Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
File:                     4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft (raw, json)
Hash identifier:          dwF/0KHmiEZRivUOoQ+G950cQJGndy3+c3L6QTCoZPs=
Subject key identifier:   05:3A:16:26:A4:BE:6D:95:55:1C:E1:73:11:9C:37:80:12:B5:C7:24
Authority key identifier: E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43
Certificate issuer:       /CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43
Certificate serial:       019E1DFE7EF4E44D7F4E11379C3939EC4C3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
Manifest number:          153F
Signing time:             Tue 12 May 2026 21:01:18 +0000
Manifest this update:     Tue 12 May 2026 21:01:18 +0000
Manifest next update:     Wed 13 May 2026 21:01:18 +0000
Files and hashes:         1: 3Kqw9tljPQG5d-js0HaYveBuk-4.roa (hash: D1nlz+BjAzn+Pt0loadLXbRjBXPaaFlVhaNwxEkZAGY=)
                          2: 4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl (hash: YF4SnUMjoZPG+ov8gPKM2TD8jj5g9BwakDxeanKQdMM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:7e:f4:e4:4d:7f:4e:11:37:9c:39:39:ec:4c:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43
        Validity
            Not Before: May 12 21:01:18 2026 GMT
            Not After : May 13 21:01:18 2026 GMT
        Subject: CN=053a1626a4be6d95551ce173119c378012b5c724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:89:c8:55:ac:19:78:09:5f:ab:98:f2:50:e9:
                    34:7e:14:a7:89:0a:a3:2a:29:f2:bc:2c:9d:9d:26:
                    32:95:ca:72:79:95:6b:8c:11:07:2f:f9:e2:2b:dd:
                    c1:9b:1f:2d:d6:42:5e:5b:da:fc:61:24:d8:f4:37:
                    74:1f:68:f9:15:a4:00:8b:c7:e9:21:59:eb:53:ef:
                    4c:df:e3:ca:25:58:2f:fc:76:73:72:c5:a6:13:af:
                    bf:c6:d3:37:87:1f:e9:d4:2c:03:29:4f:c4:9d:06:
                    4d:fb:b3:4e:29:48:42:82:83:27:19:84:4f:74:4a:
                    14:bd:b8:28:40:b5:51:9c:95:a7:1c:00:93:51:ec:
                    4e:f3:82:32:67:6e:77:d4:9a:d1:a4:e9:27:8e:98:
                    32:bf:35:5d:3c:71:ca:74:ec:84:18:5c:cd:28:00:
                    2b:a0:33:59:97:7c:37:21:0e:c1:e7:e4:2c:7f:d7:
                    44:76:f2:6d:e9:89:f9:55:25:47:ff:c0:28:64:39:
                    ad:a9:9c:20:6c:10:c3:e4:90:60:4f:e4:b3:31:f5:
                    27:e4:36:2c:dc:c2:a0:db:80:0c:ae:38:da:cf:b9:
                    e8:cf:5a:70:0d:f3:6c:46:08:ee:d7:0e:f7:33:a7:
                    3d:56:d3:3d:9f:be:46:ac:24:0a:c1:aa:c3:44:47:
                    e7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:3A:16:26:A4:BE:6D:95:55:1C:E1:73:11:9C:37:80:12:B5:C7:24
            X509v3 Authority Key Identifier:
                keyid:E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:9f:c4:18:cb:eb:f7:98:e5:50:71:95:bf:39:a1:e8:43:4c:
         cd:9f:c5:8f:35:ae:25:58:bc:b2:08:24:ee:c6:69:72:0d:cf:
         f6:61:bf:38:a5:73:e3:1b:f0:5f:07:d7:5e:76:bc:95:8b:1e:
         e3:22:6d:b3:8c:82:9d:db:e0:5b:c4:5a:ab:6c:87:53:7f:ce:
         21:ab:6a:92:1c:f3:b5:5e:6b:8a:0f:98:8e:1d:9c:9e:5f:ac:
         c4:7f:c7:d8:a6:f3:95:d6:71:04:55:83:29:9d:08:74:0e:99:
         7e:d3:d5:bb:f4:c0:4c:89:1a:df:85:9c:7d:a3:5f:2a:ed:30:
         2d:28:f5:a9:d6:4a:3f:62:d6:e8:f2:2c:bb:29:46:8d:a5:4c:
         fb:0c:4e:0c:8c:92:f6:79:bc:b2:f8:d7:7b:8d:94:72:38:47:
         72:36:66:f8:3c:59:24:49:2e:09:a6:51:0c:b4:05:c5:2a:1b:
         63:f2:ee:87:03:2a:b7:5a:25:9b:c5:dc:4a:45:b2:6d:dd:4c:
         3d:18:88:16:d3:5f:52:07:ae:1f:ee:74:18:d6:fd:6c:6f:88:
         37:1c:54:da:89:e4:94:b4:50:d2:85:1b:58:65:69:0d:b2:f5:
         f2:2d:ac:84:b2:dc:02:9b:92:2c:b7:c7:95:38:09:a8:d4:cb:
         06:f6:1b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:33:16 2026 by rpki-client