Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
File:                     PDULqC8_61ruKJOPvxsJweL9GbQ.mft (raw, json)
Hash identifier:          63q/aSGl/RaitLU//YZ3OcuglA6pzfWtRHdOusLlCjk=
Subject key identifier:   ED:0F:81:6E:07:98:18:E8:49:C3:95:84:2A:36:0C:2F:CD:23:BD:40
Authority key identifier: 3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4
Certificate issuer:       /CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4
Certificate serial:       019E246E7522B6D4C5E661E112FC5AC8267F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
Manifest number:          190A
Signing time:             Thu 14 May 2026 03:01:19 +0000
Manifest this update:     Thu 14 May 2026 03:01:19 +0000
Manifest next update:     Fri 15 May 2026 03:01:19 +0000
Files and hashes:         1: 3LaL7uXB-UYgWuSk1gGwpH4emtk.roa (hash: SZi8GiIOhAGOw0aZ9QVtTEgPlEhqv8CHu5L26uxGnTw=)
                          2: OKvF1jZUD1oQ8vjnPvKbRctzA_Y.roa (hash: TURUpo5c7V3B7eiBvFVs4P/z+qyI+1sdNbYu2NhorzE=)
                          3: Op5GYXPNrxg_HfwVEuFZeHOadM4.roa (hash: uIjeZZuq23pgTgw8/rbcHVuGWjLz/Rc1HlKQEVLAUp8=)
                          4: PDULqC8_61ruKJOPvxsJweL9GbQ.crl (hash: T/I6kc2nTXZ/nt0/MQvGY0OQRDVBRwZpre9ADTJklIs=)
                          5: kFJJEyTKADp1baTJnM1zkurd-AY.roa (hash: 6YWt+74Liha4YiPIKXVwr09uzTbyh63tPVdg3eh1Ecw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 22:13:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:24:6e:75:22:b6:d4:c5:e6:61:e1:12:fc:5a:c8:26:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4
        Validity
            Not Before: May 14 03:01:19 2026 GMT
            Not After : May 15 03:01:19 2026 GMT
        Subject: CN=ed0f816e079818e849c395842a360c2fcd23bd40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:27:6e:5e:51:17:51:45:94:6e:3f:42:48:f9:
                    d7:b7:99:3b:ac:78:f4:b6:06:80:6a:83:97:b0:f1:
                    81:b8:d7:8c:b9:16:3d:ea:56:73:30:6f:4d:9e:0a:
                    ae:17:80:5a:92:ec:9e:8f:b5:c3:e6:56:12:74:4d:
                    bc:0a:fc:18:fc:bb:4e:c4:dc:34:91:c4:90:75:f6:
                    26:5a:88:ee:e6:e2:64:35:9e:a7:d2:cc:c4:89:52:
                    7a:f8:02:d9:3b:9f:55:87:cc:11:8f:09:6c:c5:81:
                    28:0f:e0:7f:e9:7d:9d:90:90:89:a5:06:2d:1e:44:
                    e2:48:f6:c6:ea:04:c7:9b:7c:5b:e8:36:5f:7e:88:
                    17:1b:44:df:e6:d3:dd:f0:af:18:d5:e2:0c:44:6c:
                    b8:95:5a:bc:59:e2:22:8b:20:b1:24:29:2e:c0:f1:
                    68:e5:56:ab:2d:0f:25:c6:35:87:bd:34:07:c9:4d:
                    a3:04:00:7c:62:51:f3:b0:80:17:9b:0f:62:3b:42:
                    82:7c:7e:20:55:4f:d6:c7:0c:e0:66:da:07:5f:f1:
                    d6:c6:cd:5b:bc:c4:34:35:c6:8a:9f:99:54:cf:2a:
                    2b:60:f7:d4:06:64:05:94:a3:63:0a:15:30:c8:47:
                    f1:22:5b:df:b4:5b:9b:6b:56:a7:80:cb:bc:7c:63:
                    35:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:0F:81:6E:07:98:18:E8:49:C3:95:84:2A:36:0C:2F:CD:23:BD:40
            X509v3 Authority Key Identifier:
                keyid:3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:59:19:c5:29:20:73:a9:05:8c:8b:a9:55:eb:fc:79:2e:d3:
         2d:4e:b2:04:91:3d:32:67:ce:0b:e7:6f:05:a6:34:81:b3:8e:
         df:57:a4:e0:6c:8c:83:d6:72:a1:dd:26:6c:53:93:15:f0:d8:
         bd:5d:99:90:18:09:3b:c8:02:39:d9:3a:3e:af:6f:46:c0:a7:
         31:a3:ee:a6:4b:33:23:3c:c7:6a:58:6b:aa:2c:ad:b9:11:2b:
         12:7e:57:0e:47:87:39:80:c6:a1:c2:44:7d:85:46:5e:c7:8f:
         56:be:2b:9e:0d:b5:36:ff:b9:59:d6:05:10:ff:86:28:90:19:
         28:3d:b2:38:23:a9:bf:e9:3a:b6:17:86:a7:25:dd:ea:a2:2e:
         0f:b6:bf:1b:a7:e8:33:3f:9a:d7:fe:e0:a5:cb:ab:33:c5:72:
         14:3e:b1:c2:70:9c:bd:17:71:78:02:9d:3e:56:5f:1b:e6:aa:
         d0:5e:93:fd:0c:05:52:e3:d5:3f:b4:02:56:36:a1:53:a8:ed:
         2b:b9:b5:a2:91:db:b8:3b:11:51:f5:bb:2a:3d:09:4c:fe:e8:
         aa:62:1c:29:0f:08:58:14:19:87:0b:b0:c3:14:34:d1:fb:8c:
         86:da:84:2c:4d:b8:9b:f7:ef:25:4b:e5:08:12:af:e1:fa:59:
         d2:f5:35:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 06:07:13 2026 by rpki-client