Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
File:                     TEDHERwpFqX1ra8eUFCpQMJrI3g.mft (raw, json)
Hash identifier:          /aMC/6YpUu3ImiKD8RtN3YuUBVe3Odw8j4dvD7D9oyU=
Subject key identifier:   FB:1B:55:CF:D8:FF:C8:B5:0A:03:EF:15:7F:4C:0B:EF:65:98:AE:F9
Authority key identifier: 4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78
Certificate issuer:       /CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378
Certificate serial:       019E1CEBD517826A31EB9024568F3094E94D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
Manifest number:          1904
Signing time:             Tue 12 May 2026 16:01:18 +0000
Manifest this update:     Tue 12 May 2026 16:01:18 +0000
Manifest next update:     Wed 13 May 2026 16:01:18 +0000
Files and hashes:         1: TEDHERwpFqX1ra8eUFCpQMJrI3g.crl (hash: y37IQazo8EZFkQqgfyM4zZGtpihpEzs24GmZ1D2QlxM=)
                          2: WWNIYacMJoEIRfEav5J1OWOX504.roa (hash: tPd27yKggwGnWK5YYeEd5gD5neTnZ1BFKcvvTfuouW8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:d5:17:82:6a:31:eb:90:24:56:8f:30:94:e9:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378
        Validity
            Not Before: May 12 16:01:18 2026 GMT
            Not After : May 13 16:01:18 2026 GMT
        Subject: CN=fb1b55cfd8ffc8b50a03ef157f4c0bef6598aef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:fb:97:da:e9:76:0a:08:a0:a3:1f:ef:0e:87:
                    e4:d5:4f:9f:2f:ec:4f:c3:9d:35:07:6b:2a:95:c0:
                    17:3b:67:2d:21:12:cb:e5:27:61:27:02:be:d8:5e:
                    33:44:fc:d2:03:78:d5:4d:2c:71:0a:f8:16:a5:71:
                    76:35:95:4d:31:0e:10:d8:4e:77:dc:a4:a1:b8:ec:
                    ae:1d:fc:a2:58:fb:70:94:72:d8:14:bf:7d:60:bf:
                    20:3b:db:b0:75:4d:ad:80:42:3b:80:8f:44:7f:29:
                    88:14:50:c0:7b:0b:5c:c8:f6:19:2d:61:39:e0:fb:
                    bd:e8:93:fb:b6:d9:b7:97:c9:af:40:5d:d6:e6:1b:
                    8c:58:89:75:d0:37:a7:e2:d2:b4:b4:fa:a3:e9:24:
                    d8:19:11:36:d6:01:9a:32:f6:0b:23:b1:98:9e:9e:
                    6c:bc:c3:84:7c:07:7c:1e:b5:04:14:61:ba:6f:5e:
                    b6:e2:11:69:1d:b8:88:0e:c9:0c:b0:84:f5:f4:e6:
                    1d:76:06:17:1c:c1:5b:c3:1a:3e:81:ca:73:87:ec:
                    ed:4c:7d:87:81:f2:d9:1c:d2:f2:7c:b6:29:7a:e0:
                    1f:56:52:76:34:87:41:fe:2b:53:0b:93:d9:60:0b:
                    ba:8c:28:7a:1c:ce:6b:9f:ed:b1:df:25:b1:89:6a:
                    d9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:1B:55:CF:D8:FF:C8:B5:0A:03:EF:15:7F:4C:0B:EF:65:98:AE:F9
            X509v3 Authority Key Identifier:
                keyid:4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:37:06:4a:68:a6:bc:d4:58:5a:dd:f4:4f:86:fa:80:ed:4e:
         ba:3a:d6:29:2d:ae:f2:57:01:1b:eb:2c:5f:86:63:dc:96:95:
         59:c8:29:c3:0f:81:9f:49:f0:3b:a9:80:8e:ab:3e:df:30:e8:
         98:dc:1b:ba:70:38:1d:c0:4a:22:09:1e:0e:66:d6:b4:0b:2f:
         4f:ae:24:27:e1:bf:d3:06:7d:7a:2d:f0:9a:01:e1:4b:84:71:
         a9:d8:96:2e:f1:55:97:32:c1:ba:d9:33:41:16:9a:4f:95:8a:
         30:bf:60:b9:d1:16:81:7c:94:d0:0a:7e:72:99:d8:69:10:33:
         f2:50:c9:b7:72:87:74:c1:37:32:7e:55:7d:fb:ef:cc:f8:f9:
         a7:df:bd:eb:93:09:2a:f1:13:93:aa:66:5c:56:24:c2:8a:67:
         ad:e0:f9:ac:0d:3d:47:b2:c7:a6:05:96:b1:82:2c:3d:3a:1f:
         d0:37:36:e4:63:26:07:f4:17:99:02:85:24:83:a2:24:07:dd:
         ad:43:af:ab:f2:cb:82:6e:b2:53:c9:fd:40:10:59:8e:95:24:
         b9:72:6a:c9:bf:fe:32:3a:1f:a2:9a:3e:dc:8c:ed:82:ab:b4:
         01:33:7c:c4:17:53:2f:b6:50:6f:22:70:6a:53:d6:97:ec:d4:
         1a:9d:53:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:45:57 2026 by rpki-client