Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
File:                     ezhehhZ9XMwi_YWJJWCudgtfKJg.mft (raw, json)
Hash identifier:          jvToXQY/cUPGp2gcp37+76nPppiRVi5TQIwzRysEEIQ=
Subject key identifier:   10:BC:2F:56:19:87:37:8A:E5:44:FF:BE:8E:E0:99:EF:67:2D:66:B2
Authority key identifier: 7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98
Certificate issuer:       /CN=7b385e86167d5ccc22fd85892560ae760b5f2898
Certificate serial:       019E1D9024D6754D3CE088C3053022CEF3E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
Manifest number:          1907
Signing time:             Tue 12 May 2026 19:00:46 +0000
Manifest this update:     Tue 12 May 2026 19:00:46 +0000
Manifest next update:     Wed 13 May 2026 19:00:46 +0000
Files and hashes:         1: Az-iHkJejR0VdZYNnzrlZuh1_DI.roa (hash: sKSrtLFKb8T7tzu/qrkRHr+dbwySR1WM0V46K4Zjtg8=)
                          2: QBz4vHPmaaMrots9J1TfiJn6g8U.roa (hash: 1zuHsD0Vu63nJy0iEzu4F0kzfYEsfd1yuIUMu7fViHM=)
                          3: dr4ERfRqn_ghQRIttdnBh9fXjas.roa (hash: uHaHOk9OGRVoN05Lx2H15zjg2EWZadYEAqhzWiPC/Ak=)
                          4: ezhehhZ9XMwi_YWJJWCudgtfKJg.crl (hash: NWeExVdOCDvzAUGXcdzH8D4+QXpoHMJwCezygbSKPhg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:24:d6:75:4d:3c:e0:88:c3:05:30:22:ce:f3:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b385e86167d5ccc22fd85892560ae760b5f2898
        Validity
            Not Before: May 12 19:00:46 2026 GMT
            Not After : May 13 19:00:46 2026 GMT
        Subject: CN=10bc2f561987378ae544ffbe8ee099ef672d66b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cc:b4:ca:af:d3:70:50:a9:8e:30:8f:46:5e:
                    16:79:11:42:8e:d2:a9:cb:89:e9:36:ca:4e:fe:d3:
                    9f:32:66:e4:09:9d:f5:08:18:1e:fc:a8:2d:63:70:
                    74:83:cb:6a:ff:8b:56:56:83:7f:cf:6d:55:67:2d:
                    96:73:dd:45:81:72:b7:91:10:07:87:13:11:18:40:
                    38:ee:ab:05:74:da:99:5f:15:a6:a5:ae:42:6a:58:
                    38:ea:b3:5d:25:dd:08:9f:a2:58:45:e6:74:42:01:
                    a8:f8:b6:c3:12:a8:69:4f:6a:f9:8f:fd:36:87:a8:
                    fa:cd:57:b3:60:c3:92:77:88:75:38:c0:c4:ff:23:
                    b4:08:11:51:89:f6:e5:3c:0f:9c:3e:1d:e4:ba:d9:
                    a6:61:2c:81:e2:fd:f1:f5:33:60:8e:6d:44:76:16:
                    f4:86:2a:e6:19:ce:91:82:35:9c:22:c9:21:1e:48:
                    00:75:16:5a:42:ec:f2:24:75:d0:5d:cf:be:72:90:
                    29:9d:68:84:9b:ad:0d:42:49:b5:4b:81:46:38:82:
                    89:de:ae:96:b9:0c:51:df:f0:29:96:9c:7b:ff:a3:
                    67:c5:0d:a7:f9:c9:da:9c:5d:58:db:5c:95:44:9d:
                    c7:25:21:b9:4e:79:83:3d:02:f1:ef:4c:d1:2e:c4:
                    f7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:BC:2F:56:19:87:37:8A:E5:44:FF:BE:8E:E0:99:EF:67:2D:66:B2
            X509v3 Authority Key Identifier:
                keyid:7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:2b:9a:fc:75:e4:95:bc:66:2c:33:e8:26:07:31:1e:33:fe:
         c3:bc:42:90:74:dc:24:9f:58:20:0f:90:b3:57:b3:63:5b:a7:
         b3:68:fd:8d:da:66:1f:b5:6e:a3:fa:4f:76:9a:d1:45:12:72:
         fe:e0:13:61:a4:82:04:ba:70:5c:71:dc:40:2e:a0:67:92:65:
         5a:79:b9:1d:fb:26:1d:e0:2f:19:f7:9b:79:7d:92:45:a9:a5:
         a4:5b:97:e3:a5:e2:93:ce:d8:35:ac:dc:3a:a1:58:b3:4b:a0:
         e1:3a:6d:79:3e:1a:31:46:0c:c3:55:8a:e6:f6:2e:62:5f:37:
         4c:c6:44:2e:2e:95:17:d6:c1:55:d1:c8:a0:43:7d:96:5a:3c:
         56:52:19:23:f9:85:50:74:b8:9f:89:fe:35:27:ae:fe:09:9c:
         59:8e:92:f5:20:c6:b5:1b:c0:87:6e:d5:79:9d:37:c6:d4:a3:
         35:77:3b:1f:5c:60:c5:ce:91:39:5d:96:11:aa:c1:57:f1:7a:
         60:2b:90:fb:43:e4:59:f8:12:85:c4:22:05:78:f3:f1:82:08:
         5d:6d:80:56:f9:5e:4e:19:23:a4:cb:13:a3:61:ee:5d:f4:59:
         25:be:b8:a5:06:dd:7b:d8:64:f1:91:b5:e9:93:e9:70:ea:3d:
         a4:3d:45:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:21:18 2026 by rpki-client