Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
File:                     NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft (raw, json)
Hash identifier:          yTm1/5bepH430HZju78GaXjEK5Z4dEdT8S2zK0Ky8/w=
Subject key identifier:   D1:B9:9A:BA:C9:C9:94:8D:1A:51:F0:3C:AA:1C:54:3A:FE:41:06:46
Authority key identifier: 34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E
Certificate issuer:       /CN=340bea3fcc3cbcedc82919cf57c74108baea369e
Certificate serial:       019E1F113EBF705C1BC3CD92C86A70436204
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
Manifest number:          190B
Signing time:             Wed 13 May 2026 02:01:24 +0000
Manifest this update:     Wed 13 May 2026 02:01:24 +0000
Manifest next update:     Thu 14 May 2026 02:01:24 +0000
Files and hashes:         1: ABmYN8QB4vtJgGHfuupaZ7vq_DU.roa (hash: zGb7TzIU0CGn680nSZCYZpGRTlBYHFYI+vyCKo6WS0Q=)
                          2: NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl (hash: DbbZ1Kt3+miss0lUEnREli3kHLRuyunNGRSVQ5QU4eo=)
                          3: Oii3V-7piYCPzs0_dSiKYPboBMk.roa (hash: Ilo1v9IIMxIQYILX+1PmPseCaQDDpP2GLZh2OKOVwAU=)
                          4: zCVYNwSb6R9Q5adien3vj6-COxI.roa (hash: 4WkrjYGFdpzJeGxKIOg7LPmr739iupPTe/+MPRyS+UI=)
                          5: zFAiybQzQxds72WdUATD8g4BEjw.roa (hash: cy5FFDk0mqzxC2rHBMlzxFOlZHb2KlFrT4hf9F2Oo6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:3e:bf:70:5c:1b:c3:cd:92:c8:6a:70:43:62:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=340bea3fcc3cbcedc82919cf57c74108baea369e
        Validity
            Not Before: May 13 02:01:24 2026 GMT
            Not After : May 14 02:01:24 2026 GMT
        Subject: CN=d1b99abac9c9948d1a51f03caa1c543afe410646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:05:6e:5c:97:48:dc:37:ec:10:56:d9:e8:8a:
                    d1:54:ff:e1:91:d3:26:d1:a3:02:49:f8:4f:6a:d2:
                    84:47:a5:00:60:a6:84:8b:2a:40:2b:ab:dd:2b:80:
                    59:b3:34:23:b0:0a:b8:41:4d:36:77:21:dd:71:4d:
                    d1:18:7c:f0:fa:70:45:1e:af:fd:00:c1:79:a4:2c:
                    1f:72:80:6c:8e:e5:c8:c3:2c:e1:94:e1:1d:14:f4:
                    76:33:35:ab:db:d2:ae:8b:bf:3a:ee:e2:51:5a:21:
                    de:44:6b:07:6e:1e:06:5a:39:7a:0e:09:68:a8:f5:
                    09:a8:c3:53:8b:9f:45:c2:bf:fc:db:d2:af:92:4e:
                    8c:95:d3:fd:cc:3f:f6:21:aa:a7:ed:4c:2b:56:37:
                    67:8c:61:5d:6d:ca:7d:ae:6a:18:8e:cd:bf:a6:bb:
                    8a:14:72:06:61:22:1c:18:67:a0:fa:62:23:a8:ea:
                    46:09:05:04:e4:b9:d7:fb:80:af:d7:c0:ee:16:64:
                    4b:ad:27:3e:df:ff:af:d4:7a:eb:7c:18:df:18:51:
                    5d:7b:26:07:e7:a7:d4:50:49:e7:4e:71:15:25:08:
                    c4:b3:86:fb:6a:18:1e:ac:05:df:e9:05:bf:a4:37:
                    65:3c:62:d9:c6:62:3c:be:64:9b:27:cf:5a:38:74:
                    4a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B9:9A:BA:C9:C9:94:8D:1A:51:F0:3C:AA:1C:54:3A:FE:41:06:46
            X509v3 Authority Key Identifier:
                keyid:34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:77:92:cd:3e:80:4c:a6:aa:8a:a0:a5:cb:a0:21:91:28:47:
         1c:9d:08:43:87:6f:c2:0c:aa:d9:fd:a2:73:55:06:82:c5:66:
         f7:2c:79:f3:b4:45:89:e3:82:fd:f5:bd:83:b6:a8:3f:a4:88:
         37:b8:42:ba:08:48:83:04:48:f3:75:ab:df:9d:cc:f0:d6:4d:
         b1:a4:ad:2b:12:31:ef:3a:59:0c:5c:90:6a:79:0f:8b:3f:93:
         89:71:a1:f5:9a:44:d6:07:0a:f6:a5:82:2f:63:89:68:d7:e3:
         5b:57:e5:c4:ee:0c:52:8f:92:fc:8a:c8:c5:09:b2:9d:ed:f5:
         38:b3:95:66:a1:cf:30:a2:37:da:3e:b1:7f:99:6e:50:73:00:
         3a:6f:4f:6f:51:f2:d3:6a:95:a0:c1:6b:bd:f2:a8:95:56:fc:
         ff:8e:23:35:fb:55:ee:eb:96:73:e3:41:41:d8:45:e5:85:de:
         a6:b8:9c:f3:54:4f:b4:05:d9:24:de:ea:4d:54:2c:17:fd:3e:
         56:a0:21:77:c8:81:23:bc:29:44:4f:5b:01:3e:39:33:86:6a:
         f4:67:e3:5b:26:c4:e5:c2:f3:18:a9:30:51:f7:aa:dd:25:b5:
         b3:b0:46:47:1a:29:a9:f5:4c:c8:25:3b:c4:2d:cf:59:ba:68:
         46:6a:d4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:32:59 2026 by rpki-client