Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
File:                     TuBDL1Qp2GHXdDv8MdetAZYopes.mft (raw, json)
Hash identifier:          Ykq90iKUdN7XYG1GEPE0vYfnE7EfYVoYuWG0UxOUsKY=
Subject key identifier:   01:84:69:85:E5:AE:C1:C5:E1:1F:90:4F:39:8C:F9:E2:C3:1B:5A:1C
Authority key identifier: 4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB
Certificate issuer:       /CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb
Certificate serial:       019E1EA2E4CEAE03327D446D2035B56AAB0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
Manifest number:          1906
Signing time:             Wed 13 May 2026 00:00:52 +0000
Manifest this update:     Wed 13 May 2026 00:00:52 +0000
Manifest next update:     Thu 14 May 2026 00:00:52 +0000
Files and hashes:         1: TuBDL1Qp2GHXdDv8MdetAZYopes.crl (hash: 1f0fYAfbpUHhKZI0yUzE7tq2w/eWc5uNjMl6XdIpajY=)
                          2: Zo68EoQ7mCgSR1Ac-I_gzPgJ-7g.roa (hash: NtmGEmLHAQTVlb8f9+yZ21VR4Q8gT9lhmPzhrly9Ars=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a2:e4:ce:ae:03:32:7d:44:6d:20:35:b5:6a:ab:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb
        Validity
            Not Before: May 13 00:00:52 2026 GMT
            Not After : May 14 00:00:52 2026 GMT
        Subject: CN=01846985e5aec1c5e11f904f398cf9e2c31b5a1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:63:26:cf:f1:2d:43:4c:59:0e:95:96:84:91:
                    6a:cf:1a:6e:fc:01:c8:f4:64:df:81:74:03:eb:23:
                    4f:0a:da:80:11:30:fd:cd:e8:e0:1c:c9:02:3b:78:
                    33:0f:c6:38:a7:45:3e:10:52:dd:cb:49:c7:d3:da:
                    8d:7a:4b:a5:8c:7c:94:32:bb:8f:5f:c2:42:c7:ad:
                    cf:9c:ab:91:7c:d6:16:c7:d0:a4:00:4f:c8:3b:a6:
                    df:34:d2:99:ec:a0:64:bb:90:f9:88:29:8d:d1:22:
                    48:43:d9:6b:05:d4:59:48:48:fa:f0:08:ae:a6:ad:
                    d4:7d:65:91:c0:c7:ca:64:4c:57:3b:6d:6e:db:94:
                    07:b9:e0:ab:95:8e:76:b6:82:fb:da:eb:93:f9:23:
                    38:87:e3:6a:45:2c:76:c4:b3:66:06:e6:38:e1:9c:
                    f6:06:8a:61:32:2e:90:b0:ef:ca:59:cd:c7:a0:5a:
                    6a:de:58:63:5f:47:1f:fc:96:da:0f:78:b8:c9:2a:
                    16:9c:0a:97:07:54:77:14:25:7f:f2:2b:c7:a0:2e:
                    c2:93:d1:4c:64:4d:3a:80:3a:d6:b9:d3:3f:ce:47:
                    12:74:84:24:e0:db:40:16:08:45:b4:f9:9f:0b:56:
                    0f:2f:e8:9d:51:80:4b:a3:9c:29:89:47:80:3b:64:
                    ae:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:84:69:85:E5:AE:C1:C5:E1:1F:90:4F:39:8C:F9:E2:C3:1B:5A:1C
            X509v3 Authority Key Identifier:
                keyid:4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:b9:d3:49:00:97:7a:06:bf:76:89:d6:51:0b:6f:65:66:f6:
         f0:84:f8:30:70:9e:76:30:7e:1c:4b:fd:7d:24:48:53:8b:09:
         93:8a:63:7f:b4:e0:ac:5c:ee:7b:89:7c:d0:bd:68:ea:bb:dd:
         10:01:1f:c5:9d:75:db:b3:ce:33:81:f2:0a:29:f6:15:75:17:
         8b:b3:0a:5a:4d:89:d4:b3:d4:b4:25:48:f7:6c:5f:fc:37:e7:
         0b:08:3d:b6:4a:72:f9:b8:6e:cd:f5:d5:96:ba:a5:f8:78:7f:
         9c:e1:d6:ee:4d:8a:1d:7a:a9:50:32:92:7b:a5:02:2a:8f:dd:
         43:21:52:7f:34:e9:12:31:60:1d:36:65:75:0a:c5:4f:df:8d:
         0d:76:1f:32:56:ff:cd:44:ae:19:9d:ee:60:db:8d:d1:f4:f4:
         63:7a:de:9a:0b:ac:ae:4b:0f:3a:00:26:f5:2c:fa:91:3e:4a:
         17:a1:41:0b:53:05:11:f0:c3:89:33:e5:72:e3:9b:c1:b4:0f:
         9b:97:e2:74:1f:26:62:3c:8d:9e:46:86:75:46:f8:97:bf:21:
         48:1b:a0:bd:99:40:cb:89:f4:5c:31:eb:d3:6c:07:f1:93:91:
         1e:d0:0a:81:a4:22:b4:1f:72:26:d8:6f:5b:f9:f3:75:63:20:
         1f:06:d6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:00:39 2026 by rpki-client