Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
File:                     jucXwqqWGqxFA_G0hGTfAjPOP6k.mft (raw, json)
Hash identifier:          wqB43OhnjE9RJ5zNK2Y9E+kdmHxEodL1bjJwlMOuOnw=
Subject key identifier:   84:FF:BA:9A:05:9E:52:96:B1:9E:01:BD:02:7F:52:A3:F1:00:C7:11
Authority key identifier: 8E:E7:17:C2:AA:96:1A:AC:45:03:F1:B4:84:64:DF:02:33:CE:3F:A9
Certificate issuer:       /CN=8ee717c2aa961aac4503f1b48464df0233ce3fa9
Certificate serial:       019E3185CF49BE07807E9DC45BBED34C0B3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
Manifest number:          190E
Signing time:             Sat 16 May 2026 16:01:53 +0000
Manifest this update:     Sat 16 May 2026 16:01:53 +0000
Manifest next update:     Sun 17 May 2026 16:01:53 +0000
Files and hashes:         1: FrLpwJYm_z0oYv8U7JLQ8P3KcbM.roa (hash: 8L9pbzjRhlXXYzdKFRwuzPzPptTX51ON4RUCMnWRonY=)
                          2: jucXwqqWGqxFA_G0hGTfAjPOP6k.crl (hash: RO08gHEfPomXUD6mFDvMd0rdrCh+QBiVPw07KQpxPUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:85:cf:49:be:07:80:7e:9d:c4:5b:be:d3:4c:0b:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ee717c2aa961aac4503f1b48464df0233ce3fa9
        Validity
            Not Before: May 16 16:01:53 2026 GMT
            Not After : May 17 16:01:53 2026 GMT
        Subject: CN=84ffba9a059e5296b19e01bd027f52a3f100c711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:38:fb:3a:3a:a9:5f:47:e2:e0:1a:68:e0:7c:
                    4f:5e:b3:b5:bd:16:60:fa:14:96:d3:46:72:bf:20:
                    c9:85:b2:31:6d:ef:db:2b:f5:bb:ee:2a:01:0f:8a:
                    d5:85:0a:37:d1:c7:b9:75:32:95:aa:e9:1c:a3:23:
                    69:6e:ac:4c:55:58:74:d9:a3:a8:69:f2:a4:c0:aa:
                    fc:f3:2d:33:d5:7b:82:22:95:e0:4d:ba:8d:39:a6:
                    99:a3:6f:50:c4:84:c3:5f:b0:c8:b1:0c:45:2a:00:
                    69:1c:c9:e1:db:ea:3b:94:05:48:e8:c4:9e:4a:0f:
                    7e:4d:b0:49:a4:81:bf:8c:3e:c2:cb:b2:bf:c2:95:
                    d8:b7:29:58:76:2e:ff:8d:97:f6:1c:e7:4f:56:9f:
                    3e:95:2a:d4:37:69:f0:41:ed:25:07:fa:4f:10:a5:
                    e5:92:5c:c2:98:bf:d8:b3:9f:52:af:3f:e1:5a:20:
                    b0:3b:de:92:13:96:48:f0:f0:10:8b:47:b9:5d:ec:
                    e0:5c:46:dd:4d:32:5a:2d:a0:63:2b:9e:5a:37:84:
                    2a:f5:24:2e:0f:ab:78:87:2d:51:6d:41:ac:db:f4:
                    65:7b:a3:ac:8c:01:d5:93:89:b2:d4:71:22:e2:c4:
                    50:75:e2:c6:f4:b7:26:5c:10:51:9b:fb:3a:75:1c:
                    96:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:FF:BA:9A:05:9E:52:96:B1:9E:01:BD:02:7F:52:A3:F1:00:C7:11
            X509v3 Authority Key Identifier:
                keyid:8E:E7:17:C2:AA:96:1A:AC:45:03:F1:B4:84:64:DF:02:33:CE:3F:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:57:df:9d:b6:4c:19:e7:05:01:ae:13:fe:f1:8d:60:09:58:
         0a:ad:82:c6:80:2e:98:73:c9:c2:db:56:f0:98:75:be:39:46:
         12:fd:42:cf:2d:5a:d2:4c:77:6e:32:82:d7:68:58:5a:2c:49:
         6c:41:ac:b3:1f:44:fa:cb:52:c7:6c:6d:ce:09:45:ae:4b:52:
         d6:c1:1c:27:73:8a:f5:22:69:7d:a1:d1:94:56:99:5c:fb:8d:
         c7:9a:1e:41:96:bd:75:12:3b:eb:de:ef:da:3c:7a:08:26:fb:
         47:82:c5:af:8f:da:9b:fd:d6:22:f6:19:38:ab:35:7c:6a:21:
         b5:f9:ae:f3:d9:67:f3:48:7a:7e:74:e2:17:c2:58:e9:23:54:
         96:c9:52:cc:b5:35:d9:c3:81:83:78:7b:3d:49:77:58:7f:86:
         43:0e:15:8c:bc:83:de:3a:1b:f3:ca:f1:f7:43:19:0a:7a:c3:
         28:a6:f4:4c:14:2e:04:47:87:f1:1a:d5:bb:02:65:bd:0e:79:
         b8:73:40:fe:4b:76:39:1c:63:a0:88:8a:26:61:80:06:16:b6:
         85:79:0b:87:8c:f9:05:c2:fd:7c:27:00:bb:e2:9e:27:36:6b:
         10:54:18:74:1e:5d:f5:53:e8:86:db:e0:ce:4f:a1:0d:eb:4c:
         5a:99:40:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:01:49 2026 by rpki-client