Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft
File:                     nOlHV6w_cLQPNpMH02XryWV7q2k.mft (raw, json)
Hash identifier:          9uwK8hC1drAetTJLm3h2xCVQ7rGndBhJLfAXU5rRUXw=
Subject key identifier:   C6:A6:70:87:7D:70:57:13:38:21:8F:7A:D5:CB:45:EA:C6:24:81:2E
Authority key identifier: 9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69
Certificate issuer:       /CN=9ce94757ac3f70b40f369307d365ebc9657bab69
Certificate serial:       019E1F10E524AFFA63BE9FAAEBC9953D5C1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft
Manifest number:          1907
Signing time:             Wed 13 May 2026 02:01:01 +0000
Manifest this update:     Wed 13 May 2026 02:01:01 +0000
Manifest next update:     Thu 14 May 2026 02:01:01 +0000
Files and hashes:         1: 9sanimaWXZjeVWS-vHt3uwj21c8.roa (hash: xXtjrWCXxmfH7nH10gBJiS5Jtsr3rg2O1NowVzhxzC4=)
                          2: McecUEUwqKunvtzepCez6bQQUBk.roa (hash: CYTQm/MUz7dvxmMfHeEUwxreRSRodvZHuJFCFTsDc2E=)
                          3: XqoE4QEKfS73tFedkyMBR2t2Chw.roa (hash: 7QBQTr9lxf/H18imnUvnw9PKGfAGMos7jRs0YTyffvE=)
                          4: YAeu22loCmAQOVocekZI091KNAY.roa (hash: IyieUfnyyVgNIxndlID6xDdRxS+iTHAiCnCvVa6dBlc=)
                          5: nOlHV6w_cLQPNpMH02XryWV7q2k.crl (hash: VdDAL1r8vaUVSl+xFDg93rjnorHQJdMyO6GwzOnDulw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:e5:24:af:fa:63:be:9f:aa:eb:c9:95:3d:5c:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ce94757ac3f70b40f369307d365ebc9657bab69
        Validity
            Not Before: May 13 02:01:01 2026 GMT
            Not After : May 14 02:01:01 2026 GMT
        Subject: CN=c6a670877d70571338218f7ad5cb45eac624812e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ad:b1:ec:30:f6:94:d1:e6:8e:4b:56:71:f6:
                    2f:4e:51:d2:a6:e1:d9:ed:fc:5e:4a:07:4c:09:c9:
                    0a:2b:bf:ba:ab:d9:e6:a1:48:8a:c3:64:f5:c6:93:
                    c6:0e:53:27:f1:fb:10:04:eb:20:9e:1f:a2:38:5c:
                    57:15:0e:f2:1c:e8:37:12:ce:d1:47:6e:1c:02:97:
                    38:bf:a6:f9:b6:66:db:c4:ea:26:c3:be:72:9a:74:
                    b0:49:b3:5e:43:5c:df:2a:a5:d4:c8:61:63:87:9e:
                    54:27:22:a0:b0:1f:a4:7c:ff:3c:1b:1f:c2:e7:42:
                    7d:91:32:79:9c:ca:8c:b1:e6:0c:3c:d5:8e:06:7c:
                    10:34:07:92:cf:e3:f2:6b:d5:93:14:a7:1b:c0:8d:
                    1a:a6:23:af:84:53:2a:c4:51:d8:d5:a8:80:2b:ab:
                    ae:f2:0e:02:32:65:40:66:11:7e:7a:66:a6:7f:36:
                    3f:58:85:60:bb:66:ac:d4:c6:3e:20:91:79:19:c2:
                    40:1d:e2:07:bf:87:f6:e3:0f:9d:f9:0a:93:01:fd:
                    28:dd:83:1a:17:26:02:c0:fd:36:3d:8c:6a:04:c4:
                    4c:ee:a7:d1:91:5a:dd:04:f7:2e:09:f5:74:a1:55:
                    ce:24:51:33:22:c0:ed:85:bf:dd:2e:79:b6:56:dc:
                    72:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A6:70:87:7D:70:57:13:38:21:8F:7A:D5:CB:45:EA:C6:24:81:2E
            X509v3 Authority Key Identifier:
                keyid:9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:f5:ea:8b:a0:7c:de:63:ba:b0:84:c3:6c:c9:3e:9e:59:a1:
         f8:85:99:60:68:d7:fd:1b:c5:93:88:00:71:2d:90:bc:86:ea:
         db:a3:89:48:6c:0a:f2:48:b9:6d:b9:64:79:e4:12:59:df:95:
         c0:eb:cb:5d:3f:f3:f1:04:f0:ff:ba:6e:e7:b1:dd:72:fd:b4:
         7b:37:09:7b:34:05:5f:2a:96:a4:b2:79:3f:d3:da:f5:a5:e5:
         6f:bd:54:20:78:24:89:61:e3:83:ea:88:a5:36:65:5f:58:c2:
         d1:78:2b:96:f3:4a:f1:e0:be:a2:2b:98:9a:1e:7b:65:c8:bf:
         20:e6:0a:d3:46:22:26:6e:4d:7d:f2:f1:33:57:c4:2c:35:5a:
         b7:dc:d6:63:e7:75:43:db:47:1b:b5:71:57:74:8a:d5:01:0c:
         ab:94:a8:9c:20:d1:30:ae:f2:fa:b3:6d:c3:4d:18:94:1f:92:
         4c:a5:31:3c:fa:a1:f5:cd:48:4f:f8:f5:1b:46:0a:3b:43:91:
         4e:f5:e8:ca:54:5a:8d:b4:79:d0:62:34:c2:dd:1b:a9:4f:14:
         d6:9a:26:d7:8f:3e:90:ab:62:e4:af:fb:37:e4:31:2b:33:d8:
         45:07:b2:ef:ea:a3:00:b6:fa:e4:71:42:5f:a1:1c:63:17:55:
         d7:4a:33:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:59:48 2026 by rpki-client