Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
File:                     sRaNBioMLmFmqCYsTXKY123t0E8.mft (raw, json)
Hash identifier:          b8mHK1jabOf5VkCUeBme77yUE6SP/qKfYeMR3fRPbJQ=
Subject key identifier:   56:FA:2D:61:E9:0A:6C:B5:8F:C5:CA:01:05:4D:4A:C0:F7:91:3E:E3
Authority key identifier: B1:16:8D:06:2A:0C:2E:61:66:A8:26:2C:4D:72:98:D7:6D:ED:D0:4F
Certificate issuer:       /CN=b1168d062a0c2e6166a8262c4d7298d76dedd04f
Certificate serial:       019E1D90E9F1EF8CCAB3FEBF3E0630721AA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
Manifest number:          1907
Signing time:             Tue 12 May 2026 19:01:36 +0000
Manifest this update:     Tue 12 May 2026 19:01:36 +0000
Manifest next update:     Wed 13 May 2026 19:01:36 +0000
Files and hashes:         1: MDdZOJb0E3TFPj7XF2CCzHswkBY.roa (hash: qkb6YrvzO3fcijDqtNe43esYVemBSIEEnj/KhUhyLjQ=)
                          2: QAF_d8JSOaJa5ePcJEuhIcWijDg.roa (hash: TdbbkOA72vcnj4Xcj7+YbTdpoWTInlYqPn8xkPfG47c=)
                          3: RoinRaWTzSOzFuYIvM_EaHf1q3Q.roa (hash: 0yHzdojFXFdEdeghY1VpjvzgZycjwd+UfaprSX41Gxo=)
                          4: sRaNBioMLmFmqCYsTXKY123t0E8.crl (hash: AAmmWsil2vgkh6PvV9yrxWCAMPC9RP1d+HJBS4VgBhg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:e9:f1:ef:8c:ca:b3:fe:bf:3e:06:30:72:1a:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1168d062a0c2e6166a8262c4d7298d76dedd04f
        Validity
            Not Before: May 12 19:01:36 2026 GMT
            Not After : May 13 19:01:36 2026 GMT
        Subject: CN=56fa2d61e90a6cb58fc5ca01054d4ac0f7913ee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:16:57:8b:23:82:73:3f:b1:1a:6e:23:77:be:
                    67:c3:ec:ff:f7:8c:3f:e0:fa:08:f7:5c:b9:c3:d2:
                    07:42:d8:6f:6b:64:73:67:1b:dc:5a:31:2c:89:74:
                    4f:44:70:4e:23:e3:c2:60:89:26:00:ea:59:2f:f1:
                    56:95:59:8b:69:d1:00:cc:e2:12:5e:5e:92:98:02:
                    d7:d9:2c:5c:8f:ed:3d:15:2c:92:c1:70:5e:1a:26:
                    d7:95:d9:ae:e6:2a:11:73:20:cc:3a:8e:c5:06:76:
                    6b:e4:7e:3e:1a:af:05:01:47:aa:b5:d3:f1:78:f8:
                    e8:91:e1:3d:af:49:64:53:6a:a8:e0:56:d1:07:d9:
                    e4:66:29:da:8c:57:98:35:13:e3:3c:65:4d:8c:1e:
                    18:19:47:bd:6e:1f:a0:10:5c:42:91:fa:6e:53:c2:
                    af:eb:77:e6:cf:7f:fd:f6:f8:15:10:8a:3d:5a:f2:
                    c6:fe:76:36:4c:1e:8e:27:21:73:1a:62:44:1e:92:
                    2e:d9:3c:43:42:74:98:54:be:52:00:26:59:9e:ec:
                    46:f7:de:a1:69:f5:0e:9b:23:0e:fe:d7:8d:51:a9:
                    2a:bb:a4:95:e0:5d:3c:27:22:51:45:a1:4d:40:04:
                    81:c7:b8:07:41:44:c6:15:80:84:14:4d:58:20:d9:
                    2f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:FA:2D:61:E9:0A:6C:B5:8F:C5:CA:01:05:4D:4A:C0:F7:91:3E:E3
            X509v3 Authority Key Identifier:
                keyid:B1:16:8D:06:2A:0C:2E:61:66:A8:26:2C:4D:72:98:D7:6D:ED:D0:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:21:97:3b:26:f3:f1:8d:ef:7f:11:92:0f:16:fb:51:68:c2:
         bf:e9:e0:cd:b8:c3:2f:4e:dd:20:fd:d4:76:2d:9e:ec:21:f3:
         7b:8f:91:00:be:de:6f:9f:11:a2:45:0f:38:a9:01:77:ad:a7:
         89:f1:c7:18:1b:fc:e3:80:e9:9c:e2:da:a0:99:dc:01:23:a7:
         65:85:e9:60:b8:3a:9b:dc:34:2b:cd:47:7f:71:6c:e1:8e:f1:
         63:4b:7f:5a:50:67:71:a5:eb:56:15:ca:ba:4c:87:36:03:c4:
         39:b7:6a:8f:2d:f8:7b:5a:a1:d4:f2:5e:f0:28:fe:80:82:e2:
         94:a9:0a:0e:08:8c:52:76:af:24:09:7e:cf:1c:3f:a4:fb:ae:
         16:6d:b1:bd:c0:55:2d:11:72:f6:2f:f9:28:ec:a7:dd:23:e3:
         81:cd:96:98:1b:b4:18:7c:65:1e:79:cc:80:ce:58:09:ed:98:
         60:8f:e2:9a:27:c2:e8:90:4d:81:01:5b:20:04:87:31:31:7b:
         15:85:5b:98:ea:d0:8c:c7:f2:72:54:7a:15:82:3e:59:98:cd:
         42:5b:fb:4d:c0:a4:fa:e6:7a:53:e8:7e:a9:a9:63:61:b2:ad:
         2a:96:75:37:11:69:4d:97:d6:88:da:15:1c:a4:7b:a9:ea:f4:
         30:25:a8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:27:40 2026 by rpki-client