Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
File:                     m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft (raw, json)
Hash identifier:          If9fO6N7AA3UN0gApTLkOVVDezjzW2zmPnHcQgzvIsQ=
Subject key identifier:   31:55:BC:D7:70:0E:BB:85:62:1C:5B:84:D9:91:55:7A:1C:12:4E:E0
Authority key identifier: 9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB
Certificate issuer:       /CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
Certificate serial:       019E4EEA72500B6BDD48B9B35F1957C3BDB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
Manifest number:          1921
Signing time:             Fri 22 May 2026 09:00:47 +0000
Manifest this update:     Fri 22 May 2026 09:00:47 +0000
Manifest next update:     Sat 23 May 2026 09:00:47 +0000
Files and hashes:         1: H8wE76fNQ2hhIjxk4MuG2V875Nw.roa (hash: g7ehk1525yVD63XA8pRRR3E8IFSxP1Zjdo5zOoEU1Rs=)
                          2: KxaC0ruOG2YD5n1zBRmLQRsn3WI.roa (hash: TwtwT6AH74GOn9MuLfl6jj270NvdM2yc+udW6/G1LQc=)
                          3: QkMzWLk5sTK1UV1ynfE6svHoE8U.roa (hash: CorPpj4zU1bBCQT6Z2Gb1cpT/IwtfHvCiSJfVqus6RE=)
                          4: m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl (hash: MxX41+y58/dB4qZ5zyJxVMPIyrxwRkpszxSV3R3UlTg=)
                          5: syri4gMUyb6a13KvMROJjwlBhZg.roa (hash: /QXVuiiMa3wjoFyt1XhRqNNgHTeCl2azKO31l+7RS+0=)
                          6: uyOFyGJDHMXG3t3pO277WLsoGqE.roa (hash: BzXP/08Zx0Wir6Qt4Wu5utPmmZQXa+TM9Drawn5Grls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 May 2026 08:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:4e:ea:72:50:0b:6b:dd:48:b9:b3:5f:19:57:c3:bd:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
        Validity
            Not Before: May 22 09:00:47 2026 GMT
            Not After : May 23 09:00:47 2026 GMT
        Subject: CN=3155bcd7700ebb85621c5b84d991557a1c124ee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e6:a6:85:0a:44:8d:11:fb:f5:7f:ee:b5:14:
                    31:c1:44:05:0c:3b:c2:d9:3b:16:99:b7:1b:26:a1:
                    c1:b8:90:ed:eb:af:9d:5c:63:52:1b:a1:0f:57:46:
                    0e:e5:e3:6e:83:41:d8:08:cf:60:b0:60:c8:b5:ec:
                    e3:1b:5c:d0:2e:a7:a7:2e:82:95:2b:d7:b0:9e:81:
                    d6:6c:62:b2:1f:95:8d:4a:45:86:f7:68:e4:d8:3a:
                    09:80:8e:f6:22:42:94:f7:4c:df:31:8f:24:24:c4:
                    64:85:3a:4e:0a:81:ad:e9:09:88:f3:d1:40:af:82:
                    66:44:1b:b1:a4:e7:39:ca:1e:62:2f:29:99:8b:72:
                    84:4f:2d:25:63:94:ef:70:75:6a:66:e1:49:64:f2:
                    45:cd:9b:a5:dd:89:f3:a0:85:da:a7:ba:55:08:2d:
                    ef:ff:2f:4f:2b:55:6f:73:1f:56:c8:a7:e7:e9:1d:
                    22:ee:16:e5:25:fd:4e:52:3d:1c:b7:07:e5:65:92:
                    34:a9:90:2e:fe:d1:76:67:9d:5d:a0:65:25:ae:6c:
                    a5:dc:cd:c2:cd:bf:c7:4b:b7:d4:14:e0:13:87:c9:
                    da:62:f9:a9:a1:a0:2a:54:27:8c:34:9e:1a:ab:5a:
                    7f:37:31:7a:d5:5d:6c:83:bf:21:b3:6d:9b:eb:9b:
                    19:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:55:BC:D7:70:0E:BB:85:62:1C:5B:84:D9:91:55:7A:1C:12:4E:E0
            X509v3 Authority Key Identifier:
                keyid:9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:88:2f:bd:4c:d0:e1:1a:43:a3:de:95:5f:17:7c:e7:50:81:
         90:09:44:f5:fb:77:78:f9:bc:1c:08:c9:57:8c:b6:e7:83:d8:
         3d:01:74:3e:53:13:c5:d2:1b:b2:1d:bb:2f:8e:79:20:35:9e:
         da:bd:ef:d4:17:0a:d2:08:70:d2:32:a7:d2:4a:94:d7:61:f6:
         16:a5:ba:e7:1f:31:82:f0:e9:aa:da:cb:3f:8e:f7:a1:8d:f8:
         ba:66:83:7e:71:e5:32:95:05:8e:ea:a0:3a:0b:92:03:80:82:
         2a:83:13:68:81:1f:fc:6f:96:5a:38:91:2e:b9:ac:6f:65:a5:
         7e:10:05:69:76:e3:2c:8c:3a:d5:e6:82:9e:b6:ab:06:cd:66:
         ec:19:7e:45:38:81:23:69:e0:2d:a9:a5:2e:30:49:85:01:cc:
         00:72:ab:7b:6a:80:be:92:0c:32:5a:d1:95:ef:aa:34:74:c5:
         18:b8:6b:2d:d6:bd:6d:90:5c:51:b5:60:15:d6:3f:11:c1:4f:
         e8:be:d2:e4:c0:df:81:4a:26:3c:8f:c6:0b:56:93:da:a8:1d:
         fb:cd:e1:63:1d:82:37:2e:02:6a:19:f0:60:21:f6:12:09:bb:
         60:c3:4c:da:b2:7c:f5:03:e1:28:fc:b9:ee:e6:81:80:23:a2:
         5f:93:6e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:12:02 2026 by rpki-client