Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
File:                     4OkqeIpBBX0ndk8W87HSo-9jRdY.mft (raw, json)
Hash identifier:          qVK1HjsLZfdnW0zr1ykcPKcFXGlw5Tb5Ci0ZnVmyGnc=
Subject key identifier:   0D:B7:6A:C4:5F:69:03:EA:F6:DA:D9:EF:9F:09:00:60:60:E7:17:DB
Authority key identifier: E0:E9:2A:78:8A:41:05:7D:27:76:4F:16:F3:B1:D2:A3:EF:63:45:D6
Certificate issuer:       /CN=e0e92a788a41057d27764f16f3b1d2a3ef6345d6
Certificate serial:       019E1C1059E9988EE202297C760213B46B28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
Manifest number:          1905
Signing time:             Tue 12 May 2026 12:01:33 +0000
Manifest this update:     Tue 12 May 2026 12:01:33 +0000
Manifest next update:     Wed 13 May 2026 12:01:33 +0000
Files and hashes:         1: 4OkqeIpBBX0ndk8W87HSo-9jRdY.crl (hash: iKN8yKpBxxIZvewUNnHhCjusx3tVHjYlhWHzGwwsEeg=)
                          2: Dv6DzYWC8QD9B_MZto_ESNK4j6k.roa (hash: punip1kHRpKApQYHrsUHwLPlb8qszTQ5w8o2U1ESN+k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 12:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:10:59:e9:98:8e:e2:02:29:7c:76:02:13:b4:6b:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0e92a788a41057d27764f16f3b1d2a3ef6345d6
        Validity
            Not Before: May 12 12:01:33 2026 GMT
            Not After : May 13 12:01:33 2026 GMT
        Subject: CN=0db76ac45f6903eaf6dad9ef9f09006060e717db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7e:5f:94:a8:3f:d9:25:f4:f1:c8:f9:b4:6a:
                    b1:d3:b0:4c:8b:42:94:f5:c3:a4:b6:3b:47:ff:a6:
                    cd:6f:fd:30:da:10:9f:55:e2:ff:0e:f8:31:c5:55:
                    43:e0:25:95:03:28:23:e4:49:07:1f:94:00:9f:bc:
                    b2:25:33:8d:0e:3c:99:19:e0:18:a5:d3:20:28:f6:
                    24:46:53:9d:06:48:c8:5f:34:9b:72:c1:78:05:0a:
                    1f:03:60:25:b2:09:0b:35:7c:5a:2c:22:6e:32:d5:
                    59:59:5e:4f:be:28:98:f9:06:17:5d:e2:92:30:7f:
                    59:08:3a:66:db:06:d2:92:2b:aa:61:c0:a2:9a:7e:
                    0e:64:38:7a:59:cf:8e:a3:6e:ce:b2:fd:01:8d:c5:
                    17:60:b3:98:30:22:88:93:f1:0e:92:c4:2f:80:79:
                    4a:54:29:bd:63:0a:f3:2c:90:ea:bd:15:3f:b5:02:
                    72:60:0b:b4:a6:fd:fa:e0:00:9c:42:16:12:d4:4b:
                    00:b9:a2:5a:eb:10:b2:a8:72:94:36:b6:c2:45:67:
                    3b:7e:f6:eb:7b:0f:15:b6:25:50:92:5f:ac:c7:dc:
                    f6:49:0e:80:fd:84:cf:a0:9f:98:62:41:5b:c4:bb:
                    5d:dc:54:c1:c3:f3:42:30:8b:0e:94:0c:36:f9:2a:
                    e5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B7:6A:C4:5F:69:03:EA:F6:DA:D9:EF:9F:09:00:60:60:E7:17:DB
            X509v3 Authority Key Identifier:
                keyid:E0:E9:2A:78:8A:41:05:7D:27:76:4F:16:F3:B1:D2:A3:EF:63:45:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:14:d4:d3:90:28:41:e2:28:31:1f:d6:3c:3f:fd:10:98:e3:
         8d:f7:c7:aa:89:56:f6:9b:f3:39:26:ed:17:a1:9b:4a:b1:25:
         f2:54:82:eb:d3:00:84:f8:02:82:c7:76:89:20:d2:fa:80:73:
         73:97:73:ff:64:5f:47:cd:78:28:e7:9f:a6:a7:b0:44:68:01:
         dd:4c:5c:43:14:a1:6b:97:35:e0:99:b2:52:88:bb:f9:7d:26:
         79:37:db:3c:e4:56:b1:d0:5f:3b:49:b9:4d:0d:1b:60:e4:a7:
         e0:a7:e8:d0:5b:78:2d:c5:5c:2b:52:4d:71:28:1e:2a:43:1a:
         ed:5f:61:4b:80:20:26:fa:26:a1:aa:99:e6:0f:f1:ea:24:ab:
         75:a3:33:47:2d:2a:d5:3c:97:17:a3:6a:bb:0b:9a:cd:1d:be:
         f3:76:f9:ac:cc:65:c4:f5:7d:1a:4d:63:87:fa:1f:eb:35:ac:
         27:09:aa:49:9f:0c:75:96:66:40:0b:ef:c0:a2:a3:a1:9a:5c:
         c4:e3:16:7c:13:05:95:95:05:9f:f3:81:2f:04:2b:77:2a:4c:
         0c:d6:c7:cb:25:f3:8a:47:37:fe:62:16:19:89:a0:d7:12:e7:
         d9:dd:37:04:16:dd:1f:8e:2d:04:6b:42:54:b8:63:a7:77:a2:
         73:58:40:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:38 2026 by rpki-client