Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.mft
File:                     XYqf18UZJuIuqKozs7iDjpPovt0.mft (raw, json)
Hash identifier:          fmMtD0MMu0M8h057LFvdv3iwOgKK2sX8hIHTObxFsHk=
Subject key identifier:   75:75:88:A6:12:C7:DF:14:09:8C:07:7C:3A:DC:F9:2B:A6:5D:8E:E2
Authority key identifier: 5D:8A:9F:D7:C5:19:26:E2:2E:A8:AA:33:B3:B8:83:8E:93:E8:BE:DD
Certificate issuer:       /CN=5d8a9fd7c51926e22ea8aa33b3b8838e93e8bedd
Certificate serial:       019E1D224441E19E4480776C5B2792CE58CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.mft
Manifest number:          1909
Signing time:             Tue 12 May 2026 17:00:45 +0000
Manifest this update:     Tue 12 May 2026 17:00:45 +0000
Manifest next update:     Wed 13 May 2026 17:00:45 +0000
Files and hashes:         1: OS8EDWL74n3CtFxmTxNOolYhsvA.roa (hash: yF17P4v/AdaI5VNNKOl9FtUJuOAbQSvTKgj5Ha/kk7s=)
                          2: RrlPj_5PMLmauOZbV-XxFE0jClU.roa (hash: +JGjuqCo+HgEGZGs0mkuqnIL4NPJWqKMaUK/A5KXgqw=)
                          3: XYqf18UZJuIuqKozs7iDjpPovt0.crl (hash: lKv7DfRAw5ti7GRU6WfWU3gSyddyyi03GsCi+SDhfXI=)
                          4: dL_9twvmgLzMs895oA64iiDmIEY.roa (hash: LgJcVms5Pq7JFZ8+OO+s5X+XVI8uKF8XIm98bwsR7Lk=)
                          5: dqfLmPoWYDgnN63zfumMSmq4Qs4.asa (hash: VP2elBPNAsWST4m//JgRDzv1id8AdOzpooWBKdSTZ3M=)
                          6: m_016GliLd1us5Dyp3gWd_9XmZU.roa (hash: NGfX/rkS6vQZZNfEtGY8uwL12Vk9X/AaXVk/NGit2hQ=)
                          7: wEd_ihwz_Sc9Z7253Egu-wb4rYs.roa (hash: JaUYZqefug6H01TWJts1HEcFIA5lKpx4F7+av5F+33Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 17:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:44:41:e1:9e:44:80:77:6c:5b:27:92:ce:58:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d8a9fd7c51926e22ea8aa33b3b8838e93e8bedd
        Validity
            Not Before: May 12 17:00:45 2026 GMT
            Not After : May 13 17:00:45 2026 GMT
        Subject: CN=757588a612c7df14098c077c3adcf92ba65d8ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c5:e2:11:e8:a1:c0:f3:11:2d:12:c0:e5:d0:
                    71:75:77:54:19:44:7a:dc:6f:e7:f7:9e:f8:66:60:
                    8c:a5:45:ba:b0:c9:82:91:d6:8f:67:13:f1:d1:ae:
                    bf:24:1a:31:7e:46:b1:a9:21:9d:15:a1:db:98:06:
                    ea:37:48:6a:4a:ab:80:93:a6:79:a8:59:f1:b7:99:
                    00:8b:4c:ee:d8:1e:04:85:8e:59:cd:ad:b3:22:2a:
                    61:72:42:73:9b:4b:35:95:6f:78:ca:0b:de:fd:c6:
                    1d:ed:9a:65:b9:32:48:ce:8b:4b:47:ae:de:66:c2:
                    73:8b:ce:8f:f8:14:c2:b3:e3:1c:28:3d:d0:dc:88:
                    13:07:02:68:87:52:05:f6:46:04:ef:3d:e6:e0:77:
                    fe:43:6b:94:bf:9e:be:62:4e:02:0c:d6:27:0a:75:
                    b2:d4:49:dc:5c:32:53:0f:a7:41:19:3c:ae:b6:d4:
                    12:fd:79:e4:0b:5d:cf:3d:42:d2:2e:d4:33:d5:97:
                    cb:fb:ff:f8:e8:55:a9:19:12:e6:65:91:ef:31:4f:
                    cb:5f:6a:6f:62:08:bc:c2:7c:19:b4:5c:da:f8:21:
                    d4:c9:fa:7c:c1:d2:36:68:bf:41:93:c3:ab:ec:de:
                    81:dc:1d:8e:3d:35:97:f7:17:86:cb:2b:95:0b:2b:
                    df:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:75:88:A6:12:C7:DF:14:09:8C:07:7C:3A:DC:F9:2B:A6:5D:8E:E2
            X509v3 Authority Key Identifier:
                keyid:5D:8A:9F:D7:C5:19:26:E2:2E:A8:AA:33:B3:B8:83:8E:93:E8:BE:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:66:67:fd:36:d5:26:06:12:bb:0e:fb:5e:a6:9b:a4:20:3d:
         ce:3e:c3:da:6f:51:31:c4:24:e3:dc:1f:47:84:56:06:28:c3:
         64:63:b7:5a:90:4c:43:0e:75:f4:fb:b0:6b:a5:94:b0:2b:d7:
         46:10:50:b7:ac:bb:4b:64:ca:74:a8:d0:9a:81:a3:92:30:05:
         5d:9a:47:48:4c:b8:37:58:59:f3:e7:d0:39:57:2d:85:83:b0:
         32:05:35:f4:78:a8:ef:31:9d:db:65:2a:7e:6c:5a:3a:b4:2d:
         fd:9e:50:80:92:2e:97:65:33:ec:4c:cd:2a:93:5c:20:13:30:
         db:ac:4d:71:6e:40:0f:93:cf:ff:cd:16:13:f0:94:fd:bb:67:
         8b:59:42:57:a4:9b:65:7f:97:c1:76:38:31:eb:60:7d:ab:6f:
         02:be:04:74:46:f0:99:45:12:6f:6e:fc:84:6b:82:0c:9d:5e:
         c2:17:32:8d:bf:48:a0:a5:14:c4:d7:f5:a0:01:c0:de:08:e8:
         fd:cc:f2:b9:08:08:a5:b5:fc:c2:5b:10:34:72:85:df:31:e4:
         54:f8:8a:22:65:88:5a:9f:76:8e:18:ee:47:96:94:72:f9:cf:
         6e:bf:c4:b9:a3:e7:db:78:d2:40:99:9c:df:8c:e9:4c:31:66:
         8e:d3:b2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:19:04 2026 by rpki-client