Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft
File:                     ADssOHEGkAKtCy9CsMv16S475LM.mft (raw, json)
Hash identifier:          WADCy4/T2UFT9HOO7piZl31T6Ifm1ZhcE4tHzYMBweg=
Subject key identifier:   64:8F:67:2F:DA:DC:19:3B:8A:DF:A6:56:31:72:C8:A2:1B:77:7B:FD
Authority key identifier: 00:3B:2C:38:71:06:90:02:AD:0B:2F:42:B0:CB:F5:E9:2E:3B:E4:B3
Certificate issuer:       /CN=003b2c3871069002ad0b2f42b0cbf5e92e3be4b3
Certificate serial:       019E1D901589702379C0B359EE81E2E8CD1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft
Manifest number:          1914
Signing time:             Tue 12 May 2026 19:00:42 +0000
Manifest this update:     Tue 12 May 2026 19:00:42 +0000
Manifest next update:     Wed 13 May 2026 19:00:42 +0000
Files and hashes:         1: 2c0jqBuEH1mHawmDju5SJrb9XO4.roa (hash: 4iGaC+nsr7eIRDAsx1YlRBvu72t0bZzh6T9oxMZT12o=)
                          2: 49mG2LIAGgPUY2ZzmJGz3IeznXI.roa (hash: 7aWoWG5rNXduvslZ3E4HwcG2X6Htck+37nEJTi56c7o=)
                          3: ADssOHEGkAKtCy9CsMv16S475LM.crl (hash: o0X4ICKe3p3rYr3rEeeelUlsU0M+NTWQ+JE91eTSCmM=)
                          4: Fb3QRguUDty9iQr1ULGmN54gLiI.roa (hash: kgzbakyVLR8dQ8e9EI+6xpmdVsMJI+WFbZcHU/IXAUc=)
                          5: SfEPdB4zSzundHQL8u1ry-xE4Vc.asa (hash: YBQfRgXIESZ5hCHeLjGYkAamoqJ89Tdiiao0w4ZWcjY=)
                          6: dECFcKuPIDtaKYfkBtHP9FzNkPY.roa (hash: nfxA7gIFHYR0X3UKRvPVNyH71Z4WvtDgdmK9W79oICs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:15:89:70:23:79:c0:b3:59:ee:81:e2:e8:cd:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=003b2c3871069002ad0b2f42b0cbf5e92e3be4b3
        Validity
            Not Before: May 12 19:00:42 2026 GMT
            Not After : May 13 19:00:42 2026 GMT
        Subject: CN=648f672fdadc193b8adfa6563172c8a21b777bfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e7:42:3d:65:c2:a1:b9:ff:5c:71:1f:c1:d7:
                    f9:ad:d7:22:5d:c0:e2:d2:c2:a7:67:72:77:81:af:
                    f9:57:f2:b6:45:88:a4:ef:e7:3e:a3:0a:1c:82:61:
                    98:7b:be:3b:00:34:0e:c5:34:70:20:6a:b7:b9:8d:
                    41:ba:96:1a:9b:9f:9a:fa:9f:dd:e2:5e:4b:87:4e:
                    23:56:e4:78:8e:7b:86:b8:8e:23:57:7d:2a:cb:a9:
                    1a:4d:5a:d9:c7:a0:28:5d:41:09:44:cc:b9:63:b8:
                    9a:e3:04:ee:9a:7c:cf:ff:87:1c:2c:81:ee:32:19:
                    76:a1:7a:66:25:dd:52:3f:48:22:28:e8:f1:69:b0:
                    d2:25:5d:ad:5b:36:74:78:ef:07:d8:3f:0a:de:ad:
                    56:a4:50:63:0b:ef:2f:1e:54:85:f7:80:41:b7:b6:
                    f2:5d:37:57:21:ad:70:a0:55:5d:28:e3:6a:88:f4:
                    c5:61:cf:19:41:d8:d0:42:0c:bc:96:a1:25:9e:7b:
                    77:33:50:97:33:5b:5d:fe:7c:bb:9c:ba:9e:80:9e:
                    71:21:af:ef:3b:36:1e:b8:f4:44:2b:65:d0:a6:60:
                    e6:0f:eb:35:86:66:7e:7c:5e:a6:40:34:e0:3c:9c:
                    7e:0b:99:33:ff:47:ac:2f:81:71:90:31:fc:57:1b:
                    79:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:8F:67:2F:DA:DC:19:3B:8A:DF:A6:56:31:72:C8:A2:1B:77:7B:FD
            X509v3 Authority Key Identifier:
                keyid:00:3B:2C:38:71:06:90:02:AD:0B:2F:42:B0:CB:F5:E9:2E:3B:E4:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:2d:cd:60:65:75:a0:1b:2f:e0:00:dc:d3:26:fd:8d:81:d3:
         f2:a3:ac:64:f1:a6:03:40:4e:cc:58:91:dd:b6:a8:cd:ab:3f:
         2b:31:2c:7e:ac:81:75:ec:87:86:c5:db:54:75:31:99:7e:46:
         84:c6:e4:8c:e9:91:22:15:1d:22:d9:00:82:a8:82:0f:2f:ad:
         fe:b5:42:84:75:00:07:18:81:8c:c6:b2:db:ce:06:cf:08:c0:
         ee:bd:91:5a:59:e8:30:81:30:f7:66:cf:92:95:32:b8:c8:dd:
         2a:4e:1a:50:e3:f5:79:6d:8d:ce:a1:a6:d7:fd:8d:b0:76:be:
         07:ba:83:54:6b:9a:1c:28:ab:e5:35:92:a5:55:78:cf:05:d6:
         ed:00:68:cf:c6:60:db:58:32:9e:cc:20:4b:50:f4:eb:58:ef:
         92:a3:22:d8:5a:0f:85:60:3f:dc:e2:fb:4f:d3:b3:32:10:44:
         9d:ac:bf:09:60:68:71:4a:6e:57:b0:69:2b:4b:74:05:a4:d3:
         7a:4d:28:47:72:27:79:be:5e:ae:45:3e:f8:ee:dd:e0:50:34:
         7e:f4:7a:61:91:f2:e8:30:68:bb:9a:28:29:3e:62:9f:38:4b:
         55:d3:d1:37:23:30:8b:11:52:c6:1d:01:5f:82:04:f7:8b:d8:
         b6:e7:3b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:22:51 2026 by rpki-client