Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
File:                     D4nIaX93ksqvWZZk6JrOZSRPiug.mft (raw, json)
Hash identifier:          EA5gbZeFtJcsxExiSlGtCgy6LnUpyjC/5cfiM/eq3vc=
Subject key identifier:   27:B1:39:0E:9F:E4:15:06:B6:D3:31:EF:9D:75:36:FD:F6:75:58:7F
Authority key identifier: 0F:89:C8:69:7F:77:92:CA:AF:59:96:64:E8:9A:CE:65:24:4F:8A:E8
Certificate issuer:       /CN=0f89c8697f7792caaf599664e89ace65244f8ae8
Certificate serial:       019E311741D107FAB8FAC4376257E133D296
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D4nIaX93ksqvWZZk6JrOZSRPiug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
Manifest number:          190E
Signing time:             Sat 16 May 2026 14:01:08 +0000
Manifest this update:     Sat 16 May 2026 14:01:08 +0000
Manifest next update:     Sun 17 May 2026 14:01:08 +0000
Files and hashes:         1: 3gWQQGBcbMv1PcGiymFULbhDgQk.roa (hash: R5FpPwb0TIXhum/MUuquZBI0EvROR3vjJFQryTKsboI=)
                          2: D4nIaX93ksqvWZZk6JrOZSRPiug.crl (hash: SOLyvinTCmSmjY09MYeGhAysPs7ZaSqICWoOWhDDzq4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D4nIaX93ksqvWZZk6JrOZSRPiug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:41:d1:07:fa:b8:fa:c4:37:62:57:e1:33:d2:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f89c8697f7792caaf599664e89ace65244f8ae8
        Validity
            Not Before: May 16 14:01:08 2026 GMT
            Not After : May 17 14:01:08 2026 GMT
        Subject: CN=27b1390e9fe41506b6d331ef9d7536fdf675587f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ee:51:18:e7:cd:b1:c4:7f:7b:4e:cc:43:9a:
                    2c:69:8a:36:50:53:04:1a:f8:d1:8e:d1:3d:29:58:
                    96:09:ae:f4:3b:dd:ad:07:0a:2f:7b:e1:fd:c6:09:
                    65:9d:25:f1:3b:6f:e8:c9:d6:3b:d8:11:09:c3:cf:
                    5f:fc:c8:c4:89:34:d0:50:08:22:e0:8c:1e:d8:5f:
                    75:d9:13:53:98:e5:c6:8c:87:6d:09:b4:26:d4:43:
                    ed:00:8e:10:e4:50:33:9b:6d:68:8c:b7:fb:48:72:
                    a7:f5:aa:1a:8a:4d:7d:21:fa:c7:5e:f8:ae:46:a7:
                    34:52:44:d1:fc:d5:5d:ba:75:be:6c:d7:fe:7b:de:
                    7d:43:1e:d6:f2:7a:72:24:d4:b5:db:18:f8:9a:28:
                    2a:b9:b1:70:08:de:16:d7:8a:de:e1:6f:78:00:0d:
                    76:6d:03:a7:a5:12:44:91:27:8e:36:bc:6a:fb:cb:
                    de:6a:90:27:c0:be:58:c4:c5:12:c5:30:31:1c:94:
                    20:5b:80:60:da:43:be:04:2c:a4:97:39:dc:22:36:
                    28:c3:74:3d:24:21:68:ce:aa:36:a5:20:f4:8c:fb:
                    b1:67:ed:d8:59:3e:1a:ae:ca:f2:93:34:58:67:eb:
                    ee:bf:dd:ba:35:f0:e7:00:86:6c:71:2b:39:26:33:
                    c9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B1:39:0E:9F:E4:15:06:B6:D3:31:EF:9D:75:36:FD:F6:75:58:7F
            X509v3 Authority Key Identifier:
                keyid:0F:89:C8:69:7F:77:92:CA:AF:59:96:64:E8:9A:CE:65:24:4F:8A:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4nIaX93ksqvWZZk6JrOZSRPiug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:52:da:09:5f:eb:76:c5:23:e2:8c:2f:ec:67:c9:6e:d9:05:
         9a:22:1d:d2:2a:1e:12:92:d4:24:80:27:0a:51:13:e6:41:d3:
         99:02:e1:cf:0a:09:85:d7:57:13:07:c1:23:10:1e:48:3a:ba:
         fd:10:1d:34:3a:1f:f3:43:e5:75:04:7d:96:33:b3:35:52:67:
         5c:6b:7a:5a:8b:d2:af:56:0f:74:07:e5:4c:30:09:8e:99:5c:
         21:8e:97:41:e1:4f:14:28:90:88:62:79:e4:64:16:35:f2:5b:
         b4:b6:ee:54:48:35:86:a1:a8:9b:3d:71:34:b8:05:84:ca:78:
         20:39:af:96:77:cb:70:c7:06:7f:d0:9a:82:cd:5f:a7:4d:2e:
         17:3f:e5:48:f6:cc:7b:f7:d5:cd:4c:13:b8:b3:58:96:8f:2e:
         87:ee:44:6e:a0:18:a4:0c:49:cd:3d:bf:2f:cb:17:9b:c7:20:
         be:6f:02:6e:1c:3f:3e:49:4b:b4:28:fa:7b:19:fc:a6:70:28:
         bd:f7:c2:25:78:ca:8d:07:d0:d9:50:9d:e5:51:12:75:3c:b6:
         c4:19:99:3b:4e:c8:19:d6:60:39:fc:4b:22:13:6f:8c:cc:28:
         15:b3:07:9c:ee:2d:d8:c9:85:25:0a:77:c4:b8:bb:0c:ec:eb:
         c6:df:fc:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:12:28 2026 by rpki-client