Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
File:                     SU14c0FlEKL7I0bvNCKAFVUicTs.mft (raw, json)
Hash identifier:          O8SuJuBrKX5YYCm+5GKxqtN1wDE17zp1EKegs+yAt0g=
Subject key identifier:   9E:92:81:05:33:B0:FE:22:E4:18:38:11:A2:0B:1E:F3:54:55:97:6B
Authority key identifier: 49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B
Certificate issuer:       /CN=494d7873416510a2fb2346ef342280155522713b
Certificate serial:       019E1EA38E5824D123370930036864A2CBB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
Manifest number:          161F
Signing time:             Wed 13 May 2026 00:01:35 +0000
Manifest this update:     Wed 13 May 2026 00:01:35 +0000
Manifest next update:     Thu 14 May 2026 00:01:35 +0000
Files and hashes:         1: 32Nopwa7iDrMzQvWR2AiGUXyxqI.roa (hash: UhsqgA9BDo8hjf2FELCXlR0HFZ2+BdgenG+by3xwFz8=)
                          2: LjPmzvpwanEzWC7YwFcmuEsNkws.roa (hash: MIJ/J6I5pbMxfY/A5H3VycZbhKC12p0Tut4YaO1yZlQ=)
                          3: SU14c0FlEKL7I0bvNCKAFVUicTs.crl (hash: wjAeuMrCmxtWxnSxzA1FxGhyR4fAY3yXwXx18GYOOzo=)
                          4: U032uAEUZ0b4mkUs5GY7tAVTTzU.roa (hash: DED8ognEIVQikRQX7YkZQcK+eDMVkhFnX19M3oaeQrw=)
                          5: UKW6ggBaCeq2EWzJWVDTUUG5C5M.roa (hash: RrnGAk5DcSVwnr4K/OnsZ4KSQkqSg7XT17ThtWs4Qzc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:8e:58:24:d1:23:37:09:30:03:68:64:a2:cb:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=494d7873416510a2fb2346ef342280155522713b
        Validity
            Not Before: May 13 00:01:35 2026 GMT
            Not After : May 14 00:01:35 2026 GMT
        Subject: CN=9e92810533b0fe22e4183811a20b1ef35455976b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:bc:5d:a4:9d:42:f2:c8:fd:41:66:16:45:f1:
                    46:42:31:8a:a8:87:c1:fa:6e:82:fd:01:57:4c:92:
                    46:75:b5:dc:f8:e5:81:7b:c9:dd:fc:cc:c6:5e:e8:
                    46:01:03:58:d5:39:54:81:17:36:09:fc:5b:d1:26:
                    c3:af:e5:54:7e:14:5a:69:6f:3a:6e:9b:8e:47:ec:
                    81:4d:92:9d:99:33:7a:bf:77:da:28:46:4f:00:a7:
                    d0:b6:5c:58:b9:76:ce:fb:5f:3a:b7:1c:a6:3e:92:
                    0e:f3:69:81:60:8d:17:6c:45:54:14:67:9e:fa:79:
                    33:6c:d2:c1:c6:28:42:bc:3b:7b:db:1d:e0:ef:eb:
                    5b:26:d7:0b:14:64:62:54:ca:4e:08:ef:30:5d:a5:
                    cc:36:cd:5e:0d:3a:60:2c:fc:c0:fc:e0:db:e3:5b:
                    e0:15:b2:85:f2:87:5a:35:55:b1:18:74:84:6f:dd:
                    fa:0a:c6:10:e2:e7:a9:b8:1b:dc:87:fe:83:14:65:
                    66:03:59:dc:6a:ac:53:a6:6d:fa:ac:17:69:f8:a4:
                    f4:91:82:48:41:38:a0:97:d9:3f:79:07:9c:a8:0f:
                    be:59:b1:20:fe:7e:27:f8:c8:b1:d6:86:72:28:fa:
                    3d:76:8f:7e:68:03:0c:a2:ca:8f:8c:7c:0e:90:7c:
                    a6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:92:81:05:33:B0:FE:22:E4:18:38:11:A2:0B:1E:F3:54:55:97:6B
            X509v3 Authority Key Identifier:
                keyid:49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:3e:48:a2:1c:ed:bf:2a:ba:9a:8d:cd:c5:90:4b:35:6d:4f:
         ce:26:eb:cc:4e:5e:4d:b2:31:44:a3:6a:b0:ea:e2:55:5c:2b:
         04:f8:8e:ab:63:90:0b:e3:4f:a0:2f:7f:0c:6d:db:9a:d4:33:
         c2:d0:e7:39:e6:2d:13:4d:f5:a1:3c:d6:42:3d:13:06:3d:34:
         99:61:29:89:5a:7d:5e:10:95:14:d9:b1:d7:0f:42:57:2c:63:
         2a:72:ca:8d:83:86:1e:26:75:f1:60:27:01:0b:3a:ce:70:d0:
         ff:98:88:98:b2:ff:2d:5f:2c:2e:63:64:fd:b0:5f:ea:b2:68:
         f4:79:cc:5e:a8:51:5b:79:ee:6a:30:f0:f1:2d:05:91:2e:e5:
         95:0e:cf:e7:24:0d:d6:1e:b7:5b:37:d7:fa:1a:c0:30:c6:e7:
         ba:33:d3:0d:a3:f9:6b:89:0c:3f:72:35:a1:08:2c:2a:ad:40:
         0f:b3:5a:ad:4e:1e:0d:a2:63:bf:38:f8:03:3a:ef:5c:a5:3b:
         d7:7e:ae:a0:3a:46:42:b0:1a:9f:80:04:2c:f1:b8:70:5b:77:
         43:fd:b9:05:77:7c:97:78:1e:8e:93:80:0b:d4:88:de:32:b1:
         6d:7f:87:74:75:39:27:23:94:5b:89:6a:a2:cc:9d:c1:e2:d0:
         58:f9:60:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:11:07 2026 by rpki-client