Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft
File:                     rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft (raw, json)
Hash identifier:          pg90vIWBaT9hG+HM7QxuftRiq+zQFHID5AnGU/gXLIA=
Subject key identifier:   14:F1:C3:36:B1:A8:40:02:CD:EE:D3:C6:9B:B1:7F:0A:6E:DA:A7:33
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Certificate issuer:       /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial:       019E1F1142F157056CCEE23D0DB788988043
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft
Manifest number:          1979
Signing time:             Wed 13 May 2026 02:01:25 +0000
Manifest this update:     Wed 13 May 2026 02:01:25 +0000
Manifest next update:     Thu 14 May 2026 02:01:25 +0000
Files and hashes:         1: 5B3QzFFwuaIhWId1BpNkCEb5Rw4.roa (hash: njTH7vSGj/qysjszttcRpcexFHzl574nxZqTUKWfj4U=)
                          2: 88Ep4sB7AT24dHj0wOBkm20Qc98.roa (hash: +Tc166MSSO0xFflm016KEMW6FrFPduRqEtRuQCxP4z0=)
                          3: CA4GMUv1Mwa8-wTQziLXcZ8L4BQ.roa (hash: qM8jK7p3DVRcLAnm5qF0WSX4keV9dPzuUt50Yrxi1Bs=)
                          4: XOOM-dH84H7UxsX_I1xUFD2MCiU.roa (hash: yF0/ZzZszM6k3jBSRxWniYaHE+/EQQL9gELNFRwQiJ0=)
                          5: msniQ9k0_CkOjexD_PlJuidr5u4.roa (hash: VbMAM6GChJDxzsgDinm32lvUmxBoASqx+zQmVtXEqT8=)
                          6: rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl (hash: 0NumtLXG9hGMZDtlLRdJeIQZRgOmvHX93RG/t65rWAc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:42:f1:57:05:6c:ce:e2:3d:0d:b7:88:98:80:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
        Validity
            Not Before: May 13 02:01:25 2026 GMT
            Not After : May 14 02:01:25 2026 GMT
        Subject: CN=14f1c336b1a84002cdeed3c69bb17f0a6edaa733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e1:a2:1a:aa:21:ca:da:c2:88:e2:36:5f:89:
                    8c:8e:2c:dd:60:b7:14:ec:48:be:f7:4a:7f:b6:77:
                    e5:f0:a7:bf:67:71:16:78:48:02:45:69:18:72:78:
                    e3:bb:96:fa:0d:7f:fc:5d:3f:63:80:d9:58:01:b8:
                    8e:8a:56:a0:7b:e3:1f:a6:f7:b2:a9:16:7b:55:92:
                    aa:0b:b0:85:79:b5:62:8d:13:dc:38:e3:15:d9:62:
                    4c:f7:48:0f:5e:9e:57:3c:5a:ad:f6:fa:8e:bc:bd:
                    5e:dc:b4:cb:7d:7b:87:99:d6:0a:3c:79:e6:9e:4d:
                    61:ac:7d:58:3e:ff:29:56:f5:fe:aa:91:a4:a5:6e:
                    75:40:95:46:52:6a:7f:7e:1f:c3:38:da:b8:1c:30:
                    24:ca:60:09:56:4b:54:d3:a2:aa:ef:02:8f:75:a8:
                    ec:da:3e:64:b2:5c:42:75:91:5c:59:01:1c:4e:cd:
                    47:88:73:a2:22:f2:c6:31:0d:81:aa:4c:b8:46:bf:
                    dd:27:18:b7:22:e4:fc:04:19:7f:6a:bc:89:bd:49:
                    37:7c:0c:78:db:5e:ce:0d:4a:94:63:4f:f4:a9:a1:
                    93:5a:c9:9d:01:25:32:85:ac:06:de:1c:fe:1d:36:
                    1e:15:07:a5:3c:45:20:69:33:df:4c:cc:55:9e:d0:
                    65:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F1:C3:36:B1:A8:40:02:CD:EE:D3:C6:9B:B1:7F:0A:6E:DA:A7:33
            X509v3 Authority Key Identifier:
                keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:04:73:18:37:61:d1:f7:7e:6b:80:51:5b:ee:41:7d:94:4a:
         ba:e8:4f:2a:29:2b:b4:12:10:dc:c5:c6:d1:06:17:00:11:48:
         b0:8b:03:2e:3e:b5:d9:f2:bb:5f:7d:7e:97:c2:03:a8:54:f0:
         fa:1a:02:de:09:f7:07:50:06:51:c6:40:a4:f6:72:f9:5f:41:
         ad:80:57:2d:e7:83:0f:24:7d:51:3a:2e:91:3e:c8:39:5e:49:
         02:ec:79:0c:f1:a9:d2:8c:06:c4:58:9c:88:f5:01:7a:60:72:
         99:9b:be:76:d3:d7:bb:76:a3:bf:d2:be:7e:f4:0a:ac:a7:e1:
         33:3d:b3:07:b7:9f:0a:3d:28:9b:b4:2b:ec:6f:82:77:23:4f:
         a4:f2:68:e8:98:12:af:50:64:7d:9d:a0:18:59:0a:c0:fa:de:
         64:b5:b6:be:82:eb:81:17:71:d8:f4:42:1f:ef:93:8c:6f:49:
         f5:9c:67:74:6e:a0:61:1d:3a:00:38:8d:ca:20:45:3c:11:9b:
         9c:e6:fb:d7:e5:ba:9e:52:57:f6:86:de:fa:b0:57:ab:43:e0:
         22:11:57:b5:b8:d6:22:06:63:38:ca:fe:50:f2:99:f9:dd:70:
         cc:47:85:74:ed:d3:bb:9f:c3:fe:41:68:f0:fa:fb:c3:57:44:
         51:e4:c8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:30:18 2026 by rpki-client