Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
File:                     4T43FhOUZeaoz59r2LW492M68ig.mft (raw, json)
Hash identifier:          6sp/H0y3Zvvb81XDExcFv9FQxPkYkldrheldMVMnVAA=
Subject key identifier:   02:9D:0A:69:36:BD:F8:CE:8A:81:90:7A:3E:21:05:2E:6C:ED:51:77
Authority key identifier: E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28
Certificate issuer:       /CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
Certificate serial:       019E303B6C8AFF962A6EB40B65E310AF1225
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
Manifest number:          190F
Signing time:             Sat 16 May 2026 10:01:01 +0000
Manifest this update:     Sat 16 May 2026 10:01:01 +0000
Manifest next update:     Sun 17 May 2026 10:01:01 +0000
Files and hashes:         1: 102rhK3hZolwzCt7IJfuq8GdQf0.roa (hash: YO/FD+MWLi1I9ePrVvUS7xZGRfMEMrX2LxQRpa4cPxs=)
                          2: 4T43FhOUZeaoz59r2LW492M68ig.crl (hash: aiaePQk++Pan0Hfg9DLqtKBelXSSPlmfVhK8kUEGRAw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 10:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:6c:8a:ff:96:2a:6e:b4:0b:65:e3:10:af:12:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
        Validity
            Not Before: May 16 10:01:01 2026 GMT
            Not After : May 17 10:01:01 2026 GMT
        Subject: CN=029d0a6936bdf8ce8a81907a3e21052e6ced5177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:88:78:87:7c:fa:3d:79:53:22:54:d2:b4:dc:
                    1b:24:90:d5:b1:b3:e5:f3:b1:31:52:d6:0c:ad:7d:
                    50:57:dd:d3:fd:12:aa:d9:59:b6:83:ac:b3:45:11:
                    1e:9f:69:7b:a7:b8:9f:98:16:6b:d7:e8:1c:50:b1:
                    bb:73:95:ea:04:81:73:3a:72:74:75:be:4b:9f:31:
                    76:4f:75:ec:0a:76:69:e5:1b:a8:c5:06:b7:48:2e:
                    fd:51:d6:e6:0f:de:e8:0b:89:02:41:2f:5e:b4:fa:
                    72:5b:50:d8:1e:e8:f3:35:14:2f:a8:a1:c1:b8:ea:
                    cf:b8:2e:05:35:66:b7:b2:5f:be:2b:e2:02:84:4b:
                    5a:3e:ae:04:94:21:12:a7:71:58:b5:91:4c:04:10:
                    72:29:36:a9:3d:b9:ff:4d:19:b9:b1:ab:fd:b4:c3:
                    b0:47:70:e4:86:2b:80:1b:32:74:04:a0:03:d3:36:
                    25:cb:3c:8f:b8:e6:c3:5a:5c:a3:1b:f3:22:dc:8c:
                    36:59:39:9f:f5:d4:8e:e2:c6:ca:a3:9b:9d:41:fd:
                    dd:f4:33:e1:8e:95:9e:93:17:c1:59:f5:af:ac:9f:
                    3b:46:d6:cc:7a:52:4d:dc:80:1a:ea:c2:d1:fc:1e:
                    fa:fc:2f:36:5f:4e:3f:bd:c7:d0:45:fc:da:3a:2e:
                    10:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:9D:0A:69:36:BD:F8:CE:8A:81:90:7A:3E:21:05:2E:6C:ED:51:77
            X509v3 Authority Key Identifier:
                keyid:E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:1c:eb:06:ad:cb:29:b9:ff:e4:77:42:53:d3:2b:26:a3:61:
         df:c8:78:10:be:73:fb:78:e9:26:7e:27:f2:eb:17:36:66:0a:
         2b:4a:93:56:55:6c:57:61:18:99:78:47:13:bf:00:2f:ae:09:
         ff:0e:41:8e:88:96:15:70:2e:df:00:0d:05:84:39:d0:bb:dd:
         d3:d3:98:b4:c5:46:d0:6c:3f:9b:1b:4d:6d:27:91:c8:9e:be:
         c2:34:97:12:4c:a9:e5:d4:8f:c6:30:0d:6d:ca:03:b9:9e:f2:
         0f:7c:ef:82:58:0b:6a:ed:3e:31:9b:09:ae:89:57:14:4b:64:
         03:fb:9a:0a:e9:e8:bd:12:04:d1:30:a2:c3:6f:61:1b:a8:2a:
         6a:cd:6e:e9:ad:36:7c:b9:e4:95:86:6b:ea:13:11:2c:a8:6a:
         2c:b2:c6:8d:4a:44:d9:fa:23:87:31:61:9a:7b:e0:ac:71:2f:
         52:61:79:f7:d9:c4:01:1f:87:eb:38:df:85:1d:31:8f:6a:61:
         4a:b8:f2:01:9e:c4:57:ce:76:13:e6:2a:6e:16:66:2d:be:7d:
         f8:e9:34:53:43:eb:94:11:e8:d5:82:7c:ca:a3:14:8c:ef:78:
         73:88:69:de:52:c7:c8:e4:0d:3c:7a:0e:db:21:1b:1e:f8:5a:
         ee:dc:dd:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:13:20 2026 by rpki-client