Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft
File:                     rpPMjMqB-gDcU-e4B46RtcEbou8.mft (raw, json)
Hash identifier:          2XCH9LgbCiXf8d5rMtjR1QBc508yfAY19yWQQs7300c=
Subject key identifier:   E0:EA:E4:92:A9:BF:3E:00:BF:64:5C:21:80:00:17:8A:D5:4B:BB:D5
Authority key identifier: AE:93:CC:8C:CA:81:FA:00:DC:53:E7:B8:07:8E:91:B5:C1:1B:A2:EF
Certificate issuer:       /CN=ae93cc8cca81fa00dc53e7b8078e91b5c11ba2ef
Certificate serial:       019E205A6E325B89A96443830D57161BE421
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft
Manifest number:          1410
Signing time:             Wed 13 May 2026 08:00:57 +0000
Manifest this update:     Wed 13 May 2026 08:00:57 +0000
Manifest next update:     Thu 14 May 2026 08:00:57 +0000
Files and hashes:         1: YinM9FZ7tYvDuQZElbcHdEksbHw.roa (hash: 8pZ2RgiQMW7t4pyoRKcJqD0BNRo6lf7CbatwYv4YjtM=)
                          2: rpPMjMqB-gDcU-e4B46RtcEbou8.crl (hash: G5RpSpjDbAd6RZQoHiGgm+X7ynF5wTVHNAa98pxNkaU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:5a:6e:32:5b:89:a9:64:43:83:0d:57:16:1b:e4:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae93cc8cca81fa00dc53e7b8078e91b5c11ba2ef
        Validity
            Not Before: May 13 08:00:57 2026 GMT
            Not After : May 14 08:00:57 2026 GMT
        Subject: CN=e0eae492a9bf3e00bf645c218000178ad54bbbd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b6:78:88:72:e6:25:a4:b3:72:5b:bb:2c:33:
                    75:bc:e4:6b:63:54:95:d5:e7:b1:7d:b4:08:65:71:
                    79:d5:2e:82:07:cd:34:51:98:50:e1:fb:91:5c:08:
                    01:6b:ce:22:61:06:7c:35:73:d9:47:27:65:35:31:
                    25:12:b8:be:95:5f:77:c1:dd:05:86:e4:63:cc:45:
                    79:7c:49:ff:05:d5:dc:12:37:4d:1d:62:32:0a:17:
                    b5:d4:3e:7f:37:a7:ca:04:45:ee:d7:61:5d:40:3a:
                    36:f2:8f:c0:5d:83:1e:8d:5f:b9:02:0c:64:68:fc:
                    3a:99:3b:c5:89:a5:84:c0:6a:68:c0:94:16:06:2f:
                    f7:f9:46:ab:fa:0c:51:5e:0d:35:91:00:bd:d7:27:
                    b2:0f:d5:71:aa:93:79:2d:8f:95:0a:8a:48:73:92:
                    2f:24:e7:46:dd:ba:ca:62:8b:72:cd:cc:b8:c0:07:
                    b7:55:86:ef:3b:15:92:07:54:a1:b6:da:a2:b7:90:
                    76:41:3d:ba:01:85:b6:c6:66:9f:96:b3:39:c0:3c:
                    06:53:52:9e:f1:fe:af:05:9d:09:d1:4d:cf:2a:d6:
                    b2:59:97:95:dc:3f:5c:d4:13:78:eb:8d:08:aa:09:
                    a5:5e:51:15:1d:f5:a1:77:44:f6:41:94:d0:49:05:
                    f2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:EA:E4:92:A9:BF:3E:00:BF:64:5C:21:80:00:17:8A:D5:4B:BB:D5
            X509v3 Authority Key Identifier:
                keyid:AE:93:CC:8C:CA:81:FA:00:DC:53:E7:B8:07:8E:91:B5:C1:1B:A2:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:db:41:9c:2e:3a:da:c8:5e:60:ca:a9:96:45:91:71:ab:48:
         ac:b7:0b:e5:df:33:9b:fb:46:41:50:18:4f:82:a3:1d:2d:4f:
         ad:de:f6:21:d3:c3:10:ef:d9:7d:9e:00:c9:cf:6a:be:cd:82:
         36:7a:bc:a9:4d:cd:e2:b2:0d:db:6e:35:46:96:32:60:55:a1:
         2c:1e:3f:a8:24:a9:b4:aa:de:ec:d9:aa:8d:58:af:63:45:bb:
         48:06:b9:d4:72:22:4e:85:68:54:f9:30:8a:48:64:53:fa:5d:
         69:70:58:28:e2:ab:60:55:e7:f2:7a:51:f5:06:40:b2:3c:3e:
         bd:67:63:9b:52:21:19:a3:8c:02:4a:72:a9:7e:4f:f2:00:0c:
         64:54:2b:ab:b9:dd:98:a5:da:c4:9f:28:d3:63:af:33:e3:d1:
         86:9c:f7:c6:08:3e:74:ff:e6:a4:5c:34:b1:47:6b:3a:27:f4:
         84:fb:5c:e2:e4:91:e5:34:7b:f8:96:0d:c1:ec:ca:f9:54:d1:
         29:3a:81:7b:fa:43:1d:54:4f:ce:2e:ec:c2:df:dc:5e:e2:ba:
         0e:59:fc:5c:e8:73:80:a9:a8:94:28:e2:46:05:55:0a:08:b7:
         d3:28:4c:d3:96:55:ac:17:1c:af:d3:fc:0b:83:01:ee:24:df:
         16:06:42:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gWm4yW4mpZEODDVcWG+QhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlOTNjYzhjY2E4MWZhMDBkYzUzZTdiODA3OGU5MWI1YzEx
YmEyZWYwHhcNMjYwNTEzMDgwMDU3WhcNMjYwNTE0MDgwMDU3WjAzMTEwLwYDVQQD
EyhlMGVhZTQ5MmE5YmYzZTAwYmY2NDVjMjE4MDAwMTc4YWQ1NGJiYmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrZ4iHLmJaSzclu7LDN1vORrY1SV
1eexfbQIZXF51S6CB800UZhQ4fuRXAgBa84iYQZ8NXPZRydlNTElEri+lV93wd0F
huRjzEV5fEn/BdXcEjdNHWIyChe11D5/N6fKBEXu12FdQDo28o/AXYMejV+5Agxk
aPw6mTvFiaWEwGpowJQWBi/3+Uar+gxRXg01kQC91yeyD9VxqpN5LY+VCopIc5Iv
JOdG3brKYotyzcy4wAe3VYbvOxWSB1Shttqit5B2QT26AYW2xmaflrM5wDwGU1Ke
8f6vBZ0J0U3PKtayWZeV3D9c1BN4640IqgmlXlEVHfWhd0T2QZTQSQXyCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFODq5JKpvz4Av2RcIYAAF4rVS7vVMB8GA1UdIwQY
MBaAFK6TzIzKgfoA3FPnuAeOkbXBG6LvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnBQTWpNcUItZ0RjVS1lNEI0NlJ0Y0Vib3U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8xNzk4OTEtNDFjYy00YWEwLWFiNjgt
ZjQwNmM4M2IzZmJhLzEvcnBQTWpNcUItZ0RjVS1lNEI0NlJ0Y0Vib3U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8xNzk4OTEtNDFjYy00YWEwLWFiNjgtZjQwNmM4M2IzZmJh
LzEvcnBQTWpNcUItZ0RjVS1lNEI0NlJ0Y0Vib3U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbttBnC46
2sheYMqplkWRcatIrLcL5d8zm/tGQVAYT4KjHS1Prd72IdPDEO/ZfZ4Ayc9qvs2C
Nnq8qU3N4rIN2241RpYyYFWhLB4/qCSptKre7NmqjVivY0W7SAa51HIiToVoVPkw
ikhkU/pdaXBYKOKrYFXn8npR9QZAsjw+vWdjm1IhGaOMAkpyqX5P8gAMZFQrq7nd
mKXaxJ8o02OvM+PRhpz3xgg+dP/mpFw0sUdrOif0hPtc4uSR5TR7+JYNwezK+VTR
KTqBe/pDHVRPzi7swt/cXuK6Dln8XOhzgKmolCjiRgVVCgi30yhM05ZVrBccr9P8
C4MB7iTfFgZCig==
-----END CERTIFICATE-----
Generated at Wed May 13 13:52:09 2026 by rpki-client