Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
File:                     H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft (raw, json)
Hash identifier:          N1cdA8rOsp4+vizIDZRCCfL193m6mohfi2Wp47Zt/pk=
Subject key identifier:   79:98:FF:9F:BD:34:92:E7:0E:5E:9A:5C:4B:1D:E8:F2:75:1B:0D:40
Authority key identifier: 1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34
Certificate issuer:       /CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
Certificate serial:       019E1EDA32FD9FBB78DCAB8181829AF25745
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
Manifest number:          1921
Signing time:             Wed 13 May 2026 01:01:16 +0000
Manifest this update:     Wed 13 May 2026 01:01:16 +0000
Manifest next update:     Thu 14 May 2026 01:01:16 +0000
Files and hashes:         1: BMPT7NzV-DRi_JSyLfbyEmpeKTA.asa (hash: 15wpV31R6UH9KqtLpqrDAtPxo5M+xz55jsCaBxJ8PWk=)
                          2: H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl (hash: xPVs2mamUal5IfbRfgPEWBZYM5XjS7QZL9fCv3FiIIs=)
                          3: RoJCbChu4UCP6HbU25IvOtcjfaQ.roa (hash: ZExXuwYNhboyV3wplBFPIwIw4SZUYPtrZTHjOMct0iE=)
                          4: TCMNO3-CS_Nx-NPlLu6HlbDn--Y.roa (hash: JY2kbXROkO8FWfujlDIjurbZxxm0qrKzSX4v6ycpeWY=)
                          5: X5485C7ZqsWTqkySl5Kn8ckUA60.roa (hash: w+70iAnq3DeMprlSCHwSgxGyujS0yHyNG0DURrrh5ls=)
                          6: Zl6fGzQYTOHjw4PolDvPxgAOgoQ.roa (hash: GhUA9dcCQFJ4Ezs37D2x3nBwq7ffRWZrt0wbE9KxdKY=)
                          7: aPxKVSvNRXkuueNUo0oD6qVAbdI.roa (hash: 61RoVPH2gZzr7aCEfyXLcJOn37DXu2XNDfa7Kms2beA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:32:fd:9f:bb:78:dc:ab:81:81:82:9a:f2:57:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
        Validity
            Not Before: May 13 01:01:16 2026 GMT
            Not After : May 14 01:01:16 2026 GMT
        Subject: CN=7998ff9fbd3492e70e5e9a5c4b1de8f2751b0d40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:99:72:a0:6b:5b:ea:ef:26:05:81:1a:84:b7:
                    c8:98:12:2a:02:78:f6:68:00:c8:ad:d3:86:14:56:
                    50:4e:1e:ed:0f:43:d9:d3:5b:27:d2:81:4a:83:0c:
                    94:58:d8:e6:9e:b4:4d:ab:97:4d:11:4b:c0:b2:ea:
                    61:9c:31:e9:7f:08:fb:ba:64:55:17:d9:e2:5d:1d:
                    b9:12:1e:c6:95:c1:da:db:cc:37:54:88:28:92:17:
                    9c:5c:86:48:ab:a7:a9:bb:0f:5e:5f:b0:6a:7a:8d:
                    b1:ed:38:be:25:d2:8f:1e:59:e2:98:9c:2a:15:f6:
                    fa:e6:6f:fe:ef:d1:b6:70:49:0d:8e:86:15:71:df:
                    e2:be:61:5b:6b:60:09:0d:67:56:16:16:34:d6:80:
                    af:63:ad:c0:0f:c3:79:55:81:ad:35:7a:73:f9:65:
                    1d:20:83:27:61:42:08:ce:3c:46:72:0b:a9:f1:90:
                    6f:aa:55:d6:ba:1d:9f:b5:5f:50:c7:ee:48:be:ce:
                    f4:b8:d3:2b:be:40:5e:0c:e0:f8:7e:ad:98:00:57:
                    d2:04:d9:e4:67:e0:74:c9:fb:19:e5:8c:97:53:c6:
                    06:12:7f:89:3d:23:fe:e2:46:50:92:ca:db:52:ca:
                    a1:76:37:61:16:1e:de:d5:9a:f4:d4:19:c7:c3:ce:
                    9c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:98:FF:9F:BD:34:92:E7:0E:5E:9A:5C:4B:1D:E8:F2:75:1B:0D:40
            X509v3 Authority Key Identifier:
                keyid:1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:85:d7:ac:41:25:06:80:b1:2a:15:b0:90:21:78:70:46:d0:
         62:a4:db:4b:7c:99:ad:1a:47:68:46:53:0b:18:ea:31:13:2d:
         32:8c:8f:14:e7:7a:22:cb:ac:f3:81:d2:3d:27:c4:d8:da:f9:
         6e:11:3f:f5:99:d5:fe:13:8a:37:0f:98:26:3d:74:ad:5f:6d:
         61:5b:65:c1:87:34:f1:13:89:18:fd:53:99:9c:c2:7f:12:5d:
         a3:30:93:96:ed:85:45:c5:f3:93:53:00:d1:7b:02:0f:c6:89:
         38:58:9e:28:af:74:9c:6f:4d:19:f3:f4:1c:d1:4e:16:82:63:
         cd:73:f9:43:36:47:b3:6e:e3:03:51:fb:12:be:ad:6e:f1:a5:
         26:e9:18:f6:60:74:90:25:40:6a:3c:2f:ba:a6:b3:66:fa:cf:
         21:1c:01:c5:41:3d:1d:e4:63:81:10:ae:b4:d9:7f:23:21:5f:
         99:f4:42:60:c6:4a:e6:1b:06:95:df:23:70:9e:d8:2e:79:7b:
         bf:e7:d7:f4:92:e0:21:6e:57:90:4b:2e:22:84:4a:de:97:51:
         68:58:fd:47:c2:8b:f1:ce:3f:13:a7:ef:d1:f5:bf:44:17:ee:
         7d:e4:b1:06:3c:bb:50:58:4e:34:ee:e4:25:39:51:50:53:26:
         6a:33:42:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:01:56 2026 by rpki-client