Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
File:                     AcOKBqObILjaQACSN9dqzdKOcaU.mft (raw, json)
Hash identifier:          hpNeqYjETI9V7TBiXViWEyH1T1a9SnI6nDXmB3/lvxk=
Subject key identifier:   B9:4C:4D:DD:BE:C8:96:DC:5B:E4:03:29:BF:FC:5A:F4:56:11:44:D2
Authority key identifier: 01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
Certificate issuer:       /CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Certificate serial:       019E1E34F80409CFAE2493F6D978C7904F31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
Manifest number:          193E
Signing time:             Tue 12 May 2026 22:00:48 +0000
Manifest this update:     Tue 12 May 2026 22:00:48 +0000
Manifest next update:     Wed 13 May 2026 22:00:48 +0000
Files and hashes:         1: AcOKBqObILjaQACSN9dqzdKOcaU.crl (hash: ewiYT1wQz3q6uPa7exFrj3lSopPOA5xiM7E4bBddVhs=)
                          2: yK3OV_z1Oi5TSHDQmvubHA7OpJU.roa (hash: aDKJN9R2ByiRD2q1KpK1lRoDZnaYg+5USd8f0/xrBDo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:34:f8:04:09:cf:ae:24:93:f6:d9:78:c7:90:4f:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01c38a06a39b20b8da40009237d76acdd28e71a5
        Validity
            Not Before: May 12 22:00:48 2026 GMT
            Not After : May 13 22:00:48 2026 GMT
        Subject: CN=b94c4dddbec896dc5be40329bffc5af4561144d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:94:b5:9e:df:92:0e:eb:79:16:d0:9b:aa:32:
                    79:c1:9c:1e:3a:c2:52:04:db:4b:52:f3:8e:fb:df:
                    02:8c:39:6b:be:ab:19:72:f3:a2:c4:73:83:45:ac:
                    f7:19:43:29:d4:f7:91:a5:88:37:2f:69:dc:80:c6:
                    9d:00:56:93:8d:20:8f:69:d2:ee:32:34:ec:09:b2:
                    b1:5a:b5:fe:ff:54:66:24:a1:b4:84:5e:f8:7c:b3:
                    3a:6b:aa:75:6d:f5:1b:01:cd:6f:73:e0:bc:65:25:
                    55:15:5b:26:ed:c5:2a:ee:27:ec:6e:ec:7b:33:3e:
                    95:b4:dc:9f:2b:3d:ff:f5:40:d7:ec:87:b2:37:e6:
                    da:e7:26:66:2a:cb:8a:57:e8:26:1e:1b:1c:9d:2d:
                    b1:6c:f3:46:f1:b4:9f:02:6e:43:c6:c2:54:3e:97:
                    e6:7c:82:28:8d:07:d2:bb:ac:f9:b3:aa:d4:d4:45:
                    ee:81:32:ae:6a:2a:d0:35:50:62:20:59:5a:4f:68:
                    20:bb:6b:2d:fd:2b:43:2b:73:af:56:3f:a8:2a:de:
                    72:39:b7:27:40:bb:db:33:e8:01:8b:d3:2e:b0:ec:
                    55:28:51:bb:d8:0a:71:b9:b8:43:f1:57:0d:a4:c0:
                    e6:46:89:8d:d9:aa:a1:6f:4b:25:4d:60:21:79:13:
                    06:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:4C:4D:DD:BE:C8:96:DC:5B:E4:03:29:BF:FC:5A:F4:56:11:44:D2
            X509v3 Authority Key Identifier:
                keyid:01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:ac:39:e3:61:36:be:f9:97:89:0a:ce:a0:3f:14:e4:56:9a:
         78:d7:01:0a:fb:f5:e0:fa:48:cb:a9:88:b3:6f:db:35:b2:ca:
         b7:19:42:bd:11:a9:26:56:21:e0:97:5e:6a:4a:3d:fe:d9:03:
         2d:20:4a:28:c3:9c:2f:9e:39:6e:16:b8:65:65:dd:4d:dd:66:
         a5:56:29:3c:f4:a6:7b:7d:30:09:b8:b7:87:ca:ef:ed:d1:c6:
         50:64:40:14:b8:41:0b:6b:71:ae:c8:b3:f7:f6:94:e7:67:74:
         cc:d9:f9:eb:22:fc:a2:71:bd:ac:f0:37:0d:72:35:12:0e:16:
         7e:40:a1:95:0b:be:22:26:2d:a1:fd:a8:8a:9a:c4:83:9a:07:
         6c:af:e7:0e:0b:09:d2:0c:fc:ae:90:bd:8c:d6:c7:5a:57:bc:
         6b:48:92:b3:df:f3:fc:5c:c8:db:23:63:74:00:01:47:79:44:
         4c:93:9b:a2:7e:45:f9:ff:ec:e1:ac:8e:1b:c3:58:24:33:bd:
         ca:5a:de:49:f9:a9:3f:11:f9:fb:ab:e0:6d:30:b7:95:33:32:
         1e:9e:72:67:e7:45:54:4b:ba:42:fc:bd:67:11:9b:40:c0:38:
         b1:3e:d3:80:85:f3:cd:28:9c:1b:63:ca:73:c6:fc:27:48:9b:
         74:ca:3f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:43:55 2026 by rpki-client