:63:c7:15:77:56:
                    a1:24:e7:a4:59:7f:ed:67:5d:c2:ea:ae:e5:49:91:
                    52:60:71:a8:1c:d1:e3:84:c6:26:6c:df:37:62:a2:
                    05:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:13:C3:8B:CD:77:AD:89:1F:35:55:21:5D:8A:F6:40:02:4C:FF:D3
            X509v3 Authority Key Identifier:
                keyid:AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:7b:08:cd:19:34:74:80:7f:ac:0a:4c:23:e9:dd:cf:a7:ef:
         2e:24:f1:3f:ff:6f:e0:6c:cb:62:b0:52:03:5a:4f:0c:a5:dd:
         76:6d:4c:c2:fa:95:a2:3d:af:d8:2f:59:89:79:3c:82:35:23:
         ac:1d:a0:69:2e:9d:8d:dd:8c:f9:67:27:82:67:a3:7a:da:a4:
         5a:8f:26:72:12:72:86:41:d4:02:f0:77:0e:09:0c:4e:d9:d2:
         7b:3a:11:75:17:66:e9:8f:4b:34:0f:9a:7b:0d:89:6c:d8:82:
         53:16:31:75:05:32:9d:84:83:b3:2c:5f:43:c3:78:f1:63:5d:
         ab:51:96:a3:c1:69:0a:ea:e6:06:7c:c7:47:6b:03:33:3c:1d:
         1b:33:3e:b8:8a:f6:b5:ee:de:ce:fb:ab:3e:e3:0c:b5:db:64:
         3b:1e:74:65:52:cc:8e:97:56:0c:1f:1d:2f:88:38:03:a0:68:
         fd:1b:24:d3:8e:42:03:f5:f2:e1:1c:47:9e:1d:cb:93:fb:ea:
         ac:8c:68:6c:0e:51:f0:59:cd:70:f3:cb:f1:58:d9:0f:30:83:
         28:68:c1:a8:ce:3c:9a:6e:60:45:50:fc:5e:69:b6:76:6c:8b:
         11:59:1c:8b:6f:12:73:48:8a:9f:50:6b:24:26:f0:a9:e3:94:
         e1:e2:bc:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:59:37 2026 by rpki-client