Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
File:                     a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft (raw, json)
Hash identifier:          K/l45sYZd0mXatIy5qPdIygUVnhHf/WmaMEwH9iuIpg=
Subject key identifier:   49:56:49:A7:D8:0B:AB:DE:C7:EF:C7:5C:4D:97:5A:B6:36:C8:7E:2A
Authority key identifier: 6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35
Certificate issuer:       /CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535
Certificate serial:       019E1F118AA9D1B3F71826800E9C71AC2803
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
Manifest number:          1905
Signing time:             Wed 13 May 2026 02:01:43 +0000
Manifest this update:     Wed 13 May 2026 02:01:43 +0000
Manifest next update:     Thu 14 May 2026 02:01:43 +0000
Files and hashes:         1: Yg6FVNZBl1w2Rze2Thsw4t3zCtA.roa (hash: r0yjU3GNEbU4eEC9QPmI7gQD6DPzo++uXSGijCopcR8=)
                          2: a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl (hash: UDaI/ZR9QikREplzq7uQlIxq2bbT85bW/V7hr1KfTbM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:8a:a9:d1:b3:f7:18:26:80:0e:9c:71:ac:28:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535
        Validity
            Not Before: May 13 02:01:43 2026 GMT
            Not After : May 14 02:01:43 2026 GMT
        Subject: CN=495649a7d80babdec7efc75c4d975ab636c87e2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2c:16:87:0f:ff:d6:cb:9f:b2:d4:72:58:66:
                    cb:58:21:eb:fc:f1:90:47:1d:e2:50:12:f3:1a:0e:
                    7d:f0:51:de:ce:d2:9f:2a:68:da:6c:cc:42:7d:2b:
                    f3:d9:69:3a:e0:8e:be:b4:9e:0e:7b:7b:42:06:48:
                    df:70:55:05:fd:e7:ff:08:ab:c3:c7:42:0b:8d:58:
                    3b:a4:a3:a5:f1:22:d6:73:6d:49:d2:c7:6b:24:9a:
                    65:36:65:bf:ea:26:10:11:f3:0f:22:11:7d:9e:a5:
                    b6:75:07:86:bc:ca:54:46:c4:a6:ab:63:7e:a4:ea:
                    1c:c1:28:3f:4a:c4:eb:fc:43:ab:2b:52:cd:4b:75:
                    26:96:94:44:94:98:b3:c4:f9:dd:b0:27:d6:c0:f3:
                    26:02:b8:17:06:f5:ad:31:4b:7b:5f:81:cd:c0:e8:
                    dc:ee:a9:38:90:49:c9:ed:8e:99:1e:f7:6b:83:22:
                    ac:9a:0e:2b:2a:08:5c:83:58:d5:9e:5d:82:ee:8a:
                    1f:b0:57:2c:49:92:26:28:0c:18:99:99:9f:5c:de:
                    5f:5f:69:7f:d3:14:e8:f1:9a:cd:6c:88:57:e7:13:
                    63:46:9f:57:73:67:b8:66:fb:8f:4f:87:9b:87:94:
                    75:5c:98:9f:79:db:30:23:bd:51:3f:0b:12:e2:55:
                    62:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:56:49:A7:D8:0B:AB:DE:C7:EF:C7:5C:4D:97:5A:B6:36:C8:7E:2A
            X509v3 Authority Key Identifier:
                keyid:6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:24:0f:92:7b:e9:90:05:27:60:06:6e:16:4a:27:93:db:66:
         f6:d9:0e:a7:d4:19:c2:da:6c:cd:21:22:fa:bd:73:bd:71:80:
         8f:c9:ce:79:fb:3c:6c:95:9f:4d:86:fe:73:17:0b:ee:bc:59:
         03:13:50:57:ce:97:1d:49:cb:14:eb:98:97:db:5e:95:cb:dc:
         df:30:bc:8c:63:74:b0:35:af:9b:d0:02:df:9d:0d:1b:c7:1f:
         a5:a3:70:e0:a8:5f:f7:f9:41:43:ff:b3:ae:ef:9f:41:f1:67:
         0e:92:7c:27:94:b2:65:c2:11:21:4d:57:03:1e:09:88:62:bd:
         6a:ba:87:68:4c:6f:9c:f3:a8:22:a2:b6:3d:8a:15:b0:e5:47:
         eb:47:38:59:5a:39:a4:a6:67:c9:78:f2:1b:4c:e5:c9:31:26:
         d5:57:65:13:75:d1:0b:ec:ad:0a:d2:30:f2:5f:20:8e:70:68:
         ae:89:1e:f8:11:d2:ce:88:d7:96:62:6a:00:5a:3c:2c:a4:08:
         0c:a7:c5:d5:5e:8c:8c:de:8b:e8:d5:db:7f:c6:07:8d:5f:d7:
         ae:4d:e7:f9:15:c9:c2:e4:f9:8a:52:22:c4:4e:83:61:a4:11:
         e3:62:1d:c6:66:c5:a7:8b:6e:c3:cb:af:2b:a3:dd:d7:91:d2:
         e7:aa:f4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:04:31 2026 by rpki-client