Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
File:                     I7oexPA1py36OekwrY7FQ2jrevQ.mft (raw, json)
Hash identifier:          jLXjwndmThM1fCbh+P2977PSjiCc1EgftGSHeek7ZAM=
Subject key identifier:   CF:7E:1A:FE:E7:CB:93:1A:3E:2D:59:35:51:FA:AD:59:28:E2:65:11
Authority key identifier: 23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
Certificate issuer:       /CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Certificate serial:       019E1DC70211454825CAA6DE2C2129B9518E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
Manifest number:          190C
Signing time:             Tue 12 May 2026 20:00:41 +0000
Manifest this update:     Tue 12 May 2026 20:00:41 +0000
Manifest next update:     Wed 13 May 2026 20:00:41 +0000
Files and hashes:         1: I7oexPA1py36OekwrY7FQ2jrevQ.crl (hash: 2J6K1l7goQ/z766ebiEDe80L4yXRoJZR10bkgbpga7g=)
                          2: YV5YbyzQ4v-R-M9sTv2X0MLou60.roa (hash: Wnl73KWmj3QlZUmHv6GR1P0QHj68SNwwAwR9VDBTafI=)
                          3: _IN-lUbsVoIujOIBhlqniYDIAj4.roa (hash: OVNWFTAvftStnpg3u2YMXcX4JyBnzVvFH9bIqxUH8FU=)
                          4: b0HKN9ab1P1Sr3YvvuEwkf7syng.roa (hash: 9hsVaqxhAVdgsjntPxtz6LrMJOjEjADE4hMXgvvmdoo=)
                          5: t_VAikl6AuDV7KY1lJg71qWe6PI.roa (hash: 5EWDR0oT5pCzdNuqq4gxPs1dK+scKpifLsg8E3R3q10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:02:11:45:48:25:ca:a6:de:2c:21:29:b9:51:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
        Validity
            Not Before: May 12 20:00:41 2026 GMT
            Not After : May 13 20:00:41 2026 GMT
        Subject: CN=cf7e1afee7cb931a3e2d593551faad5928e26511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b7:d0:f7:4c:3a:85:e2:ed:6d:8f:2f:2a:bc:
                    3d:87:41:a4:24:03:b7:93:44:b4:ad:78:c9:e7:15:
                    57:99:7e:44:94:13:69:4e:7c:3f:8d:9b:e7:1d:0e:
                    8c:a4:67:a7:a4:95:84:0a:3b:19:2d:59:c2:f8:e0:
                    72:6f:b3:0a:df:59:22:82:82:e8:98:1f:43:ac:f9:
                    08:94:e9:3e:20:31:8c:58:6e:ce:fd:29:39:5b:8f:
                    1f:f0:56:43:5c:e4:a4:a9:41:7e:11:70:f7:98:b8:
                    8d:5c:46:1e:d2:38:07:b6:0f:80:56:20:81:b8:1d:
                    15:08:00:ff:d9:7f:23:e3:cc:ee:cf:08:d6:f6:26:
                    69:4a:7b:26:6c:73:65:a4:30:e1:eb:2a:66:f4:5f:
                    ec:3c:3f:9d:4a:d0:be:57:18:99:5f:d1:23:09:38:
                    e6:e7:bf:05:81:59:50:3a:d8:51:c5:ec:2a:05:19:
                    14:81:81:f1:49:26:87:3a:2a:9b:57:74:a4:f9:65:
                    f6:09:40:0b:26:d4:fa:43:15:ff:48:71:75:be:87:
                    77:e4:c3:db:84:1a:81:28:dc:05:15:b1:d3:f1:e0:
                    51:a7:b7:e5:1a:b0:51:9a:1e:bc:2e:2a:4a:29:0b:
                    df:59:88:7d:6c:bc:21:a3:f0:7b:8c:9e:a9:cb:d9:
                    9c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:7E:1A:FE:E7:CB:93:1A:3E:2D:59:35:51:FA:AD:59:28:E2:65:11
            X509v3 Authority Key Identifier:
                keyid:23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:de:ad:40:c7:20:5b:3c:53:20:cf:77:80:9c:83:63:61:bb:
         83:c4:f5:ef:f8:11:a2:6a:9c:af:75:c0:2d:53:47:4e:b0:15:
         34:96:1f:08:fd:bf:0e:4d:59:05:d8:9d:06:2c:60:bb:ac:27:
         d5:67:76:39:35:4c:9a:bc:0c:35:39:f4:8d:82:af:5c:b7:34:
         35:e4:fc:cb:04:21:41:b6:c6:3f:a0:2d:b5:66:0b:f3:ae:55:
         da:2c:0d:af:ea:14:29:ca:d8:a9:eb:44:c0:5e:6e:62:07:0f:
         49:9d:fd:ec:b7:cf:36:8d:b0:6e:c1:23:3a:4e:4d:62:14:17:
         6f:f6:17:a9:89:77:dc:7d:b0:4f:8a:db:2c:20:d2:eb:40:bb:
         98:14:c3:28:c9:aa:83:42:31:c1:1f:02:03:2a:85:47:d7:c5:
         3e:9b:42:85:f8:30:8e:60:e3:56:23:f0:d2:0a:0e:0c:72:cc:
         b0:63:8d:f9:6a:e1:ba:36:5c:8f:83:17:23:9b:aa:13:79:7a:
         28:54:c9:20:0c:b4:44:75:f2:a3:fd:93:d0:08:8d:ff:52:f1:
         30:6c:2c:bc:ab:62:18:f0:7d:fd:7d:85:98:73:a5:42:f8:e3:
         96:2d:6e:24:49:78:3f:41:0d:e7:6f:f9:35:6b:b2:82:4f:8f:
         a1:7c:1b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:18:01 2026 by rpki-client