Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
File:                     SQsh95ueovPQQjdHFIZ9EkAZlds.mft (raw, json)
Hash identifier:          WSoNsddXtNyQVZyck7FVqLmPOZbIS+wwiwWOaPwYkRI=
Subject key identifier:   7D:7C:A8:B7:0B:FE:5A:49:2A:B6:0C:34:12:D3:8D:5B:63:AF:DA:E1
Authority key identifier: 49:0B:21:F7:9B:9E:A2:F3:D0:42:37:47:14:86:7D:12:40:19:95:DB
Certificate issuer:       /CN=490b21f79b9ea2f3d042374714867d12401995db
Certificate serial:       019E31BC14D24F531AD4913038EA378534D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
Manifest number:          1917
Signing time:             Sat 16 May 2026 17:01:10 +0000
Manifest this update:     Sat 16 May 2026 17:01:10 +0000
Manifest next update:     Sun 17 May 2026 17:01:10 +0000
Files and hashes:         1: OsHfm5IcRp6wCajw-NE1iWNH7Z8.roa (hash: oS3FUlduEB7YSg+361aWK05LocqnWlc3lIUtH4BZyko=)
                          2: QQeZJrwl_4NJIISgArACAVq6L0o.roa (hash: uh1KpLqwgaZj2AcvOxxyx2dRcs//e4c0XtE2TUfZonY=)
                          3: SQsh95ueovPQQjdHFIZ9EkAZlds.crl (hash: BaFfxDiKt//f4w5QE62havYVSuwJsKFpcFgtQHHl/qU=)
                          4: Z4RE0ETdC4xhk1FbbundGTGGRB8.roa (hash: qQ3AizCsruyzTMQNiKoa4LuCo6aARO1PFZyPx/nGISA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:bc:14:d2:4f:53:1a:d4:91:30:38:ea:37:85:34:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490b21f79b9ea2f3d042374714867d12401995db
        Validity
            Not Before: May 16 17:01:10 2026 GMT
            Not After : May 17 17:01:10 2026 GMT
        Subject: CN=7d7ca8b70bfe5a492ab60c3412d38d5b63afdae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:93:de:b7:4c:54:f1:eb:89:0a:7d:7d:5f:b0:
                    3e:12:9e:91:fc:74:46:2e:be:77:d8:d5:71:bd:a4:
                    a8:17:99:18:fc:20:80:7f:43:6b:e3:a6:06:36:a8:
                    06:a9:9f:10:bb:b3:7e:07:25:22:b0:bc:1f:e7:6f:
                    5f:d7:66:3e:ee:fa:48:0c:74:36:38:c3:42:e3:47:
                    36:80:50:73:34:46:49:5c:84:d1:11:df:02:3d:a7:
                    da:da:b5:0b:e5:a8:ff:dd:d4:00:71:e3:28:9a:25:
                    a8:62:ea:1d:46:10:76:30:06:4d:82:44:5e:65:b2:
                    83:f6:3d:30:58:1b:2e:93:55:b4:9b:8d:9a:54:89:
                    dd:7e:45:a5:bc:f3:4b:72:40:e8:d5:b0:cf:63:68:
                    f2:49:0b:3e:6b:9f:46:06:78:7e:f9:96:c9:96:ab:
                    45:a0:8f:4a:f5:1e:14:6b:b8:8c:d2:68:82:d7:5e:
                    95:f8:2f:98:f2:5a:57:86:74:e9:9e:d7:31:a5:f2:
                    43:cd:8e:14:ac:12:62:91:1a:a1:88:73:49:f0:38:
                    cd:62:90:44:0f:48:0f:d9:d7:fc:21:3e:56:37:fc:
                    71:2d:b9:43:9f:7a:1d:7b:02:89:94:00:01:2c:df:
                    b4:91:17:c6:18:ca:51:0f:48:74:f2:05:10:ec:29:
                    56:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:7C:A8:B7:0B:FE:5A:49:2A:B6:0C:34:12:D3:8D:5B:63:AF:DA:E1
            X509v3 Authority Key Identifier:
                keyid:49:0B:21:F7:9B:9E:A2:F3:D0:42:37:47:14:86:7D:12:40:19:95:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:7d:55:40:59:99:a1:e4:79:90:e5:b1:bb:5d:4a:5f:61:32:
         11:25:96:bb:9e:64:53:22:f5:89:54:c2:7b:c9:3d:cd:a0:04:
         67:91:e5:44:92:1e:7c:d1:0b:61:f4:0c:b0:85:54:93:ed:25:
         36:76:aa:10:81:a0:e7:ad:40:22:0e:89:83:75:60:e4:7e:13:
         22:1c:72:35:d6:06:bf:10:15:01:25:18:bc:12:3b:3e:12:59:
         a8:98:7a:95:d6:a4:e9:74:b3:0f:55:df:89:06:95:5c:b6:89:
         6b:60:d1:e0:9c:b2:7d:98:d7:e2:24:cc:fc:86:b0:6e:d4:ae:
         45:0b:6c:f9:35:ec:f1:d6:79:2a:d9:aa:48:fe:12:4a:cf:a8:
         1d:a8:89:26:1c:17:90:78:8f:5c:f3:d6:d0:b3:cd:2e:05:78:
         df:c1:41:44:59:d3:b1:b6:fd:1e:e7:dc:89:d7:9c:85:fe:f2:
         fd:35:88:37:17:89:4b:08:37:d6:83:c7:5e:65:d6:3a:e4:6a:
         74:63:3d:36:6f:46:b2:f1:9f:5b:23:16:30:28:7c:b4:40:d9:
         86:0b:ea:60:c3:db:fb:ff:d7:72:13:c5:3d:bd:64:16:a5:97:
         6a:59:56:95:bc:ae:59:ff:ad:83:92:f5:96:b7:53:81:42:cc:
         f7:fd:91:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:13:34 2026 by rpki-client