Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
File:                     t2AdfMgg3HGRXqkwZz70fyQaccg.mft (raw, json)
Hash identifier:          Rf3FMobm2MA00mBYODq2/IwuKvtHaIMM3T/37rY1178=
Subject key identifier:   CB:36:EB:1A:9F:C2:C8:43:EC:FD:C0:BA:9A:D5:DA:8E:C1:5C:1E:D6
Authority key identifier: B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
Certificate issuer:       /CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Certificate serial:       019E213654ED6DBDD663E9252550803C36BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
Manifest number:          190A
Signing time:             Wed 13 May 2026 12:01:09 +0000
Manifest this update:     Wed 13 May 2026 12:01:09 +0000
Manifest next update:     Thu 14 May 2026 12:01:09 +0000
Files and hashes:         1: 0ahuT_cQ-yr70ImuaU2y8TIM6YI.roa (hash: 2Sp8oKtDy+w7qYM5rV8PIyGUx3izF3kL/3cBlfuy8Ic=)
                          2: REUxyMPs7GWbZsF8OEuAFX9QDL8.roa (hash: qehVRR9bmjq29nQypelWb8SFMyO97IaXW9uMo+fR3FU=)
                          3: t2AdfMgg3HGRXqkwZz70fyQaccg.crl (hash: 2kY4Phz4+YTbsnIFZ1P82c9fR5S1/q8gExgrpE45kpU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:21:36:54:ed:6d:bd:d6:63:e9:25:25:50:80:3c:36:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7601d7cc820dc71915ea930673ef47f241a71c8
        Validity
            Not Before: May 13 12:01:09 2026 GMT
            Not After : May 14 12:01:09 2026 GMT
        Subject: CN=cb36eb1a9fc2c843ecfdc0ba9ad5da8ec15c1ed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:97:0d:c3:be:c3:4d:09:53:33:3e:f4:63:16:
                    b8:fe:c5:17:ea:2d:84:e7:45:bc:fa:df:95:12:ab:
                    63:61:df:05:01:93:68:a3:75:12:94:c7:ea:e5:46:
                    46:58:1a:90:1e:e4:a2:c7:5c:aa:c4:2f:8f:54:ed:
                    ad:40:b0:9d:e2:67:ce:57:44:9c:c2:29:10:2d:ae:
                    31:c0:47:00:4b:f7:5d:5a:7d:65:51:b0:c7:67:95:
                    2b:13:c8:c3:48:5a:26:c3:27:29:03:49:5b:f5:e4:
                    a3:39:72:d3:df:4a:e7:c8:3b:ee:02:1b:ac:90:59:
                    20:74:c3:98:cd:18:70:1d:b6:c2:7e:ef:ef:59:10:
                    d8:35:b6:bc:b6:ce:9f:d7:c3:8d:cb:86:66:72:cd:
                    d4:a6:52:d2:4f:27:a9:a6:18:33:5a:17:71:2a:85:
                    ee:fe:10:1c:96:5f:81:f4:3c:a7:7d:5d:46:79:de:
                    0a:62:50:4e:95:bb:f4:3b:d3:ae:d1:d3:13:d7:a3:
                    9d:a1:34:fe:88:61:25:09:6a:e9:af:b6:21:a8:1e:
                    fc:bd:b9:e0:af:7d:c8:d7:18:19:7a:ac:5a:7a:cc:
                    44:f9:7c:fd:af:db:fc:c1:6a:5c:4e:26:74:88:4d:
                    8e:c7:9f:a6:b4:03:3d:2d:a0:dc:51:41:cc:07:8b:
                    2f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:36:EB:1A:9F:C2:C8:43:EC:FD:C0:BA:9A:D5:DA:8E:C1:5C:1E:D6
            X509v3 Authority Key Identifier:
                keyid:B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:a1:1d:87:df:9f:06:2b:85:8f:0c:c1:6a:0a:cd:5d:bd:bc:
         3c:c6:6f:0e:98:7b:17:0d:b7:99:d0:13:8f:88:37:b4:41:7e:
         45:2b:73:6b:17:76:be:d6:f1:98:a1:f5:c0:82:d7:10:27:97:
         89:0f:b1:e4:2e:ab:10:37:b2:6b:9d:ed:e3:c4:3d:fc:eb:fb:
         7a:2d:6a:b3:a7:e9:02:27:f8:52:8d:4e:be:78:59:5a:fc:af:
         b4:66:98:64:3a:2b:29:f6:57:48:72:06:e9:3d:11:c9:a5:f7:
         12:19:6a:b5:00:a3:64:f9:80:9d:2e:5d:ec:b8:f6:eb:6e:94:
         ba:13:44:e1:31:bc:43:1d:5a:6d:1b:2f:5f:cd:a4:6d:bc:c1:
         cd:52:27:00:91:e8:72:80:54:4a:84:94:17:3c:9b:bd:70:32:
         d6:c7:84:24:6c:f9:eb:1f:c1:fc:ac:93:cd:7a:65:3c:d1:9e:
         73:4f:82:ed:76:dc:76:79:75:5c:80:72:53:88:e0:f9:40:93:
         ba:ee:be:c8:3a:0a:fd:17:99:e3:df:8c:c6:25:d7:41:06:4f:
         9e:f6:83:07:bd:fe:b1:26:9b:2e:9f:e2:90:11:89:86:07:3d:
         96:7a:1c:aa:21:9f:6e:d1:60:50:15:57:84:46:aa:b1:77:7e:
         23:ba:b9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:50:03 2026 by rpki-client