Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
File:                     X75lriPyB_ppUlX1WpB6wWCL4JQ.mft (raw, json)
Hash identifier:          GZ5M9nM0YbcfhTBWS8sEqBVS8CzTEm6BTYcaSrZz7oI=
Subject key identifier:   97:2E:16:BF:C4:8B:92:22:62:A2:2C:08:98:DE:E4:2A:93:C6:8A:8B
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Certificate issuer:       /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial:       019DCE6277FA87DA4B36DADAA57E70864D19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
Manifest number:          190C
Signing time:             Mon 27 Apr 2026 10:00:52 +0000
Manifest this update:     Mon 27 Apr 2026 10:00:52 +0000
Manifest next update:     Tue 28 Apr 2026 10:00:52 +0000
Files and hashes:         1: 1-BEhUmO0ut6OA3qSvrHuFMRpZQE.roa (hash: yam/iELTfsrH6RDASPXjvZYKSY1utqMhfRTVx8Az1Po=)
                          2: 9D820He12zEiGHJY2yEp95HuOYo.roa (hash: JgNweIsliEaUH1GQxpLBgGrSQ23iPTPHkKTdFr797ts=)
                          3: KMCOEHYpazO7T6bWY0LaX2m-j7w.roa (hash: 20b0Fc3/XITArGiqFeYU955jlc5muGkhCh5/TsR/5ig=)
                          4: P-jvPlaLL6rr2ui5e9D6YWxhu9w.roa (hash: DDSuenDK/kT9T6J/tQTGQwxbDy3mpq7Bc6isbXiDO5I=)
                          5: TieuC1DoyThjRQq3uG3ihjLScTo.roa (hash: vC9rnpVx2T8cbVOPfkfZTZYOxBuzPINUpSnwkUZDkSE=)
                          6: X75lriPyB_ppUlX1WpB6wWCL4JQ.crl (hash: 9ZMC9TWtXL/K9GAAw1FmNswz4PM2pEixlDtoXuOzmds=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 08:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ce:62:77:fa:87:da:4b:36:da:da:a5:7e:70:86:4d:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
        Validity
            Not Before: Apr 27 10:00:52 2026 GMT
            Not After : Apr 28 10:00:52 2026 GMT
        Subject: CN=972e16bfc48b922262a22c0898dee42a93c68a8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c8:19:90:44:40:d7:08:d8:e5:ba:78:ef:20:
                    8d:8b:cb:ee:84:ac:53:91:c8:ea:c8:d9:c4:f3:1c:
                    e5:a3:c2:cb:14:27:af:af:93:34:ff:d6:b9:d1:e5:
                    61:c8:db:c9:08:5f:85:84:fc:f3:89:f2:e5:0e:89:
                    69:18:0e:66:b5:ff:13:4c:38:9b:78:2e:e7:fc:dc:
                    65:39:ed:4a:65:db:0c:f2:75:63:5c:a0:63:96:9f:
                    ea:d8:15:7a:fd:87:73:eb:fe:13:fd:43:cb:e2:2b:
                    87:d5:e1:b9:03:3c:bd:3d:8d:72:9a:9d:47:82:37:
                    ad:ae:e4:49:68:07:06:d8:b3:8e:2b:e3:8a:c8:06:
                    31:64:98:1e:59:b9:a7:94:53:71:c3:2a:73:9c:3d:
                    43:76:7a:76:38:ec:be:50:31:79:86:14:d9:e3:64:
                    d5:91:4b:31:9f:32:73:5d:b9:47:85:66:a3:ba:88:
                    69:19:92:6a:42:9e:4b:f5:8d:26:7e:2b:8d:3b:3b:
                    a5:0f:28:d0:6b:4e:22:f8:1d:88:32:c9:37:f8:aa:
                    08:06:20:81:9e:8a:a2:f0:89:d6:8f:87:b5:0a:af:
                    b0:ce:b0:a9:8f:09:90:fb:3e:09:1b:2f:79:10:b2:
                    ca:49:47:b1:5e:e9:f1:89:8e:e5:d2:13:a8:8c:1a:
                    8d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:2E:16:BF:C4:8B:92:22:62:A2:2C:08:98:DE:E4:2A:93:C6:8A:8B
            X509v3 Authority Key Identifier:
                keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:c8:76:a0:b2:e5:13:6f:61:7b:62:db:85:1d:5e:70:ca:2c:
         4d:9d:a1:1e:90:74:41:fa:eb:8e:74:ae:8c:20:35:28:f4:bc:
         eb:22:8f:b6:a6:b5:26:ed:fe:ee:3b:2e:3b:8a:c3:56:0d:6a:
         62:9e:f7:f3:7d:e8:13:88:af:d1:d6:56:f5:f7:18:55:25:4a:
         53:6b:ae:f6:9c:70:bc:1a:f4:6d:4a:b7:6d:c9:cf:21:db:08:
         32:e4:07:d7:13:c1:3f:ee:75:26:8c:3c:bb:a1:86:f8:df:1d:
         4f:11:b6:11:96:7d:50:26:2f:12:b3:c9:4c:c0:20:85:ac:62:
         77:52:3e:a6:cd:72:fb:b1:9f:73:a0:d6:64:f9:b1:9c:b1:4d:
         47:bd:0f:fc:5c:1f:08:e8:08:9f:ab:af:b9:57:03:31:c2:1c:
         54:2c:36:ac:52:5c:97:60:71:94:a7:f2:8a:77:67:62:b5:a2:
         67:33:91:90:3a:a1:36:fa:e1:29:35:94:0f:22:bb:27:91:6b:
         95:80:11:67:2f:de:86:de:07:1d:79:01:06:68:0f:35:e1:b3:
         f7:4c:ca:b9:e1:cb:0c:fb:5d:6d:61:a0:21:d7:28:07:8f:c9:
         bb:a6:c5:23:7e:60:94:7e:ce:31:c1:b7:df:79:a3:07:e1:40:
         04:2b:2c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 12:38:48 2026 by rpki-client