Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft
File:                     v7CXo2wjJdEDH_QJG6AKhkWdQog.mft (raw, json)
Hash identifier:          Cu7+Z08mo61Ory+AyD45DKRR/ayCAcfX4F6yJaKVRZc=
Subject key identifier:   4E:A2:16:E1:08:4C:B0:23:89:49:F6:F8:76:11:82:9C:62:59:EA:0E
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Certificate issuer:       /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial:       019E1C7DA55A3A2A4F1C819F500DB68924A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft
Manifest number:          191F
Signing time:             Tue 12 May 2026 14:00:56 +0000
Manifest this update:     Tue 12 May 2026 14:00:56 +0000
Manifest next update:     Wed 13 May 2026 14:00:56 +0000
Files and hashes:         1: 2JAGeWqOz-z8FVKdPCxyLtHJNFA.roa (hash: +TySuOsOtYESlmt3r8OIGn1Nao4rCD0nAMni4cCzhG0=)
                          2: 37plEvr9_SAxpS24SOyNrKA9Ebo.roa (hash: T+3X8+kwm0mxKJkDFOwSTGKX5y/yChg7gIfBo7o4fzc=)
                          3: 4v2abVtxmKK1EfY1UKsh5vBwTBQ.roa (hash: Fs7Ab7yQf/ulu1DAd1ofgpYjehocmFGlxjUMdJ2h/+Y=)
                          4: 6FvTo5bRSodTC6FDiz2fehPBQHE.roa (hash: apDjsNYn3O+BU+7M5QZsfrZaIB7/OL7UKbfG6C5NerE=)
                          5: 9KcHIAUvzuR2GWge4D-VK2067f8.roa (hash: 9sijw09CpBSxcD1XyR49IxKSXJ+lbUtfOT6XCsfhPs4=)
                          6: B8mKcjnkQ06bQ0cYOYl4NuSVaMg.roa (hash: BHHwvopeV4L0Tgx1rARSKD5k/JLb/fI5L/vuVF66caI=)
                          7: BmKkxsvsllYGRv2VQUx8x8IPybM.roa (hash: iJVvCwQgSkbFGgNZWYbEzkgvbnxvQYXvysN7fV/Jo/I=)
                          8: CTkFnxq5k5gkKBOyHIjTnJxEA10.roa (hash: wNOA1anlJOJNxwL/khfQbYI7GWefAhmxsi5L1GTuKvA=)
                          9: CybUaoE-1zIBrxVRyCGND427ieM.roa (hash: 8GMC+ouN1TxZrZlKa6hwbH6dJmnjXnGYbHSveCF/7PM=)
                          10: ELqztzBTOVJ9TbgArZg2cCQeUqs.roa (hash: RpN+biF12RBn9jYvgP/g7LA1mBZiYaf6GKLjllO7nRY=)
                          11: JO5erv-vSOU_O-xUynzRSVbHmIc.roa (hash: zMiR3ptMJOgOIdKG+IIwNcZj+cGNLnGMV7wyCQljD4s=)
                          12: JXnrULMb6DsHyM2cbpC7FtDo9UY.roa (hash: iamRHWkLnsJiPb+n+IZVDqFiRKag4o4LNxuZZzmL0jQ=)
                          13: Jb979-aOtFrxIQewqtQtN3rvkPY.roa (hash: h5kBwpidUiteAllQX66DeU4MAx24NppeXa8u24NM7iI=)
                          14: SybLZ24hhMiBkVFRqMhgG4Tt_So.roa (hash: jdIOIL7oBwjwXGbHbND2Uo+qRIMM4Rdpr2383Sxr5BI=)
                          15: TEEJpugeYt1F43E2tJGuUV3FeZA.roa (hash: DLdME2cAIv/rSNCUPiFiPYf01huYXXEj3+nEaRucgYU=)
                          16: Tg7LpYV7I-GpxinThcktcQRnm_4.roa (hash: BbXoN3AQWQv407qJGvIy6QX/6IL8zec6zQB0QjsD6HA=)
                          17: ZPlBlPD-W-maIRDabAoyZWrxupE.roa (hash: MQ/ql1GxKXsn5YKKa+q3cWZtrV1Ms5Llr3f8Hh6BGNE=)
                          18: c9_fZRRZyW0XDy9Nuj5gaWSKFjw.roa (hash: 1Hs4IJDmnuMEMdz/1IBBL0atJ2FMVY2hg6chmbt42Mo=)
                          19: lUbooQJTqUPsGNWs9whSoRmQ9io.roa (hash: kluWa3I7Ato5aw2LG6KL/4iV6N2sUDy3GUsBbZKsEa8=)
                          20: mhK9zCgXdFlII0XrtCsgCaL9xjI.roa (hash: hSBJb7L+mvFAKQjClhKXrHgKgsxf+0/Ah1GNpCqTJNQ=)
                          21: sMNPbaJ2swpQDptjsmEdLRBAjsE.roa (hash: wMrNQ1Dt9RdtalTcVqalUbl+Cb5VgC4Yw+MpJfT4roY=)
                          22: sWFQ2639y5fQaDmU5ThRk6YSWFs.roa (hash: YXKPoBXjKE1eqIFJiy/DtB2fJyWSkDcytdS8/Lx36Lc=)
                          23: ul8RfOvZQFi7b7h3CYZZMyB1Thc.roa (hash: ftj7d2qkg7awZuZD1JzEyU8qjVc4i/LwIGNmp8+f9gY=)
                          24: v1XAMryHcbVYBLXiFz1wOW3tUKk.roa (hash: JN1atA5xt1OyKxkpHh4rNxtPiXKSK2GbqwVySmKSgl0=)
                          25: v7CXo2wjJdEDH_QJG6AKhkWdQog.crl (hash: Stww9YfyDJ05muTTzy98pqmjH8hg/s7zH+j8L03JOAw=)
                          26: x0heqVIS4ldbm4VvDuHpvjwdG18.roa (hash: Q0/M1s9b+ez//kkSZOV821TfmbgQGcZ8JApzRiFz1/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:7d:a5:5a:3a:2a:4f:1c:81:9f:50:0d:b6:89:24:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
        Validity
            Not Before: May 12 14:00:56 2026 GMT
            Not After : May 13 14:00:56 2026 GMT
        Subject: CN=4ea216e1084cb0238949f6f87611829c6259ea0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a8:a1:50:f2:ed:fc:b5:de:f6:08:3d:1d:48:
                    16:8b:32:e9:93:1a:d1:d5:18:b8:77:a8:b5:7f:f3:
                    13:89:e8:ba:11:70:a5:bf:4d:0c:d0:c5:54:fd:4c:
                    b9:c2:22:5d:35:3e:cf:05:81:87:1f:97:f5:d0:ff:
                    64:77:86:03:94:46:cb:94:9c:fc:a2:3d:85:d8:07:
                    67:15:f9:c5:1e:6b:86:2b:4b:b7:9c:53:af:34:ee:
                    98:7e:0b:fd:1f:45:8e:a9:cc:54:64:20:bc:a8:3a:
                    d5:8e:b4:2c:a8:63:e4:dd:0e:17:fe:90:3d:b2:67:
                    d6:2b:8d:29:55:69:ab:03:27:fa:6c:05:35:b3:4b:
                    2d:c1:b3:91:12:e0:43:01:61:ab:cf:bc:b1:b9:bb:
                    44:ff:fc:48:ef:a7:9b:f3:0c:e4:7b:a8:ff:37:b8:
                    b9:82:4c:2b:8d:2e:ce:ea:90:34:a8:04:f0:8f:af:
                    22:fd:ce:79:8d:85:fb:d9:97:2f:39:79:70:a3:6d:
                    ac:3d:cf:88:d5:e0:7b:cd:5e:44:70:c6:57:af:d5:
                    54:7d:5b:27:f9:5b:78:4e:fe:6e:bc:0d:ea:c2:9f:
                    d2:40:de:47:91:a7:81:7e:c7:3b:89:5b:ee:28:31:
                    ba:25:b5:e9:3b:9c:6c:ef:8f:ba:0e:e1:7a:e0:73:
                    de:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A2:16:E1:08:4C:B0:23:89:49:F6:F8:76:11:82:9C:62:59:EA:0E
            X509v3 Authority Key Identifier:
                keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:f5:fe:c2:25:2a:2e:25:df:e8:6a:e3:26:6d:e1:d1:5f:78:
         69:d9:2d:1a:de:9a:bf:a9:37:2f:fb:49:8c:37:5a:eb:d9:9b:
         98:c1:56:fa:62:9d:20:36:a3:18:94:ff:cc:c9:86:fd:14:c5:
         45:d6:ce:e3:6d:a5:4f:97:ae:d6:fc:a8:56:2e:05:c5:d7:7a:
         57:53:db:a6:48:a7:99:76:d8:16:b2:90:18:79:e6:b1:4a:35:
         a2:9a:bb:55:b6:69:2f:5d:92:c8:be:81:66:6f:95:a1:18:e3:
         6a:b7:94:22:57:ba:07:a7:2f:fa:db:f9:90:22:dd:38:0b:5f:
         51:28:fe:83:da:48:29:47:4f:d6:7a:b7:07:e0:25:bc:83:fb:
         dd:54:5d:25:e6:0c:42:1b:6c:f9:59:58:f8:1d:e4:29:4b:c7:
         0b:9b:ea:e0:f8:1d:37:bb:c0:51:9a:61:1f:22:c7:f8:54:5c:
         ad:78:28:fb:db:a2:54:5d:28:25:98:ce:79:98:c0:14:53:6c:
         b2:e3:a1:b2:92:c4:d0:c1:ae:86:09:5a:58:b4:e3:84:76:fb:
         82:04:a7:cc:8c:b8:4e:02:44:d7:40:29:55:f4:27:78:39:69:
         14:4e:17:0c:b5:87:9b:fa:58:e5:20:8a:31:de:f2:e2:05:c1:
         4b:82:f8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:40:41 2026 by rpki-client