Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
File:                     N4kaRySqxrXaAAUymqOlq-h3edY.mft (raw, json)
Hash identifier:          NbqUeUpE22Jz9ObT8wnxXeAc33W8z52l5wyG9JX7C8o=
Subject key identifier:   13:48:3F:34:91:EF:70:5B:20:64:9F:04:F6:F2:7E:B7:83:A1:84:4E
Authority key identifier: 37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6
Certificate issuer:       /CN=37891a4724aac6b5da0005329aa3a5abe87779d6
Certificate serial:       019E1F11AA567D405F02EB345317A5A725EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
Manifest number:          1909
Signing time:             Wed 13 May 2026 02:01:51 +0000
Manifest this update:     Wed 13 May 2026 02:01:51 +0000
Manifest next update:     Thu 14 May 2026 02:01:51 +0000
Files and hashes:         1: N4kaRySqxrXaAAUymqOlq-h3edY.crl (hash: gvPx3XWaYBsoV/a+to/Qgg2XNWrpF4qaulf5m+HmVwQ=)
                          2: UzFn8n9_tf4w-iKCTtFhG5SnWpg.roa (hash: MFFkmnS3mVWWhbrVUQrhXKSWf1rXCa5UvdnfcnOZCV4=)
                          3: rELVahjt1c8lTGoZpqa7vRSAnPI.asa (hash: Jkl0L2KnFtoO3o9B8qrY2SaLkPz/kGTYDBX13TOtZp8=)
                          4: s9j8m-8R6ZZMDkYNpOB9aWUHmH4.roa (hash: sc211FLd1kmYlTTkcgRulGWHSsW1mSr9tSsdYR3sIng=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:aa:56:7d:40:5f:02:eb:34:53:17:a5:a7:25:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37891a4724aac6b5da0005329aa3a5abe87779d6
        Validity
            Not Before: May 13 02:01:51 2026 GMT
            Not After : May 14 02:01:51 2026 GMT
        Subject: CN=13483f3491ef705b20649f04f6f27eb783a1844e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a9:51:b3:54:10:62:f0:2a:9c:66:25:33:20:
                    78:a8:6c:31:64:d0:03:4e:13:1a:b8:fb:ac:aa:d2:
                    a4:bc:68:a0:89:58:e8:81:c6:66:2d:aa:15:58:6e:
                    b0:c4:ed:33:17:6c:40:39:30:3b:25:96:a7:25:4a:
                    d0:60:13:b0:fc:57:44:53:3f:80:c6:c1:3c:64:66:
                    ec:d2:47:19:ab:ad:fe:34:4c:f8:6a:bb:ec:85:64:
                    74:9e:4d:a0:3f:70:09:5d:16:9b:76:07:a3:ea:0f:
                    00:94:91:a9:83:3e:02:93:02:82:f6:6c:88:73:3b:
                    44:97:c8:ea:32:d1:19:2b:37:46:7c:c3:1e:99:2e:
                    4b:4f:6f:76:82:cf:f5:80:1e:d7:9a:d8:1b:ed:23:
                    0c:05:04:48:02:c2:c5:6e:6e:b5:f1:d1:0b:f8:22:
                    1d:e4:60:65:fe:20:0d:14:fc:f1:31:9d:31:f7:bd:
                    e9:aa:25:dc:ce:ff:e3:ee:a6:62:5b:ea:bf:40:aa:
                    0e:bd:93:23:19:fb:14:81:07:5b:22:39:6a:92:17:
                    e7:f4:19:87:7a:61:06:8d:42:c6:82:51:bf:bd:31:
                    74:52:b9:59:1b:87:16:d9:7d:b0:b2:f6:87:bd:dc:
                    9c:97:37:9a:39:cc:f3:9a:2f:dc:2c:bf:44:74:14:
                    9d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:48:3F:34:91:EF:70:5B:20:64:9F:04:F6:F2:7E:B7:83:A1:84:4E
            X509v3 Authority Key Identifier:
                keyid:37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:4f:79:9c:1d:a9:2a:bb:67:22:eb:d9:36:d4:4b:50:39:52:
         85:d0:38:27:94:9c:52:bf:20:b8:39:b8:9e:43:f6:d2:c4:6f:
         4d:23:af:10:9b:5e:5f:32:c0:65:52:7f:2d:0e:37:e1:e7:3d:
         3c:6a:a4:b5:ba:27:00:67:db:52:68:5d:33:29:3b:96:fb:30:
         74:c2:51:da:0c:4c:cb:f8:42:fb:15:6d:93:a6:81:97:54:dd:
         7f:63:bc:b4:96:28:90:41:f2:82:56:83:28:af:13:9a:d7:ed:
         8f:ec:0a:90:5f:f8:63:bd:eb:d9:b3:5e:b5:4e:bd:b8:61:5a:
         fe:7b:24:64:ab:cf:89:f9:f8:08:a6:26:9b:31:a7:c5:9f:d9:
         96:ca:c4:07:d1:ba:b4:51:b7:78:7c:66:b8:b2:53:49:ff:5c:
         b8:dc:4b:f0:95:da:e7:21:94:31:6f:70:19:6f:01:49:fb:ba:
         81:fa:82:62:2b:e8:05:c7:bb:a6:54:f3:5d:7a:b4:ae:30:22:
         5d:f4:79:52:96:c5:ad:d5:94:cd:c6:54:db:46:b1:a6:7f:89:
         2a:41:8f:c2:74:da:0d:ce:b4:84:5e:01:fe:7a:3f:66:43:e5:
         cb:24:2a:0d:9d:30:4d:65:70:75:6e:04:34:46:e2:23:fc:d2:
         01:0a:36:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:36:20 2026 by rpki-client