Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft
File:                     sf_ufb9_RWbqnjBUaywqLnM28vQ.mft (raw, json)
Hash identifier:          JBgocqv342IEWCGLi+gm2pWhu4UnatP9h4yh99l2dZE=
Subject key identifier:   5D:13:79:AC:01:9D:69:32:B6:CA:83:80:A2:8B:F0:63:A9:AC:B8:2F
Authority key identifier: B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4
Certificate issuer:       /CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4
Certificate serial:       019E1EA2E7E33E102ADFFE4353F436179526
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft
Manifest number:          190A
Signing time:             Wed 13 May 2026 00:00:52 +0000
Manifest this update:     Wed 13 May 2026 00:00:52 +0000
Manifest next update:     Thu 14 May 2026 00:00:52 +0000
Files and hashes:         1: P4g9yTAv1bQsEHzbCNOJ067tquU.roa (hash: kouwCvNmAHfMnCaV0S5emEt24x5TunBBSbVBzdGSrqY=)
                          2: Y360lwoG9eyseVvOT5wT1Z7gt7U.roa (hash: U9JtvNrirG87zfze5K4hjslK7QIiDoWF/Ia/56lwbBw=)
                          3: pWNFve3JFzOWEIOafmb-tq3ozgk.roa (hash: J9P5fP20DSym7BQV4ZtLFdmGdvrRCw0F5AUaKX6zn0M=)
                          4: sf_ufb9_RWbqnjBUaywqLnM28vQ.crl (hash: paaHCoVODhWOEBqF9ik8HeSwQIk195ruMYmkA4BMTl0=)
                          5: wjwk4znZSgE3afujO_o00KJ1wc4.roa (hash: /EHRjEt0mZL7bm2KcS0WqhNixMXZVUS3aHhSERVsdww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a2:e7:e3:3e:10:2a:df:fe:43:53:f4:36:17:95:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4
        Validity
            Not Before: May 13 00:00:52 2026 GMT
            Not After : May 14 00:00:52 2026 GMT
        Subject: CN=5d1379ac019d6932b6ca8380a28bf063a9acb82f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:31:df:3d:3d:bf:6e:71:62:fc:da:e1:a7:59:
                    ed:e1:67:41:5d:61:06:d6:00:7d:de:04:36:a4:78:
                    09:68:52:a5:82:7e:b8:b5:46:c6:a9:31:9d:e1:26:
                    1c:a1:7d:74:ac:4b:83:24:56:bf:eb:63:80:17:ea:
                    ab:bf:af:9e:98:e5:e5:0f:05:9a:9c:bd:e0:05:4e:
                    7d:35:09:77:f5:28:f2:57:5b:fa:ac:22:20:14:f9:
                    00:73:e1:0e:e2:32:40:d1:63:5a:d7:cc:f1:3b:b1:
                    cb:f0:d5:bf:9b:b4:6e:d5:a6:17:d7:a2:a4:6c:c0:
                    5b:34:97:44:06:40:8c:60:45:f5:10:a9:2b:52:9b:
                    bd:54:b4:d8:f1:f6:2c:65:3d:91:b9:46:6b:34:f1:
                    74:b9:f9:7b:4d:25:ec:c2:a0:d3:08:66:5c:a1:21:
                    14:23:8b:31:75:0e:d6:ea:72:26:0c:71:f6:2c:41:
                    69:35:85:c8:f4:28:34:b7:2b:c1:ed:4a:ed:b1:cf:
                    22:6a:2c:32:1c:3a:b7:ab:a8:66:35:04:6c:65:6d:
                    ef:b3:79:24:d6:32:cd:65:9d:2a:05:71:94:98:2a:
                    2a:92:f0:9d:fe:db:2b:82:ee:ed:59:22:59:c8:ea:
                    c7:97:71:aa:38:fe:bd:93:2d:ac:06:5b:b8:ef:07:
                    76:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:13:79:AC:01:9D:69:32:B6:CA:83:80:A2:8B:F0:63:A9:AC:B8:2F
            X509v3 Authority Key Identifier:
                keyid:B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:61:06:97:12:5b:37:74:0d:86:3b:cb:a1:4a:9c:84:09:1d:
         c2:ca:8e:ec:b0:e0:59:f6:a5:81:65:19:27:40:b6:54:a2:0c:
         03:17:9f:f5:5d:e2:38:10:2c:71:36:77:14:1c:68:74:aa:1e:
         5d:85:e4:27:7c:35:9c:a8:f3:b9:26:8f:a2:c6:16:e7:fc:e7:
         8f:77:66:44:0e:5c:73:2f:08:a3:0e:16:6d:eb:9a:34:8c:b7:
         16:16:26:31:42:c9:d7:c1:f1:3d:4b:96:25:23:a4:62:56:33:
         68:7d:98:a5:fe:6e:af:e5:ce:3b:89:d5:4f:96:de:2e:df:19:
         2d:09:e9:44:60:2f:52:83:2b:ee:33:fe:c9:f0:49:8a:47:8d:
         18:7a:0b:47:97:0e:32:51:4b:fa:40:76:3e:22:81:0c:de:b0:
         f2:c5:37:e3:7c:f9:12:71:9d:b1:1c:1a:b6:8f:86:34:5a:95:
         27:f8:98:e2:4d:01:57:15:36:f6:fc:f0:56:26:a6:6b:bd:e0:
         fb:df:24:d8:62:1b:fe:32:a0:ce:a1:53:2e:d8:0b:81:a1:e4:
         d7:e2:cf:f0:1e:b3:3b:34:4a:9e:30:8b:f9:c1:21:25:23:e6:
         86:f4:6b:71:05:77:97:0f:9c:1b:01:82:9e:f3:be:1c:19:2a:
         16:25:48:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:53:32 2026 by rpki-client