Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
File:                     L4FK3B1SCeCY8HitvIVrrYO3ScI.mft (raw, json)
Hash identifier:          u1TtTmgFkoajj/KQHveVj1zhksFum1XRbQWu10C6IuE=
Subject key identifier:   94:82:35:5F:DA:41:A9:45:A6:7B:9C:AA:42:0F:3E:CA:8C:FC:C4:96
Authority key identifier: 2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
Certificate issuer:       /CN=2f814adc1d5209e098f078adbc856bad83b749c2
Certificate serial:       019E1EA2EAE22FF651ADDF6269501BB01A30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
Manifest number:          1945
Signing time:             Wed 13 May 2026 00:00:53 +0000
Manifest this update:     Wed 13 May 2026 00:00:53 +0000
Manifest next update:     Thu 14 May 2026 00:00:53 +0000
Files and hashes:         1: Fs9aAyK9lTsbVm0NOu0XxmRrYvM.roa (hash: RzyHKDUe729UgBjp7Kobbrat8Gaw2JQ/Zg4A7HvcVdI=)
                          2: L4FK3B1SCeCY8HitvIVrrYO3ScI.crl (hash: Jy+pRV7FxYUnPeObddSUEBg79y+Is5zr0/pGoX7jF9o=)
                          3: MrkTSTOQnAaGRm2DjkE4wDAii6I.roa (hash: IemK3qnTPE/e8MsNSBvQ7f7MgzptN5jWR7/rlu58qzM=)
                          4: RPfAXv-f8uBkkH0WybryVHOTpQU.roa (hash: C6w//enAOUR/TI2OpJYps6HovP/3vBWM2Hbve1rPMiI=)
                          5: gF4iUNMjCX6YP857V9CNjLm-AIg.roa (hash: FhDwHm21Q6QTRo/sfldBISr1alr6N55dx1Ou14/lEJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a2:ea:e2:2f:f6:51:ad:df:62:69:50:1b:b0:1a:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f814adc1d5209e098f078adbc856bad83b749c2
        Validity
            Not Before: May 13 00:00:53 2026 GMT
            Not After : May 14 00:00:53 2026 GMT
        Subject: CN=9482355fda41a945a67b9caa420f3eca8cfcc496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:de:91:1e:eb:ca:cb:05:f3:e4:ae:cb:f6:0b:
                    7c:3f:82:eb:1c:90:cc:50:ea:26:9c:13:01:01:09:
                    c6:82:37:40:ba:4c:9e:79:e6:3a:23:cd:88:8f:0b:
                    dc:93:37:be:5f:44:bc:a6:65:79:0e:ac:3e:49:fd:
                    ae:c0:e5:7e:43:11:14:d3:ff:73:07:a6:41:b4:4a:
                    35:e4:97:4e:a1:4c:32:a1:c4:75:be:95:2b:89:63:
                    f8:cb:d6:c5:3d:d7:ea:57:f2:01:61:2c:25:f6:f5:
                    05:b3:43:90:35:f9:86:45:8a:1b:8a:da:51:7a:24:
                    24:86:ff:0d:25:6d:6f:69:b1:be:ff:f5:93:93:72:
                    d2:41:d9:fd:19:fc:79:c4:98:62:57:ba:98:d9:15:
                    f8:8c:86:a0:3b:4b:5e:ce:4b:28:c7:c5:2f:7e:9d:
                    f3:ea:42:e7:81:69:10:74:d4:3a:17:3e:c4:f3:00:
                    93:fa:dd:74:09:34:ff:ab:a2:d8:4d:a8:47:56:e3:
                    24:26:c1:13:1c:08:34:44:ff:ef:da:80:5f:40:a3:
                    d6:fc:32:21:88:17:45:80:ef:2d:51:90:5f:42:12:
                    72:27:d1:39:11:65:27:89:2b:c0:9c:4b:8e:97:c8:
                    48:7a:f7:cd:93:6c:54:2e:10:2a:8b:33:72:9e:0e:
                    09:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:82:35:5F:DA:41:A9:45:A6:7B:9C:AA:42:0F:3E:CA:8C:FC:C4:96
            X509v3 Authority Key Identifier:
                keyid:2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:c9:05:ec:d2:0c:5a:db:dd:f9:07:35:60:6c:76:9c:44:aa:
         18:0f:48:0b:df:de:bc:00:c4:91:7a:7c:d4:bf:df:c0:92:10:
         ae:ba:47:f3:6b:74:25:e8:a9:bc:60:02:f0:af:aa:fd:e7:1c:
         d1:80:43:d8:29:c0:c6:8a:82:f3:e0:1f:13:ca:79:76:7e:72:
         c6:9d:51:d5:45:27:e6:4b:ca:7d:cd:c0:e4:d3:97:b3:bd:50:
         9d:27:80:59:f2:e1:e6:aa:0a:ec:83:a6:c4:a6:49:0d:ef:93:
         d1:89:db:82:c9:26:a0:d4:11:01:a2:22:94:e0:d1:6c:7c:3a:
         82:a6:a8:66:ef:c3:d3:41:5d:08:5f:c2:75:8f:27:65:e8:98:
         a4:b8:e6:b3:13:75:3c:04:3b:4d:37:59:3a:bf:00:61:b6:0e:
         48:ae:85:5b:e9:70:60:21:74:a8:be:7e:e1:22:b2:31:2d:71:
         50:73:40:20:c2:44:15:60:25:2e:0c:74:fb:0b:af:b5:92:2a:
         c2:58:ae:92:48:4e:c8:a9:cd:9c:7a:b6:ce:f0:4d:17:74:e4:
         1d:67:f4:17:3a:a9:a7:8c:0e:c2:e9:59:37:52:dc:db:a0:57:
         0e:3b:04:e0:97:09:ac:f2:4e:da:f1:2e:4a:73:26:65:3a:f1:
         3b:69:84:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:46:33 2026 by rpki-client