Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
File:                     dE3Tr9fM584AqerGfgvKmb63Kao.mft (raw, json)
Hash identifier:          DJ7slavCpNEI+Tg4tRBW9IjYVcz6rSRa16Xr6AJnmBo=
Subject key identifier:   1B:6D:09:8D:2B:30:69:48:92:E0:1D:10:45:1B:B9:77:EC:04:76:6D
Authority key identifier: 74:4D:D3:AF:D7:CC:E7:CE:00:A9:EA:C6:7E:0B:CA:99:BE:B7:29:AA
Certificate issuer:       /CN=744dd3afd7cce7ce00a9eac67e0bca99beb729aa
Certificate serial:       019E1E3580A7F7C9F37DACAF3B53EF4AC8FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
Manifest number:          1906
Signing time:             Tue 12 May 2026 22:01:23 +0000
Manifest this update:     Tue 12 May 2026 22:01:23 +0000
Manifest next update:     Wed 13 May 2026 22:01:23 +0000
Files and hashes:         1: dE3Tr9fM584AqerGfgvKmb63Kao.crl (hash: r13w0ZQPOfjP+jnIIdakOHdXRsYHuSNLWvTm43aqbkw=)
                          2: jeUCTnllWBc2YjwSNbaBtlWcww4.roa (hash: A3urkixwNeWZh9C+aMoLes8n2HeLxR2S7cO9Wh2QMPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:80:a7:f7:c9:f3:7d:ac:af:3b:53:ef:4a:c8:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=744dd3afd7cce7ce00a9eac67e0bca99beb729aa
        Validity
            Not Before: May 12 22:01:23 2026 GMT
            Not After : May 13 22:01:23 2026 GMT
        Subject: CN=1b6d098d2b30694892e01d10451bb977ec04766d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d3:65:9b:db:37:c8:26:27:ae:e0:e0:ed:16:
                    dd:cb:b3:87:7d:b8:56:c4:71:71:af:a2:51:a6:a1:
                    a9:c7:c2:31:c3:a4:1d:8d:96:6c:62:bd:f5:91:9c:
                    64:1c:ac:b8:c2:b8:b9:e9:85:30:58:b2:5f:ca:a0:
                    15:32:74:11:df:d0:37:95:35:6d:ab:af:df:a0:e7:
                    82:42:1c:0f:75:9e:1e:35:c7:c1:06:d7:6d:5f:f2:
                    a4:7a:c0:74:08:40:a6:e4:fd:51:22:ce:60:ea:13:
                    96:e2:0a:80:d7:5e:5c:f4:3a:b8:21:b0:54:f6:6b:
                    82:a9:b6:a7:4d:d9:5f:27:af:5d:e2:75:dc:59:1e:
                    44:17:42:49:e9:91:3c:f8:7a:ec:e4:8d:5d:4c:5f:
                    c4:48:da:11:21:ba:eb:44:a1:1e:b0:86:fc:17:8a:
                    26:14:11:be:50:1c:57:46:8d:97:22:9e:32:12:9c:
                    51:6d:a7:7c:36:1a:d7:e7:11:02:3c:43:88:e8:46:
                    c0:7f:a6:88:a5:4a:af:fc:0c:01:2e:45:2f:08:87:
                    c9:be:0a:93:20:4c:74:86:82:ab:cf:85:c1:13:89:
                    71:0a:ca:49:c3:c9:de:42:1c:d5:9c:2c:f5:fe:92:
                    15:3e:d5:75:70:f7:5a:90:82:da:19:cc:5d:fc:39:
                    de:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:6D:09:8D:2B:30:69:48:92:E0:1D:10:45:1B:B9:77:EC:04:76:6D
            X509v3 Authority Key Identifier:
                keyid:74:4D:D3:AF:D7:CC:E7:CE:00:A9:EA:C6:7E:0B:CA:99:BE:B7:29:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:19:84:91:89:a6:39:60:5f:eb:f6:9f:d6:40:68:21:63:04:
         5e:bf:8d:59:0e:1c:50:a3:bd:be:29:f5:2a:33:29:b1:e7:74:
         6a:e6:74:7f:6e:80:17:d9:79:6b:49:22:76:ab:3b:a0:a5:21:
         70:d5:0c:44:90:1c:b0:8e:df:10:cf:5f:ab:42:a7:e7:b4:9f:
         9f:9a:e9:fb:62:5d:98:b8:6b:94:3f:af:1c:f3:b3:d5:29:bd:
         1d:05:2c:de:04:c5:5a:1f:dd:63:f6:95:72:44:9d:cf:9f:3f:
         e6:76:6e:32:f8:e4:8a:86:eb:0d:98:04:2f:11:fe:89:75:67:
         f6:e5:08:e2:d5:1f:33:4e:10:bc:56:a3:07:d3:b8:54:28:45:
         33:65:bc:50:f4:5e:94:9a:26:07:54:7e:03:c8:3d:59:44:a3:
         2d:08:e1:93:67:7b:84:89:97:fb:a1:19:41:0f:7e:b0:54:8d:
         10:2b:29:eb:c9:d1:4e:ab:fc:63:97:01:39:fe:da:30:61:0e:
         5c:e1:db:d8:8a:d4:79:be:23:ea:5c:b2:b9:f2:ac:a7:59:ae:
         fb:a6:ab:87:41:09:7f:7f:ca:17:b8:ae:7c:3b:29:3d:c4:9c:
         4f:f3:54:32:71:b8:30:72:c8:3e:2e:9d:97:70:51:3d:ba:23:
         ca:4e:23:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:06:23 2026 by rpki-client