Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
File:                     l0Zhyxw45jvXi9aysdaGhqVBW_U.mft (raw, json)
Hash identifier:          0V5UGVj7vObqxK6KaYqOufMUQ1M0xKrCUQeM2WGv9cg=
Subject key identifier:   2A:AC:A1:1A:E2:D4:0E:6B:07:A2:6B:D1:D5:C7:34:5F:43:85:21:18
Authority key identifier: 97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5
Certificate issuer:       /CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5
Certificate serial:       019E1C102F4C5A014C2D04528BBA10F44D89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
Manifest number:          190F
Signing time:             Tue 12 May 2026 12:01:23 +0000
Manifest this update:     Tue 12 May 2026 12:01:23 +0000
Manifest next update:     Wed 13 May 2026 12:01:23 +0000
Files and hashes:         1: 3JvVaHFxMvE7oKb_Rk5KcxOo0QM.roa (hash: ni3uO/fhFfgK3uTopvt+sNnEoUiIwxpRI4kiwz3P0Q4=)
                          2: C9Y58BKwkaw0ZHTl_j0txcpI-HU.asa (hash: 6ft+Zt4xMqD8pufWleBqsqUW7RgXeGTKhk+GP4M0q7Q=)
                          3: b4x9At5aHU384b0djamWkOwy0Gk.roa (hash: kQ+bOS8CQlnm4PmXuVXiGK4SgaDFMpdC3HI9bBKlvtQ=)
                          4: l0Zhyxw45jvXi9aysdaGhqVBW_U.crl (hash: b5xOwN/Qhf7BURi5nACUQwT2qzC73kEHcaVqiYqkV3w=)
                          5: mYpQfCwGUFa_N3gCiTs-pRnvFpc.roa (hash: gQqVTcaiR3QtkZ8CYSUcJShg6d7Q858NjMwMx9HDxMo=)
                          6: vEZLnR5almH1CGYItYBwVOGJqYY.asa (hash: Q9dmdkbTJa12zCUuc9rAzbHv2trspyTh+XDW4FOxvK4=)
                          7: yu-i2x-62u9GgIqkbHtrB0flg3s.roa (hash: DBRnQF75P0UT8wiwqTpnRrbuWAWKmmICP891u/zUXI4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 12:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:10:2f:4c:5a:01:4c:2d:04:52:8b:ba:10:f4:4d:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5
        Validity
            Not Before: May 12 12:01:23 2026 GMT
            Not After : May 13 12:01:23 2026 GMT
        Subject: CN=2aaca11ae2d40e6b07a26bd1d5c7345f43852118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c1:93:eb:59:dc:dd:82:a8:59:46:59:e0:85:
                    ea:7e:f2:7c:86:48:8d:cd:be:d9:18:e7:62:5f:d1:
                    74:a5:b9:e9:2c:7c:d0:af:eb:e4:02:82:d3:32:ea:
                    8c:18:c9:f9:7d:0e:7d:89:0d:8d:d0:ae:87:57:d4:
                    89:6c:d4:0e:07:48:e6:f2:42:5e:23:43:06:ae:4b:
                    66:ff:fa:3d:7b:1c:56:48:02:7e:20:1f:4b:2f:c9:
                    c8:bb:9d:f9:df:f9:35:86:5f:49:07:b4:7e:53:d9:
                    38:cb:ad:e0:4a:1c:46:10:5c:22:c8:ff:82:ad:dc:
                    d9:41:07:76:f9:94:66:2a:d7:67:4b:d2:3c:bc:01:
                    6e:40:18:6a:f2:ce:84:b6:8e:51:9f:48:a2:4f:ac:
                    c4:79:f3:c0:9d:2b:af:ae:ab:1c:76:72:d5:fe:12:
                    26:20:9f:d9:83:aa:dc:4d:7f:dd:f0:67:be:10:99:
                    51:a0:d3:c7:88:c1:52:ea:01:11:d6:f4:0f:95:f0:
                    1f:26:63:20:ca:ed:c3:e2:0c:14:42:90:4d:40:05:
                    c6:57:04:78:80:b3:7e:e2:ad:8b:c3:9a:d6:07:6d:
                    6f:38:d0:a2:d7:54:fa:42:b6:e1:d2:90:ca:07:2b:
                    21:21:7d:54:45:5a:a3:43:b9:c1:a4:6a:58:dc:29:
                    84:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:AC:A1:1A:E2:D4:0E:6B:07:A2:6B:D1:D5:C7:34:5F:43:85:21:18
            X509v3 Authority Key Identifier:
                keyid:97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:96:98:01:13:79:d2:b1:ae:72:cb:0c:53:02:ce:3b:81:47:
         bf:3a:94:e3:e8:01:15:16:10:38:9e:fd:57:bd:12:d2:f8:5c:
         32:5c:b4:94:ce:f9:0a:56:fe:05:ae:c1:dd:6e:19:e3:d5:c9:
         7a:db:67:4c:20:15:ee:1f:dd:f1:74:a6:37:39:85:df:4a:b2:
         bd:67:e3:2d:30:0c:9b:8a:82:5e:9d:57:aa:c2:fa:b9:17:fb:
         86:d4:9d:d3:ca:ad:0b:7d:7d:5c:f8:f5:ab:c6:e4:24:7e:58:
         0f:50:32:a6:d9:57:27:63:88:a3:65:f2:80:ae:cc:86:94:f7:
         b9:fa:20:64:d6:2b:b3:08:26:c1:a3:7e:4b:19:0e:66:4b:14:
         ec:b0:96:ce:03:7f:57:4f:f8:de:fe:c3:9e:d5:93:42:56:e4:
         e3:94:ee:ef:db:a8:a1:54:8f:a1:16:f7:b0:73:b9:46:b6:40:
         5b:5f:98:ee:54:59:c2:95:70:0a:a9:44:9a:35:50:2e:21:55:
         f1:1a:96:54:a1:01:64:ad:cf:55:ce:9b:3e:6d:83:82:b6:ca:
         82:69:8d:00:ac:6c:a2:69:1e:5b:0c:65:81:37:21:16:60:88:
         b4:df:e5:b7:f2:d3:08:35:5e:21:41:f2:83:39:29:ef:5f:93:
         7a:a0:61:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:58:29 2026 by rpki-client