Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.mft
File:                     Mw5kD51jupQ6l7PcENTGhEpdPcE.mft (raw, json)
Hash identifier:          Mf+tiP0hxCjfz0rTPC7hs96p4UlFpaj+N5Hyo285opM=
Subject key identifier:   D6:34:B0:8A:40:30:4E:F1:AD:8F:52:12:7A:BA:4E:32:52:67:14:A3
Authority key identifier: 33:0E:64:0F:9D:63:BA:94:3A:97:B3:DC:10:D4:C6:84:4A:5D:3D:C1
Certificate issuer:       /CN=330e640f9d63ba943a97b3dc10d4c6844a5d3dc1
Certificate serial:       019E9093CEA22B09BD4B74609AF21667DBAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mw5kD51jupQ6l7PcENTGhEpdPcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.mft
Manifest number:          194F
Signing time:             Thu 04 Jun 2026 03:01:06 +0000
Manifest this update:     Thu 04 Jun 2026 03:01:06 +0000
Manifest next update:     Fri 05 Jun 2026 03:01:06 +0000
Files and hashes:         1: 4OOnw9_jHGgqLY_psG6GZezPHtM.roa (hash: +U00qFyQxJuR5jHOa7i18wqaZcM160zgJxPC72SDiBo=)
                          2: Mw5kD51jupQ6l7PcENTGhEpdPcE.crl (hash: 77fi9AIzwyMJ9wdodkKV1kzZh5tV8K+P9Whbimr1U6g=)
                          3: Z4u2ZuPRjtoJ1T7Bu7YaM-zHnb8.roa (hash: buF5g5hLeGHRRo3x/BwwzJhPSsDj5JSRKGK8mj4wcYU=)
                          4: cMli-vLDtEWVXqBnbPb2AmIMArw.roa (hash: yaXUPoTmaKSP0dIBZd+WqyCpfByX0KSPwLkW7J++kbI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mw5kD51jupQ6l7PcENTGhEpdPcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 03:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:90:93:ce:a2:2b:09:bd:4b:74:60:9a:f2:16:67:db:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=330e640f9d63ba943a97b3dc10d4c6844a5d3dc1
        Validity
            Not Before: Jun  4 03:01:06 2026 GMT
            Not After : Jun  5 03:01:06 2026 GMT
        Subject: CN=d634b08a40304ef1ad8f52127aba4e32526714a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ce:31:43:bb:2a:aa:e4:ff:91:ef:7f:29:8a:
                    ea:2d:84:fd:a4:75:c8:e8:a6:e2:3b:d9:9d:44:02:
                    98:52:1e:c5:a0:d2:d6:15:f8:45:5a:87:fa:85:d2:
                    99:e4:33:ba:03:0f:9d:11:6f:cb:f6:29:77:dc:d1:
                    35:67:65:b5:83:35:26:be:cf:5f:1f:89:3f:2a:c7:
                    a4:cc:e3:5a:19:24:18:6c:90:60:be:87:44:ca:60:
                    5c:a3:d2:cc:eb:44:e8:1b:51:f9:5a:44:76:51:cb:
                    b0:a3:d9:97:f4:38:6c:59:c4:65:e6:91:25:92:ec:
                    8b:1d:3d:e2:fa:d4:90:99:4e:52:cf:8a:c7:21:3e:
                    38:6a:d5:6e:ed:71:c2:eb:db:66:a9:32:e2:5c:fe:
                    9a:11:29:a6:d4:e9:e0:fc:07:6c:26:55:cc:18:2e:
                    94:ef:e2:f0:8b:ef:cc:a8:e8:35:e9:d2:b7:0c:d4:
                    91:83:83:08:c4:53:84:df:c3:ba:f2:24:fa:e0:60:
                    b2:ac:d6:06:a3:d0:3c:3f:5e:a2:8c:27:de:4b:61:
                    62:4f:10:44:84:70:d6:e4:12:72:35:f4:73:4b:76:
                    08:fd:75:ba:c0:fe:c2:b5:c9:cb:c4:9b:b6:9a:4d:
                    39:b3:31:3b:e7:50:2e:d8:7f:e2:79:09:ce:57:0e:
                    27:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:34:B0:8A:40:30:4E:F1:AD:8F:52:12:7A:BA:4E:32:52:67:14:A3
            X509v3 Authority Key Identifier:
                keyid:33:0E:64:0F:9D:63:BA:94:3A:97:B3:DC:10:D4:C6:84:4A:5D:3D:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw5kD51jupQ6l7PcENTGhEpdPcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:b5:18:3f:26:6d:12:b5:75:33:92:7c:52:e9:9a:35:58:a4:
         a8:39:94:23:d0:f8:2f:33:03:61:54:7b:03:f1:31:1b:69:3b:
         d6:66:29:ed:63:ee:89:20:cd:ba:5e:6e:84:84:38:67:d3:c5:
         e6:f7:07:8d:fb:ba:a1:f3:3f:c2:1c:19:1e:90:03:bf:7f:27:
         28:4a:ef:21:09:19:07:4b:c1:e6:93:6a:4b:05:fc:57:3b:d9:
         3d:5e:c7:5b:61:43:68:c4:06:2c:9b:3c:9b:89:e6:9e:04:b1:
         1f:0a:7b:d9:5a:42:97:bc:d5:fd:f9:8b:a4:69:c1:a9:ce:5e:
         1f:62:c6:eb:a4:4f:37:74:3c:02:41:6e:2b:ae:ea:39:d5:d8:
         8f:d1:24:2b:1d:84:9d:e0:1a:56:c6:fb:17:5f:f7:eb:7a:54:
         32:b4:e3:24:8c:f2:f7:1c:89:e6:31:ae:fd:28:58:ce:b9:60:
         83:48:7a:73:20:83:41:cd:5d:42:70:8b:a8:c3:02:cb:2d:d6:
         2f:99:82:94:ec:b7:79:f1:af:40:b3:f9:5e:bf:49:bb:38:f2:
         a2:75:5f:e7:37:70:92:40:b4:ea:64:d6:6f:ee:82:b6:5c:d9:
         cb:7e:f3:f2:1d:b1:29:80:65:04:05:a6:30:8d:06:71:9e:16:
         a5:21:90:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:03:35 2026 by rpki-client