Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
File:                     kjorPddmcnXwmIbffaB591XO7Vk.mft (raw, json)
Hash identifier:          T0zTuMtJ2FgAlTV2TO9qYgOKil8+F2u048nRXHqpYI8=
Subject key identifier:   91:03:FD:B2:E1:C4:4F:15:9B:25:5E:F8:3B:63:DB:93:01:03:C3:80
Authority key identifier: 92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
Certificate issuer:       /CN=923a2b3dd7667275f09886df7da079f755ceed59
Certificate serial:       019E1C7D6A746759016620F51A29A7CB0DD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
Manifest number:          190A
Signing time:             Tue 12 May 2026 14:00:41 +0000
Manifest this update:     Tue 12 May 2026 14:00:41 +0000
Manifest next update:     Wed 13 May 2026 14:00:41 +0000
Files and hashes:         1: HgVTCqxTI2p7CB3_pzYOlBKbewI.roa (hash: Vx3tDFhqH00mNA0Sjbw5LLVQH5B1ifF/KkPAwaHsXVk=)
                          2: kjorPddmcnXwmIbffaB591XO7Vk.crl (hash: ATMmCxC817EEjXwWY3DQCyvlluzwSiZqqo3J6xVM7fw=)
                          3: uoml1ooKIpEwGVQcgm0COMGf22M.roa (hash: j6yV3AvezVwVR9BGMG8Xa/if460puXKoVMqsrCe3beo=)
                          4: yYRNMp4_8tPWVd55Ov35Q5FSlnI.roa (hash: 0/ssvW/ngUlJqY3PbldVkn5N/q0lSB25o7gaAX3Yo8w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:7d:6a:74:67:59:01:66:20:f5:1a:29:a7:cb:0d:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=923a2b3dd7667275f09886df7da079f755ceed59
        Validity
            Not Before: May 12 14:00:41 2026 GMT
            Not After : May 13 14:00:41 2026 GMT
        Subject: CN=9103fdb2e1c44f159b255ef83b63db930103c380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:50:a7:64:b6:32:33:0d:d2:a6:1d:9e:8e:36:
                    3d:cd:21:f7:69:87:35:49:fd:99:2a:1a:4e:39:b5:
                    b3:bd:4a:cc:9f:f0:52:64:93:3b:8f:15:17:65:0f:
                    97:f9:e0:1e:60:81:f5:0e:06:c9:09:ae:af:d7:1a:
                    e1:6c:3c:0c:de:39:fe:ef:a3:e1:be:45:ce:09:fb:
                    f5:67:f8:74:a9:4c:6a:3e:d3:bb:c3:64:74:a7:33:
                    7d:44:86:fe:8d:a7:8a:a5:1c:f0:9f:40:a7:e9:43:
                    42:61:f8:77:8d:12:66:e7:5a:07:cf:20:de:f7:42:
                    b7:96:71:98:e5:35:c4:0c:83:ac:7d:22:54:a1:de:
                    22:71:57:dc:63:f9:5a:94:29:bd:2a:5c:8e:92:98:
                    da:82:e4:b1:f8:d7:07:8f:54:74:98:8e:39:15:41:
                    9e:77:7a:ff:59:a4:8d:2c:ef:c7:23:ff:0a:23:67:
                    23:e6:34:9d:55:9a:f6:b5:c0:d7:0d:08:ee:9e:fb:
                    d5:7d:8d:29:e5:9e:66:95:0b:c3:19:f6:b5:27:97:
                    21:0c:cb:52:1b:ef:db:0a:ac:0a:61:9b:4e:27:46:
                    97:3e:bf:bd:e9:44:b4:48:dd:19:66:e8:8f:80:e4:
                    10:29:2f:60:00:e4:da:60:b0:ab:dd:a7:55:f5:d3:
                    09:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:03:FD:B2:E1:C4:4F:15:9B:25:5E:F8:3B:63:DB:93:01:03:C3:80
            X509v3 Authority Key Identifier:
                keyid:92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:70:9c:be:12:2c:05:8e:43:3a:df:d6:69:77:84:70:50:61:
         50:c4:fe:ae:a9:64:8c:2e:08:14:ad:42:9c:9e:8a:f3:32:28:
         ea:8f:e7:da:b9:42:24:98:e2:79:7d:7c:f3:f6:e7:e2:ff:f9:
         f7:7b:09:09:4a:7b:c3:69:20:6d:aa:7c:e4:77:33:d4:99:14:
         a6:53:ca:93:8a:35:13:38:63:64:03:e3:e9:96:64:5c:03:26:
         dc:c6:9c:c1:53:01:67:85:55:fb:9b:95:84:5d:53:02:94:87:
         06:ae:ae:68:b2:45:03:7e:0f:20:bc:7b:3b:cd:79:fd:5a:72:
         99:e2:5c:99:82:37:b8:20:ef:85:f4:2a:d7:2c:ef:8e:71:0c:
         57:dd:24:46:d8:67:92:fc:f4:2c:e2:3e:b0:33:b2:fb:7b:3e:
         d4:6d:ab:3b:73:d3:79:e8:0a:4b:12:f6:cc:16:4b:f4:7e:3c:
         17:cd:2a:1c:e3:bd:78:78:9a:7a:71:ff:3e:05:bf:d2:66:6c:
         f7:2d:82:9e:49:5a:ad:fc:5d:3e:c6:d7:c3:d2:8c:34:fa:8b:
         f5:12:cf:47:a9:d3:b6:a0:f2:c5:39:c2:46:d4:ba:d7:a4:df:
         b9:c3:a3:cf:37:30:ad:24:3f:fc:c0:07:3f:f9:c7:3f:30:92:
         8e:cc:a0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:39:51 2026 by rpki-client