Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
File:                     4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft (raw, json)
Hash identifier:          dKHXxCuDEVaBuxYW3zMfPHFkGUqRrff8fHgObq9Kjm0=
Subject key identifier:   7B:7A:CE:93:00:80:9E:1C:EA:F3:97:40:26:CC:9A:5F:E8:78:3B:07
Authority key identifier: E0:89:45:D1:FC:7B:47:0E:68:73:65:5F:75:59:30:0E:09:7A:65:E8
Certificate issuer:       /CN=e08945d1fc7b470e6873655f7559300e097a65e8
Certificate serial:       019E3184E18A5590E74940BC55D1FFFFF71A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
Manifest number:          1912
Signing time:             Sat 16 May 2026 16:00:52 +0000
Manifest this update:     Sat 16 May 2026 16:00:52 +0000
Manifest next update:     Sun 17 May 2026 16:00:52 +0000
Files and hashes:         1: 1_CArV4y8iJiwF-qVbyr6lB9z1M.roa (hash: sgMm20YcGzVkjGjRqisERD3t8QppN0pvoO75EGB83sY=)
                          2: 4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl (hash: slq0bSV0ZFwnxeJhSOuwvtcyrChs9aqpUROUTPASmCE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:84:e1:8a:55:90:e7:49:40:bc:55:d1:ff:ff:f7:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e08945d1fc7b470e6873655f7559300e097a65e8
        Validity
            Not Before: May 16 16:00:52 2026 GMT
            Not After : May 17 16:00:52 2026 GMT
        Subject: CN=7b7ace9300809e1ceaf3974026cc9a5fe8783b07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d3:18:af:35:f6:57:23:4a:cd:b6:4b:7e:f0:
                    99:19:d7:bb:15:cc:a9:ab:1d:17:1c:34:c2:d8:c7:
                    fd:7f:fc:5e:17:21:5c:b4:3a:7c:46:40:86:46:0b:
                    f0:25:00:cc:cb:f2:c0:e2:0e:57:7b:86:04:a0:92:
                    12:b4:41:c2:2a:f1:e6:cd:c9:09:95:35:69:9f:55:
                    48:17:6b:c7:5a:17:87:6c:b5:50:8d:63:3d:c9:94:
                    c9:1a:89:3f:7e:91:8b:1c:94:59:48:92:9d:aa:66:
                    4f:69:8e:bc:d4:f2:6b:08:f6:1b:45:3d:20:0f:a7:
                    4c:36:f2:b9:11:93:d4:22:af:b8:98:7a:58:55:d8:
                    26:76:1c:40:16:8c:47:ae:db:c1:e0:57:c8:1b:cc:
                    8f:1b:d1:1b:bd:4b:f9:6d:0f:fb:f5:38:1f:96:95:
                    57:1a:28:d2:6a:83:42:16:0e:59:a6:47:b2:5a:58:
                    34:cf:1f:45:e6:1b:69:5e:45:68:e8:08:2b:da:8f:
                    75:bd:70:58:62:66:f9:7c:f5:83:37:a4:0d:bd:f0:
                    8e:9f:9a:1c:f4:e5:b4:08:bd:45:ac:18:91:45:9f:
                    65:74:08:5d:3f:92:54:b0:f5:90:dc:c5:5e:64:7a:
                    26:17:25:81:c3:c7:43:e3:2f:4b:55:d0:45:52:d4:
                    1b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:7A:CE:93:00:80:9E:1C:EA:F3:97:40:26:CC:9A:5F:E8:78:3B:07
            X509v3 Authority Key Identifier:
                keyid:E0:89:45:D1:FC:7B:47:0E:68:73:65:5F:75:59:30:0E:09:7A:65:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:9b:89:47:66:d5:49:c9:15:b9:d9:ba:18:cf:c5:75:07:ad:
         6b:71:cf:19:05:90:be:bd:ab:c0:fb:0d:f8:d9:fa:6b:11:34:
         94:ed:05:aa:2c:9e:31:4d:aa:51:e4:7a:b3:fe:00:83:3c:6a:
         37:04:e2:00:79:47:19:47:23:a5:e7:57:83:21:17:90:32:c2:
         d9:ce:26:91:ae:8d:ab:07:ff:4b:02:dc:1d:23:af:17:cf:f2:
         b9:64:83:57:01:56:ed:26:9f:3b:1c:92:fd:02:df:0c:d2:72:
         2e:d5:25:cb:f6:03:77:ce:8a:e8:bf:d6:65:94:fc:1e:b5:55:
         97:29:99:5c:24:17:96:f4:cb:0f:49:f4:04:c3:bd:f3:91:6e:
         0c:36:52:6c:b6:25:06:12:8d:61:c8:8d:4b:6e:a0:3e:64:44:
         52:5a:17:5b:df:8b:0f:70:db:fb:b4:16:8f:12:61:a7:33:75:
         d4:b6:ef:1d:1c:ed:c9:bb:b6:2c:26:08:55:2f:35:8c:a1:00:
         85:01:10:91:19:1a:e1:4e:36:79:cd:be:d0:fb:29:1b:77:ca:
         0b:10:28:81:0b:ba:3d:31:51:9c:6a:3c:d9:71:23:a1:d1:90:
         f1:28:fa:65:1e:8f:f6:ba:11:d0:4e:9e:c7:db:ee:f9:bf:11:
         09:ea:9d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:54:32 2026 by rpki-client