Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
File:                     P5YkCZj85BJMPLTfusuw7RYYQFo.mft (raw, json)
Hash identifier:          gXf1QCTT5vqCWuu2Y1Gn1JqclHZein1OtUMMbUTtPmM=
Subject key identifier:   75:59:2E:48:B0:7A:5C:67:BD:53:B2:0A:96:86:DF:2B:F2:1C:C9:81
Authority key identifier: 3F:96:24:09:98:FC:E4:12:4C:3C:B4:DF:BA:CB:B0:ED:16:18:40:5A
Certificate issuer:       /CN=3f96240998fce4124c3cb4dfbacbb0ed1618405a
Certificate serial:       019E299524332A2106B42448594CA51AAA89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
Manifest number:          1911
Signing time:             Fri 15 May 2026 03:01:40 +0000
Manifest this update:     Fri 15 May 2026 03:01:40 +0000
Manifest next update:     Sat 16 May 2026 03:01:40 +0000
Files and hashes:         1: 8ncEIlz1-5zSR1QhL0rDdEkpqI4.roa (hash: nuQfSOfvY6zkx/iP7wr0MpQfCSukhDWy8/9CULyV7C4=)
                          2: IvA9B2nFsUB8N2tSxI1Z1owm5SY.asa (hash: Luu+iEJI9TF5mINkPbC0AuUUy8TwF281MV1BlQU5AFk=)
                          3: MhAe01ZmLmGIo1FB00FAZblkwBo.asa (hash: aUcLI++76yd3mnnAy6xNFCz8PJWqoY+FNcByDh9aH0o=)
                          4: P5YkCZj85BJMPLTfusuw7RYYQFo.crl (hash: PJNuf7ySUylw+gUzp2z6AujpttEZmtsQtQI6vyTT5v8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:95:24:33:2a:21:06:b4:24:48:59:4c:a5:1a:aa:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f96240998fce4124c3cb4dfbacbb0ed1618405a
        Validity
            Not Before: May 15 03:01:40 2026 GMT
            Not After : May 16 03:01:40 2026 GMT
        Subject: CN=75592e48b07a5c67bd53b20a9686df2bf21cc981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:91:d2:66:56:15:83:be:d3:a2:4c:b8:51:48:
                    d9:98:52:ca:63:cb:d7:e9:e4:81:f8:0d:52:99:76:
                    d4:28:bd:04:b2:ef:02:b8:99:21:8b:b7:0d:eb:50:
                    a3:a7:9b:e6:c2:bc:08:01:73:41:58:37:8f:81:a5:
                    b4:6a:e9:c8:f4:f9:a0:40:bf:7e:72:c0:c2:c9:e8:
                    f1:de:7e:6b:51:28:1f:23:77:ef:b3:d0:27:00:1a:
                    e4:66:b3:3c:79:f2:5e:6e:8e:51:f4:62:fa:a1:a3:
                    a5:c8:b4:69:ee:f1:b8:c4:57:e8:84:93:1d:9e:7e:
                    c9:44:1c:d6:e8:b3:17:86:99:0e:15:d6:85:d4:6f:
                    e9:42:28:ff:14:3d:2b:85:00:d4:3b:e8:53:bd:1b:
                    03:81:91:3f:30:db:3a:4c:e9:66:53:8f:6e:6c:e0:
                    44:bb:36:a9:ef:e3:02:1d:ca:4f:0e:89:90:75:8c:
                    da:90:7d:bf:76:06:6f:d0:1e:a9:1d:0a:3a:87:90:
                    a1:fb:51:cf:55:48:a6:7b:9d:82:a6:84:4e:29:a1:
                    ae:c2:d6:0b:26:56:39:17:dc:43:43:a7:94:0e:6f:
                    91:d7:b7:f8:4b:3c:7f:42:db:a4:79:b2:b0:17:ea:
                    1a:2c:08:d9:7e:59:60:6d:bb:c1:87:0c:18:f3:90:
                    36:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:59:2E:48:B0:7A:5C:67:BD:53:B2:0A:96:86:DF:2B:F2:1C:C9:81
            X509v3 Authority Key Identifier:
                keyid:3F:96:24:09:98:FC:E4:12:4C:3C:B4:DF:BA:CB:B0:ED:16:18:40:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:27:e5:e5:ad:84:f3:2b:e4:d6:d0:37:ed:11:83:fe:8c:c8:
         4c:6f:3e:c5:0d:33:4e:e2:25:a6:73:ab:8e:e1:4a:24:08:89:
         cb:1d:88:d6:32:7d:11:c8:57:14:6a:71:38:04:84:de:be:b1:
         d7:84:2c:aa:76:8f:4b:7e:76:ec:67:75:f4:93:b2:fb:8f:98:
         9e:33:b2:ef:e4:4c:02:55:77:8b:d7:4d:4a:51:10:80:26:2e:
         ab:90:21:59:7f:e5:df:a5:2b:a5:f2:6d:37:15:ba:df:4d:bb:
         4b:6b:a6:76:1a:47:70:bb:4c:12:12:e1:07:68:df:40:6c:41:
         24:d8:ed:8c:73:13:3c:af:11:ea:ae:fd:43:4b:ed:81:5e:3d:
         01:ac:f0:21:33:3f:9e:fb:94:7e:77:af:d1:41:62:9c:9b:94:
         58:73:b4:98:ca:31:d2:ea:1e:57:65:74:74:c4:3a:97:3d:98:
         78:5a:f3:78:9e:bc:a9:ce:59:8e:ec:78:2f:57:02:8e:19:75:
         9e:23:90:09:c2:da:f1:8c:b7:6c:10:5a:35:86:cb:4b:83:74:
         43:23:9a:be:5c:e6:e1:d2:07:4b:63:96:d2:53:6b:9f:fc:35:
         fc:35:0d:c3:b9:f5:e7:0b:91:7a:11:4f:b0:d0:19:96:39:09:
         c2:bc:e9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:01:44 2026 by rpki-client