Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
File:                     fU0ch5CpE-gyxzPf93je55EpcAo.mft (raw, json)
Hash identifier:          zEMVdrc2qbX58iw6rFwqkFeArWu6L3dKUXgydU2AXKM=
Subject key identifier:   97:20:C9:46:C0:F2:47:02:05:F2:F6:E1:C1:3F:AD:55:2C:38:21:5D
Authority key identifier: 7D:4D:1C:87:90:A9:13:E8:32:C7:33:DF:F7:78:DE:E7:91:29:70:0A
Certificate issuer:       /CN=7d4d1c8790a913e832c733dff778dee79129700a
Certificate serial:       019E3261670080DC940FCE7DA16E4E481A1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
Manifest number:          1912
Signing time:             Sat 16 May 2026 20:01:44 +0000
Manifest this update:     Sat 16 May 2026 20:01:44 +0000
Manifest next update:     Sun 17 May 2026 20:01:44 +0000
Files and hashes:         1: 5ruGjzi72EzHeNevEE3JGyLtXgQ.roa (hash: F631VpzOVt6zeqgnyepT7OlQYefuALhIBPjhvOj+SbM=)
                          2: MLTMNf6RdXQHgobliz7oe72JkjQ.roa (hash: vynBVcDFPo0FhDEU/VJwzCvxOSeIG5MJSs1ntfusClo=)
                          3: fU0ch5CpE-gyxzPf93je55EpcAo.crl (hash: nOhPro3JO/CTK93fuv+E0H5ugNB3NXKV6X41AIzSWso=)
                          4: fXZclwjMmJuKFUf7Q9P-NHbNEpQ.roa (hash: anvE7nbyIQqcqcLLGmm77d4AcDLATJhTxcyjOxhWcfo=)
                          5: qq9jEWnUkq7RixjGSRxp41ikMoQ.roa (hash: YTairbAOKk2TzoyqKR+ve0ERswXp2cOBJyd3vALW04Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:61:67:00:80:dc:94:0f:ce:7d:a1:6e:4e:48:1a:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d4d1c8790a913e832c733dff778dee79129700a
        Validity
            Not Before: May 16 20:01:44 2026 GMT
            Not After : May 17 20:01:44 2026 GMT
        Subject: CN=9720c946c0f2470205f2f6e1c13fad552c38215d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:09:a6:ad:ee:8d:9b:27:19:e9:97:10:39:1e:
                    47:28:d7:42:e2:0b:6e:f6:00:0d:bf:a6:f6:eb:14:
                    13:13:f6:d9:bb:b7:9a:83:17:d7:2a:c4:6e:88:3a:
                    2f:6a:c0:a9:e5:07:4c:fe:16:69:74:86:a8:e6:ed:
                    c0:81:6f:b4:1e:0c:0c:76:b3:f4:47:b8:07:1c:55:
                    73:ac:08:07:47:e2:98:50:c9:68:f9:c0:8a:d3:e8:
                    95:49:d6:81:2c:f3:b2:69:20:1c:b3:c6:06:d7:98:
                    2e:87:92:47:3d:e9:e3:fb:d5:22:81:34:8d:f5:11:
                    64:b3:c3:5d:34:8b:33:66:06:1f:4f:43:b4:67:21:
                    fe:f1:36:be:84:da:7f:33:c4:00:f4:f3:40:7e:2f:
                    57:61:36:21:58:71:bf:69:87:f6:d0:93:e5:e9:80:
                    e5:00:65:ba:ce:19:3e:7b:80:fd:4d:bc:05:6c:d0:
                    8f:b9:30:5f:59:28:55:1a:9c:a2:9d:b1:f7:46:5e:
                    55:55:8c:08:ca:8f:76:43:4c:ca:0c:a4:81:90:17:
                    9a:ea:24:dc:75:12:59:da:f2:97:4c:d8:60:23:74:
                    da:1a:85:bb:3e:54:59:85:ad:98:06:f7:35:9f:ab:
                    24:63:13:65:72:2c:44:18:0d:7a:5a:58:d5:5e:3f:
                    08:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:20:C9:46:C0:F2:47:02:05:F2:F6:E1:C1:3F:AD:55:2C:38:21:5D
            X509v3 Authority Key Identifier:
                keyid:7D:4D:1C:87:90:A9:13:E8:32:C7:33:DF:F7:78:DE:E7:91:29:70:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:a2:1d:2f:17:54:14:1e:dc:7f:b4:90:c1:3d:9f:af:04:e9:
         9a:df:e6:9f:16:18:33:76:ea:64:bb:ab:c0:1c:d1:ca:f6:28:
         86:39:48:23:e7:a4:58:6c:b2:4e:a7:e4:0b:d7:d3:de:85:c8:
         70:dc:f7:95:42:f9:bc:cd:8e:e6:9e:ea:2d:38:b9:30:e1:f1:
         f6:d9:59:93:56:9b:5f:dc:a6:32:9c:21:31:3d:46:93:80:55:
         7f:00:49:f6:af:c3:c4:2e:61:3f:0e:2b:36:79:d6:4b:fc:93:
         76:fc:30:9f:f3:30:57:7a:87:c7:d4:44:e1:7a:84:4c:ba:b2:
         e6:3a:0d:01:8b:25:5f:26:dc:95:32:ae:33:e5:d7:42:66:86:
         e4:ef:a5:6d:0a:90:ff:41:d1:a6:c7:d6:9c:34:31:48:e9:1a:
         90:59:8f:3c:39:4b:7c:f1:e8:96:1a:88:e6:7d:a0:81:0d:4e:
         8a:af:4a:66:c2:64:66:16:ba:1d:1b:da:ec:10:c0:5e:a7:48:
         c5:ff:96:00:85:1f:05:55:0c:d8:00:84:48:66:e3:d1:24:b9:
         a2:ac:d3:ee:4e:ec:93:e5:73:38:2c:79:ec:6c:3d:27:24:52:
         ca:f0:fd:b5:ac:f8:cc:90:ff:f1:2e:3d:fd:8b:b2:d1:06:ad:
         3c:a2:7c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:42:04 2026 by rpki-client