Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
File:                     89SUuLJxr7fGLxOX9xLPLc02QYU.mft (raw, json)
Hash identifier:          /DqYggZJ1beYgaP7J5I/GkZgD7FnkiTdd4yOmgcV8EA=
Subject key identifier:   10:C6:47:03:84:D8:B4:13:D1:EA:4A:FB:D1:3E:FF:B3:2B:B3:CB:3D
Authority key identifier: F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85
Certificate issuer:       /CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
Certificate serial:       019E20910BBBFA367BA58C627834284AAA6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
Manifest number:          190B
Signing time:             Wed 13 May 2026 09:00:37 +0000
Manifest this update:     Wed 13 May 2026 09:00:37 +0000
Manifest next update:     Thu 14 May 2026 09:00:37 +0000
Files and hashes:         1: 89SUuLJxr7fGLxOX9xLPLc02QYU.crl (hash: ciVsZ7nk9+UvaefoZs6pLDw681z5+Qo6IgvPBG9Myxs=)
                          2: mhvprDFBImPl7iFEWW3FxFWOZ6g.roa (hash: YcvQtGrqc9rsfbkzmvXWNEdP5V2+qw1zO++Zl2+6+Eo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:91:0b:bb:fa:36:7b:a5:8c:62:78:34:28:4a:aa:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
        Validity
            Not Before: May 13 09:00:37 2026 GMT
            Not After : May 14 09:00:37 2026 GMT
        Subject: CN=10c6470384d8b413d1ea4afbd13effb32bb3cb3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c7:50:67:90:f6:d0:35:3d:31:73:ec:ce:1d:
                    e7:0e:e2:0b:36:83:94:6d:7f:20:1a:d2:f1:56:99:
                    11:79:31:cc:51:a1:66:91:fe:f8:0e:d6:b3:4f:4c:
                    29:1a:93:39:44:82:6e:00:e3:b0:0c:88:35:d3:5d:
                    23:8f:48:e2:16:19:ae:42:67:c5:29:a5:be:7e:13:
                    68:a4:a9:89:15:60:25:12:46:5c:13:49:e3:19:e3:
                    54:3b:0a:43:78:38:58:25:d1:87:68:69:db:d6:47:
                    ca:b3:8a:fd:8f:a1:48:54:4a:23:fb:3a:d1:a9:b2:
                    fc:ee:a7:9e:e2:3f:74:86:08:ed:ed:8a:2c:d7:40:
                    e6:ed:a0:30:d6:a9:b7:bc:be:8a:81:53:79:30:d7:
                    5c:45:e0:78:ff:53:bb:65:df:b3:6b:03:fd:e4:31:
                    2a:43:3c:5d:07:4a:1a:b1:f7:c0:fc:6c:44:af:9f:
                    7d:b8:67:50:37:aa:05:cf:c6:f6:be:90:56:7b:f0:
                    0e:d8:ea:84:99:89:64:99:b4:89:98:c1:a5:03:dc:
                    bd:ec:83:e0:c6:96:22:0b:c8:c5:33:16:32:2b:50:
                    c7:23:22:86:e8:68:97:97:d5:f5:f7:58:de:67:47:
                    fc:a3:78:99:2e:ac:30:d7:d8:ef:18:aa:58:fb:50:
                    2b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C6:47:03:84:D8:B4:13:D1:EA:4A:FB:D1:3E:FF:B3:2B:B3:CB:3D
            X509v3 Authority Key Identifier:
                keyid:F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:61:3c:5c:a8:f3:6f:03:fd:6f:59:4e:f0:00:d4:52:9c:6a:
         cd:73:79:d1:cc:9d:e4:e9:11:b7:b3:a0:7b:d4:3d:ee:30:04:
         bc:08:ba:58:72:a8:a9:20:9b:37:c3:ee:73:06:bd:2f:ab:17:
         73:1d:eb:dc:b6:46:87:5f:fa:23:56:3c:89:b1:72:4d:4f:f3:
         cc:c5:e5:25:d5:90:f9:3b:a2:89:a2:03:b0:c3:1a:70:14:74:
         20:69:28:92:30:15:fb:9f:0a:ba:fb:7f:c9:f4:b1:54:f9:5f:
         d7:80:1b:35:ca:d0:65:fb:96:33:c4:92:af:df:ab:21:a1:d4:
         b3:6c:00:33:82:a2:ce:d4:25:62:38:c1:bb:bb:1d:4a:a8:b3:
         fb:a0:37:e7:89:cc:ea:d7:31:33:29:2e:f4:74:f2:cd:30:47:
         82:a0:eb:03:71:74:78:88:a8:5a:6a:a3:17:37:43:77:f2:5e:
         83:f0:7a:1f:e2:9f:69:cb:78:2b:81:e4:ef:be:76:f9:86:a0:
         40:25:78:5c:09:bd:92:1c:99:02:24:62:1b:9a:0b:ed:ca:a5:
         36:65:7c:81:b3:ee:01:0e:9b:a3:c1:7d:83:75:6d:e3:aa:45:
         d9:54:21:6b:c1:09:e2:6e:21:9a:ef:c2:ea:7d:78:2a:b6:cb:
         44:ad:a0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:30:11 2026 by rpki-client