Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
File:                     TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft (raw, json)
Hash identifier:          w6e2fuQs7zYk12M3v2kMd+hhko2ReaPBKnoKtr9x4+I=
Subject key identifier:   1E:B8:16:22:C7:B9:4E:73:5B:AC:DF:C4:51:CE:7F:3F:11:E7:A7:90
Authority key identifier: 4D:15:27:D1:83:9B:F8:30:36:0D:71:59:01:34:35:4E:6D:90:46:97
Certificate issuer:       /CN=4d1527d1839bf830360d71590134354e6d904697
Certificate serial:       019E2BBA28C8996D62CC9E291BB808397698
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
Manifest number:          190F
Signing time:             Fri 15 May 2026 13:01:20 +0000
Manifest this update:     Fri 15 May 2026 13:01:20 +0000
Manifest next update:     Sat 16 May 2026 13:01:20 +0000
Files and hashes:         1: 5IRwRfh8Fym_BtVi99L5BSoQylk.roa (hash: zVO1DYlBvdQtHAVcl2WpceQxT4SVa8kf2zP0TMDOH1A=)
                          2: TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl (hash: aeZCHeUTss5E8cS7vqUfQeVCoTCEakikTsZeToe0tJM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 11:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2b:ba:28:c8:99:6d:62:cc:9e:29:1b:b8:08:39:76:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d1527d1839bf830360d71590134354e6d904697
        Validity
            Not Before: May 15 13:01:20 2026 GMT
            Not After : May 16 13:01:20 2026 GMT
        Subject: CN=1eb81622c7b94e735bacdfc451ce7f3f11e7a790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:81:87:d1:99:44:ca:f2:a8:f3:80:07:e7:6b:
                    1b:b4:47:a3:dd:0d:c5:13:51:c1:1d:88:b1:48:c2:
                    9c:2e:5b:83:ae:b7:7a:d1:93:a5:16:69:8a:cf:fe:
                    70:ec:6d:71:ed:af:48:65:77:3b:cd:25:75:71:23:
                    ed:f2:75:bc:43:55:9c:02:b7:ac:7f:70:52:93:6b:
                    e7:57:d1:af:48:e9:bf:e3:4b:61:9b:48:a3:98:19:
                    8e:59:30:44:56:4c:c0:e4:ac:9f:24:7b:fd:f6:3b:
                    bb:cc:9c:21:fe:4f:55:cc:79:b0:7b:06:49:85:bc:
                    03:6f:79:6a:1b:b7:cf:a9:48:cc:82:82:f9:70:bc:
                    4d:81:14:f5:9e:0b:42:9e:7d:43:cb:a9:78:0d:c2:
                    c5:81:59:ba:65:a8:60:c3:ee:52:f3:c6:33:ed:93:
                    69:94:1d:bd:a6:23:a8:38:83:7f:e0:ce:1b:f3:d8:
                    03:7a:34:5e:58:76:e7:6e:a8:96:a9:8d:f4:64:9c:
                    f6:42:1d:50:0f:a3:9d:9b:62:6a:16:e1:da:1e:b8:
                    44:ce:4b:e1:60:c6:28:fa:f4:c2:43:cb:bc:28:a8:
                    e0:d3:54:25:17:2f:b9:7c:04:37:1a:7c:01:b7:86:
                    c5:7e:ea:22:2a:3c:a2:fd:f0:56:92:00:13:92:65:
                    10:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B8:16:22:C7:B9:4E:73:5B:AC:DF:C4:51:CE:7F:3F:11:E7:A7:90
            X509v3 Authority Key Identifier:
                keyid:4D:15:27:D1:83:9B:F8:30:36:0D:71:59:01:34:35:4E:6D:90:46:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:3d:72:2d:48:13:f6:1f:10:e6:6f:46:88:e6:12:b0:fa:35:
         ea:8f:ea:b2:09:f9:36:8a:32:28:41:15:cf:8a:95:fb:09:9a:
         51:ba:90:8a:2d:c6:e3:8b:d2:7f:14:3f:0b:80:71:89:6b:77:
         27:a7:f8:3c:e4:71:8d:e6:37:14:38:ac:59:0d:4d:49:ca:b8:
         bc:3d:79:73:21:b5:b4:55:e9:87:17:33:7d:2b:18:7b:f8:f8:
         16:c0:fb:2d:a0:8e:0f:ba:94:f8:b7:c0:2f:e6:54:c2:a5:4b:
         46:b2:d8:dc:43:9a:38:88:53:b0:ca:7a:1f:3c:ee:8d:cd:61:
         0a:2c:cd:77:23:2a:04:b5:10:e1:9c:4a:92:d9:55:57:ad:45:
         07:1e:51:30:b4:b8:c7:23:b8:80:b7:26:09:30:15:c8:34:4e:
         db:b6:cb:b9:13:68:a8:42:31:9d:3f:97:ec:a6:90:48:19:a4:
         b4:13:88:52:f7:02:fd:d2:0f:9e:ea:c1:ec:f0:07:b2:53:95:
         e2:29:4b:5f:8e:37:6b:a9:9f:d3:ff:48:07:f3:9d:d7:5d:6a:
         c2:73:75:61:9f:a4:ea:4a:12:24:07:ca:e2:be:0c:85:70:9a:
         bd:c4:69:75:a6:a9:c8:78:e0:6e:19:54:3b:95:13:a4:10:54:
         57:4f:23:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 18:19:04 2026 by rpki-client