Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
File:                     rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft (raw, json)
Hash identifier:          6GhEslplre26WgU3MyCDnyOiFj1imwtnk6aNqnXmdsQ=
Subject key identifier:   D2:F7:A5:57:9B:C0:C1:95:B4:E4:6E:D5:3E:08:72:55:54:E3:CE:C6
Authority key identifier: AD:8F:54:38:07:3A:62:1A:EA:77:2F:5C:B7:A4:EF:D5:8C:6B:77:4C
Certificate issuer:       /CN=ad8f5438073a621aea772f5cb7a4efd58c6b774c
Certificate serial:       019E1D591A3C8D0005438159FDF4C5A973AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
Manifest number:          190D
Signing time:             Tue 12 May 2026 18:00:39 +0000
Manifest this update:     Tue 12 May 2026 18:00:39 +0000
Manifest next update:     Wed 13 May 2026 18:00:39 +0000
Files and hashes:         1: 35RBbJH7O74ElGBsXDtzWelJCE8.asa (hash: VGTXJkpFVsNFQM4P5dimy32ItUqxw4xThmopk2UmxJs=)
                          2: rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl (hash: TphzzKEx/KlaK32IkeGsLX92e59PxCz0wvv/Qqf8Qn4=)
                          3: weWWuV6jfsu20O1Kp8PZ_7w5-6I.roa (hash: hxVuyj93Sh3p92R2/8BnJWSOvPERrOV88q73B7vWqrA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:1a:3c:8d:00:05:43:81:59:fd:f4:c5:a9:73:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad8f5438073a621aea772f5cb7a4efd58c6b774c
        Validity
            Not Before: May 12 18:00:39 2026 GMT
            Not After : May 13 18:00:39 2026 GMT
        Subject: CN=d2f7a5579bc0c195b4e46ed53e08725554e3cec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c8:c2:1b:8f:5f:7d:29:f3:0f:f6:96:23:f1:
                    18:9b:28:6d:b6:ec:2a:f7:eb:23:28:0e:d6:40:8c:
                    94:bb:38:33:98:fc:ba:b7:ab:6e:9c:9f:93:9b:96:
                    e1:55:d7:cf:6a:cc:3b:b3:ca:67:61:e5:a9:5a:ef:
                    ea:a5:88:04:9b:23:c4:ce:59:39:1e:65:13:91:ae:
                    14:f6:3d:fc:5c:06:9a:a1:04:2b:3f:17:ff:8c:20:
                    4c:d1:01:be:b8:a9:f9:9b:22:40:64:57:12:c8:fe:
                    81:a2:99:7c:f2:64:3c:af:6a:b6:e3:13:de:fc:b4:
                    7b:49:60:d9:37:53:75:e0:73:de:71:9f:b2:97:a7:
                    2d:c6:5d:27:2f:dd:20:ef:7d:b9:da:71:46:07:49:
                    2a:ee:81:af:7f:4d:94:46:49:d1:04:cd:9e:69:d1:
                    f4:d6:ea:bf:f5:26:ad:92:b8:97:1d:e2:77:ee:bf:
                    29:9b:d5:8f:1b:62:d3:f5:66:54:95:8b:df:ac:75:
                    35:bb:93:89:e0:81:9c:91:7a:46:fa:2f:69:76:f3:
                    5a:90:e2:23:df:99:20:5a:97:0f:31:7e:8e:e3:7c:
                    22:20:03:19:68:46:cb:e4:cb:a6:55:7a:04:54:19:
                    69:32:74:63:93:e5:cb:8f:5b:2c:71:0b:ed:f7:87:
                    3c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:F7:A5:57:9B:C0:C1:95:B4:E4:6E:D5:3E:08:72:55:54:E3:CE:C6
            X509v3 Authority Key Identifier:
                keyid:AD:8F:54:38:07:3A:62:1A:EA:77:2F:5C:B7:A4:EF:D5:8C:6B:77:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:7e:7b:da:49:ac:b0:15:b4:dd:9a:61:8c:80:d4:e7:22:cd:
         62:2f:e7:82:b6:c8:cf:60:da:c6:bb:13:d1:41:93:e5:6d:2a:
         d4:7b:af:a2:ff:66:b6:bf:7b:7a:76:97:7a:4e:f1:ea:b5:94:
         0f:0c:b4:9b:55:db:70:1c:91:78:6b:e5:db:2e:06:38:be:8c:
         69:df:af:b6:5e:da:2f:b7:61:ee:47:bc:0b:c1:cc:ad:06:b6:
         bb:e0:b3:09:b9:65:2f:23:ab:36:5b:6f:1b:11:b7:fa:40:34:
         53:5c:ea:3d:a1:40:c7:8e:1b:4f:89:5d:70:b5:3b:60:dc:85:
         1a:b2:88:36:7e:aa:1e:dd:06:9d:52:a7:f8:5b:69:a9:8e:20:
         37:61:40:2a:8d:59:a1:b4:31:c3:5f:32:21:2c:28:61:90:b0:
         15:d0:14:1c:74:e0:78:36:6e:1c:df:13:08:97:ed:02:51:2c:
         8d:d7:0f:d3:67:61:02:82:ea:e2:95:9a:44:79:05:b3:98:25:
         50:0a:5d:4e:c8:e0:b6:62:c4:7b:47:86:74:a9:61:7d:6d:e7:
         34:e9:be:02:bc:77:dd:d1:98:3d:ab:60:e6:21:fc:07:ae:23:
         6a:99:8a:11:5b:ae:00:a2:82:46:a9:b4:71:f0:b4:10:36:bc:
         e6:83:80:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dWRo8jQAFQ4FZ/fTFqXOsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkOGY1NDM4MDczYTYyMWFlYTc3MmY1Y2I3YTRlZmQ1OGM2
Yjc3NGMwHhcNMjYwNTEyMTgwMDM5WhcNMjYwNTEzMTgwMDM5WjAzMTEwLwYDVQQD
EyhkMmY3YTU1NzliYzBjMTk1YjRlNDZlZDUzZTA4NzI1NTU0ZTNjZWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sjCG49ffSnzD/aWI/EYmyhttuwq
9+sjKA7WQIyUuzgzmPy6t6tunJ+Tm5bhVdfPasw7s8pnYeWpWu/qpYgEmyPEzlk5
HmUTka4U9j38XAaaoQQrPxf/jCBM0QG+uKn5myJAZFcSyP6Bopl88mQ8r2q24xPe
/LR7SWDZN1N14HPecZ+yl6ctxl0nL90g73252nFGB0kq7oGvf02URknRBM2eadH0
1uq/9SatkriXHeJ37r8pm9WPG2LT9WZUlYvfrHU1u5OJ4IGckXpG+i9pdvNakOIj
35kgWpcPMX6O43wiIAMZaEbL5MumVXoEVBlpMnRjk+XLj1sscQvt94c8qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNL3pVebwMGVtORu1T4IclVU487GMB8GA1UdIwQY
MBaAFK2PVDgHOmIa6ncvXLek79WMa3dMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclk5VU9BYzZZaHJxZHk5Y3Q2VHYxWXhyZDB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9kMTRlZjUtZjRkYi00M2JjLThjY2Yt
MTc3OGJhMjVkOGI5LzEvclk5VU9BYzZZaHJxZHk5Y3Q2VHYxWXhyZDB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9kMTRlZjUtZjRkYi00M2JjLThjY2YtMTc3OGJhMjVkOGI5
LzEvclk5VU9BYzZZaHJxZHk5Y3Q2VHYxWXhyZDB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE3572kms
sBW03ZphjIDU5yLNYi/ngrbIz2DaxrsT0UGT5W0q1Huvov9mtr97enaXek7x6rWU
Dwy0m1XbcByReGvl2y4GOL6Mad+vtl7aL7dh7ke8C8HMrQa2u+CzCbllLyOrNltv
GxG3+kA0U1zqPaFAx44bT4ldcLU7YNyFGrKINn6qHt0GnVKn+FtpqY4gN2FAKo1Z
obQxw18yISwoYZCwFdAUHHTgeDZuHN8TCJftAlEsjdcP02dhAoLq4pWaRHkFs5gl
UApdTsjgtmLEe0eGdKlhfW3nNOm+Arx33dGYPatg5iH8B64japmKEVuuAKKCRqm0
cfC0EDa85oOAQw==
-----END CERTIFICATE-----
Generated at Tue May 12 21:34:08 2026 by rpki-client