Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
File:                     4sWGEhDcOL2660d9bacZZkqEprw.mft (raw, json)
Hash identifier:          8R4UQFFXf7XzQpHnnHixMHkmJSDMeAYak2v2fNgQowc=
Subject key identifier:   31:F4:4C:0F:56:39:BC:3F:ED:3D:3F:07:C1:15:C7:B3:49:01:6B:E2
Authority key identifier: E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC
Certificate issuer:       /CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc
Certificate serial:       019E30DFEE69B89D590B1076B544AAA73666
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
Manifest number:          1911
Signing time:             Sat 16 May 2026 13:00:42 +0000
Manifest this update:     Sat 16 May 2026 13:00:42 +0000
Manifest next update:     Sun 17 May 2026 13:00:42 +0000
Files and hashes:         1: 1-No8JnCXoZmNvwGOuPwKrmYYJ6c.roa (hash: 2kZ069SCXyvjYNeKIO+pvEFPTW/9AX8f/8u5tWS3u3U=)
                          2: 4sWGEhDcOL2660d9bacZZkqEprw.crl (hash: Hu8q+Mkmmoo2jRkkFONl4Tt/0PrSDpM+SVU10IZvsHQ=)
                          3: BW5S5s1xvxdYeismlznCSfBL2yI.roa (hash: EtWeWpCD+suUmysPule/ohTEye/jj6Q4dBOVaR6L3gA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:df:ee:69:b8:9d:59:0b:10:76:b5:44:aa:a7:36:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc
        Validity
            Not Before: May 16 13:00:42 2026 GMT
            Not After : May 17 13:00:42 2026 GMT
        Subject: CN=31f44c0f5639bc3fed3d3f07c115c7b349016be2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:03:67:55:34:d4:cb:98:5c:60:a1:33:e0:5c:
                    2d:52:7b:2a:57:fd:e3:01:ec:9d:b9:38:a8:ff:9b:
                    06:47:ad:03:df:46:a3:eb:d8:17:79:da:2f:ef:38:
                    b6:17:01:ac:8b:47:26:08:a2:02:c7:8e:c2:61:9e:
                    ef:6d:d6:99:e8:01:72:2d:d6:83:dc:d1:c6:dc:8a:
                    76:1b:ac:fc:38:ea:16:60:40:da:17:7e:23:f5:69:
                    e0:a5:4f:b9:83:b4:74:d0:6a:62:92:0d:a7:6e:2e:
                    1b:04:5e:64:8a:24:e1:e8:f3:77:32:94:54:f7:93:
                    fe:31:09:6e:28:bc:e1:8c:10:1e:29:6d:38:b6:f8:
                    57:04:6f:b3:ad:b6:e7:c9:91:7f:39:f8:e0:23:ae:
                    be:cc:6e:e1:e4:74:ce:07:3a:67:a1:eb:10:be:75:
                    a2:e0:5f:e9:ac:d3:dc:24:bc:be:93:ae:b8:3c:9b:
                    bd:48:66:87:e5:14:40:6e:ef:92:a7:80:1d:3a:ea:
                    42:3f:6c:55:53:53:cb:b6:1f:a0:0f:a1:56:e3:f5:
                    1e:df:df:b0:19:32:52:71:b9:d4:df:d1:75:4e:05:
                    20:cd:97:94:bc:5b:f8:f7:3a:7e:9a:89:09:8d:fd:
                    a7:6f:6b:98:f4:4e:d3:a8:05:5f:70:29:90:91:2a:
                    01:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F4:4C:0F:56:39:BC:3F:ED:3D:3F:07:C1:15:C7:B3:49:01:6B:E2
            X509v3 Authority Key Identifier:
                keyid:E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:3f:ad:28:36:50:66:ae:7f:cc:2d:ea:60:5c:89:07:f3:bb:
         34:bb:f3:03:c8:66:d6:db:2f:14:b8:84:da:f6:af:d7:07:29:
         b6:46:aa:d1:1e:a4:4a:3f:84:2c:4d:bc:ff:a3:57:22:0b:e5:
         dc:5d:3c:ae:b3:e6:64:77:98:5e:33:e3:16:06:18:0b:37:5c:
         78:72:01:e5:c5:bd:df:30:9c:aa:24:22:eb:2a:c8:35:a4:d6:
         cc:71:79:04:0e:80:04:61:62:1d:fc:37:27:80:56:26:1e:77:
         c2:da:d7:89:39:5a:16:8e:08:cd:bc:fb:a1:ec:a4:1a:38:3a:
         6a:50:d9:44:f3:ed:a6:e4:2b:e1:62:2b:d0:8e:de:a5:4e:6c:
         24:2b:6c:55:26:1a:11:4f:aa:e6:3d:f8:44:27:4b:2e:22:7b:
         08:90:8d:94:43:b3:d5:18:42:c3:4c:d1:0f:0c:50:d8:96:1a:
         cb:0b:ac:ae:d3:40:90:f0:bd:04:63:a7:6d:72:86:9f:27:c6:
         f8:86:3b:2b:4a:5b:ec:72:a3:ca:64:a4:89:3d:d2:0d:46:63:
         8e:ab:2c:39:2c:33:d7:4f:97:58:8d:17:98:32:bc:08:bc:b0:
         fd:a8:e3:7b:bd:85:8c:51:84:d0:fd:e7:77:b9:11:09:a4:58:
         8c:7b:cc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:22 2026 by rpki-client