Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
File:                     KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft (raw, json)
Hash identifier:          8OSr7KADIcNQmD33R6nSHurfOira7+7BvaKhGnhbi5o=
Subject key identifier:   16:DE:AF:5C:01:CC:72:61:DF:CA:5E:2B:C3:61:44:E5:D8:38:9E:77
Authority key identifier: 29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8
Certificate issuer:       /CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8
Certificate serial:       019E1DFE91C7355D8F8044AFAE02BA2C037B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
Manifest number:          190B
Signing time:             Tue 12 May 2026 21:01:23 +0000
Manifest this update:     Tue 12 May 2026 21:01:23 +0000
Manifest next update:     Wed 13 May 2026 21:01:23 +0000
Files and hashes:         1: KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl (hash: YvqdnIMsctW/NTKwu/RrZp0gBgphAKm4cbNLP+d88oc=)
                          2: Q2sWoej5DPGl5wIw-CeODcRVXlM.roa (hash: wQMcbtBLdOGU6mgU9d/xsDpXItDoVCXCwiC3i9zeKw8=)
                          3: m25_c1bwCRR27TwA0PikcbJqUsY.roa (hash: lmfRRJbGEXu9SMbs8RoEu8bImS24RY0gDFc2/wiVBQo=)
                          4: ojqh31F-z_PVmb3H-ysSta1HlSw.roa (hash: pXqwdQA/pZAOmvAosw/Ac3zfBMN1XJgVHOWfLUuvoMs=)
                          5: wsQWFnZ9QvU6rL4ZStrqghoI4IU.roa (hash: aqTWkdbUh2lUmpGqUaJazitQHO++p5bcYZRKvviqQCM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:91:c7:35:5d:8f:80:44:af:ae:02:ba:2c:03:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8
        Validity
            Not Before: May 12 21:01:23 2026 GMT
            Not After : May 13 21:01:23 2026 GMT
        Subject: CN=16deaf5c01cc7261dfca5e2bc36144e5d8389e77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:20:a9:9d:67:b9:79:16:14:b2:36:55:28:1f:
                    3c:3a:a1:0b:5e:b5:0c:90:2f:3e:6e:ab:90:4e:e4:
                    37:c1:1f:f7:a4:d2:54:ba:01:47:7b:b2:76:41:0a:
                    5d:63:ae:3c:92:68:42:af:20:aa:46:6a:e9:65:75:
                    56:e4:07:0a:32:2a:20:d3:7c:d5:93:09:7d:f0:84:
                    72:4e:05:cc:fe:28:16:0d:55:eb:4f:a1:63:1c:95:
                    e1:b1:25:8b:eb:83:d9:8f:cc:2a:c3:b9:08:1f:25:
                    f1:76:ec:89:c3:de:b8:92:ef:98:4b:bd:74:d3:77:
                    10:17:3c:b2:24:dd:6c:60:91:75:69:1f:47:b9:56:
                    87:b3:c4:29:ea:89:c8:b4:d4:56:2f:41:bc:90:3a:
                    74:76:ea:19:ea:7b:df:35:1d:0c:f7:37:0a:63:9f:
                    4e:c0:12:47:2b:21:73:8c:09:b2:7f:b5:fd:64:41:
                    e3:7c:85:d5:57:2a:32:1b:49:ea:98:0f:31:7b:4e:
                    4d:8c:4a:91:18:cb:f8:b6:b3:50:25:4e:2f:fc:31:
                    56:c3:ea:08:78:21:d7:4f:77:18:13:8d:07:7c:0d:
                    2e:58:5c:eb:1c:54:68:d8:86:9d:dd:0f:46:3d:7b:
                    fd:d8:95:85:b3:c1:42:0b:c0:7d:df:63:57:f3:04:
                    39:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:DE:AF:5C:01:CC:72:61:DF:CA:5E:2B:C3:61:44:E5:D8:38:9E:77
            X509v3 Authority Key Identifier:
                keyid:29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:fe:86:41:13:0d:61:3b:09:26:60:5b:da:be:b9:82:a6:97:
         08:67:3b:21:b1:af:26:46:8a:23:21:06:03:b0:9f:5d:b7:70:
         3c:07:11:96:c2:ed:fa:b9:d3:a6:6b:87:ec:a7:62:98:a9:c0:
         b7:4c:2e:2c:d3:30:21:18:17:6c:eb:63:41:b1:c1:e8:ce:8d:
         12:b2:8d:82:2c:fe:f0:c1:4a:74:d2:47:43:0b:47:b7:c5:64:
         a7:ea:7b:1b:20:21:d9:c2:0a:91:3c:67:aa:18:4d:aa:0f:5d:
         d8:cc:1f:cc:54:27:60:11:c5:1d:96:ae:f5:d3:4b:03:92:41:
         d3:c4:f2:61:53:9e:01:8f:6d:66:7a:0a:67:35:06:62:90:e2:
         b3:a7:b5:45:c0:0b:15:31:60:f6:ac:26:2e:fc:49:98:50:44:
         af:34:0d:be:1e:d8:4f:c0:39:17:8e:8a:3d:63:bb:19:e8:63:
         ca:5a:98:e0:16:c4:5f:48:b3:06:fa:69:12:4e:dd:cf:d6:03:
         18:39:06:fc:cb:d7:12:7a:02:f3:ca:64:85:fc:06:fc:e4:64:
         2e:be:65:c3:5a:48:15:25:ad:72:48:32:5a:47:d8:95:c0:52:
         e6:ea:a3:d0:77:8c:33:68:fb:06:4a:f2:6c:cd:5c:e2:9e:55:
         56:1e:21:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:39:35 2026 by rpki-client