Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft
File:                     Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft (raw, json)
Hash identifier:          /ynOgjoVxxEawPP3Y2gzYIynXToyDLGhCN+x8z6yqQc=
Subject key identifier:   09:9E:78:BC:14:A8:17:1E:68:BB:C5:6A:9D:D8:9B:D1:59:3B:32:8E
Authority key identifier: 0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42
Certificate issuer:       /CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042
Certificate serial:       019E2F600D7D8F454F099A89531765A34722
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft
Manifest number:          1917
Signing time:             Sat 16 May 2026 06:01:24 +0000
Manifest this update:     Sat 16 May 2026 06:01:24 +0000
Manifest next update:     Sun 17 May 2026 06:01:24 +0000
Files and hashes:         1: 6GPblw6DV3CHVZNWZ0QdaVy6klk.roa (hash: DqtHDBDEhiMvYHUrl8XYbcaTNh8BiLqth+UKaws4rT8=)
                          2: Bzo_d6zW3tj-cs4yT8d3sKOXlfg.roa (hash: sB4IjXQ2q1JliT65t5pMashaLGv9OdpiFjT65GllIOg=)
                          3: Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl (hash: jLfDS7y5PNRlIRflcF/WNpi25jjD2bQ9/A0msuSjPSA=)
                          4: E3W4jp5zsoikKWLmA1V7bWlcpV4.roa (hash: YJ9yEvPcrd1MOHEooUf+VZebkz+BFG/oUSCxEMHiKbk=)
                          5: aUScLYE7hWlZLrttrbL09JUvQA0.roa (hash: x+eRx80jxSLOtFgW7pQIqcwn52mE8qpARjfDhLVRoV4=)
                          6: nW3IwE5roVsnBgu9z0_CgUuzIkE.roa (hash: W9YQgHEfBWzENVLpd45FQgo4EBkxudFGiV0/tWzb3uI=)
                          7: oJikVGeGH47Pi9ETf25ZC2y534A.roa (hash: O9mHTIlUIZNrSBo/sFV/Ngmx3bneDcEBab5/fbZjQkU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 06:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:60:0d:7d:8f:45:4f:09:9a:89:53:17:65:a3:47:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042
        Validity
            Not Before: May 16 06:01:24 2026 GMT
            Not After : May 17 06:01:24 2026 GMT
        Subject: CN=099e78bc14a8171e68bbc56a9dd89bd1593b328e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bb:e7:cc:04:15:e6:3b:2c:3d:f6:ae:d3:70:
                    de:e7:63:76:89:42:77:21:c4:bc:21:c3:d9:13:f6:
                    69:b7:ab:49:ec:33:f1:cb:c1:f0:54:d9:81:9f:20:
                    fb:a4:72:d2:fc:61:05:21:81:af:4c:6b:c1:a3:e8:
                    3a:ae:f3:f0:d2:8d:3b:0e:ca:17:14:6e:4e:1f:2e:
                    80:4c:7f:cc:3c:b2:5e:fa:eb:8f:a9:f4:5a:1e:ee:
                    fb:f4:fb:7a:11:1d:9a:f8:06:0a:2d:03:31:6c:0c:
                    e3:4b:81:9f:6b:cd:60:d9:c5:9d:c8:3a:a1:70:d4:
                    5c:fb:85:bc:63:58:af:73:0b:0f:ac:87:c6:55:23:
                    c0:fa:9e:f2:e4:93:db:91:b6:5f:36:f9:16:6f:32:
                    b8:e4:64:c7:ba:0f:1d:fd:b5:62:33:81:f1:f0:50:
                    d7:b3:25:24:5a:82:ea:69:4b:9f:25:4c:77:e1:21:
                    98:7e:76:27:d7:cd:c1:5e:22:97:eb:6e:55:7b:81:
                    47:0b:27:bb:46:09:7b:f4:35:e1:a2:11:f3:97:3a:
                    0d:9a:2b:42:22:52:e6:b8:27:d6:e4:ca:1a:91:85:
                    3f:3f:f0:b3:1f:32:4b:b5:a7:1c:e5:f5:19:be:78:
                    f5:17:2b:ff:ee:e5:80:01:7e:44:4d:e5:ca:78:6a:
                    40:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:9E:78:BC:14:A8:17:1E:68:BB:C5:6A:9D:D8:9B:D1:59:3B:32:8E
            X509v3 Authority Key Identifier:
                keyid:0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:d5:ae:db:df:d9:e4:39:c2:75:8b:43:62:3d:66:69:32:e9:
         e9:12:a2:f3:15:17:e2:88:6f:48:81:6e:41:df:20:f4:b8:7a:
         2e:be:e6:3e:7c:c0:ec:41:3c:61:3d:2a:cc:24:1c:9b:51:8a:
         92:eb:3e:40:b4:ce:c6:78:d5:20:ec:ec:8c:c4:8b:98:1b:1d:
         6d:c2:7f:0a:5d:3e:3d:cd:fa:8f:44:99:4a:8f:e3:2e:2b:05:
         7f:58:32:61:51:f5:2b:97:61:d7:a5:bc:25:bc:6c:78:e6:2e:
         13:20:3d:34:61:f8:7a:ed:67:dd:28:05:0b:6d:1e:74:f3:3f:
         1e:67:8d:95:9a:df:83:61:ed:d1:b8:e0:59:7a:bd:81:cc:19:
         d2:1c:51:e3:ed:61:e0:9b:9b:af:ad:ce:59:97:75:95:fd:5d:
         25:7d:10:08:72:42:1b:16:49:e4:91:60:3a:17:cf:ab:1f:13:
         38:29:e8:00:eb:96:de:1a:7a:23:89:bf:c9:c9:1e:71:65:2c:
         06:a3:73:a4:53:20:c6:25:5e:dc:b8:64:a5:8a:69:99:b9:fc:
         c8:00:3c:9e:e8:55:99:fd:30:5b:26:e5:1e:82:0a:da:60:27:
         ad:49:ec:21:87:34:21:ff:e7:ca:1d:92:a8:c9:2a:c5:60:3d:
         a2:0c:ba:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:26:48 2026 by rpki-client