Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
File:                     5oBHj67Itn3f7OY1fPJc8sodhdA.mft (raw, json)
Hash identifier:          R3mENl264CwE5T3vhujqZD4epdH1KeGzVaM0h2xrabQ=
Subject key identifier:   44:5F:A4:29:1B:41:BC:86:8B:61:95:C1:6B:E2:C3:09:D0:A2:D3:11
Authority key identifier: E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0
Certificate issuer:       /CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0
Certificate serial:       019E1EA344E13637196EB6E3716EFB82A214
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
Manifest number:          1909
Signing time:             Wed 13 May 2026 00:01:16 +0000
Manifest this update:     Wed 13 May 2026 00:01:16 +0000
Manifest next update:     Thu 14 May 2026 00:01:16 +0000
Files and hashes:         1: 5oBHj67Itn3f7OY1fPJc8sodhdA.crl (hash: px0t2dA7cM0DLyEW4JKixKTgUzBZxU7MxGdyCUIuyOU=)
                          2: ymGU-blAl3Eiudw-0pPU5E8cWuM.roa (hash: sR3zp4LyEopkmIvV+/IzzZmry6sELnZ6ai0YOhaDCBY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:44:e1:36:37:19:6e:b6:e3:71:6e:fb:82:a2:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0
        Validity
            Not Before: May 13 00:01:16 2026 GMT
            Not After : May 14 00:01:16 2026 GMT
        Subject: CN=445fa4291b41bc868b6195c16be2c309d0a2d311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:99:ef:72:35:ee:c0:b4:75:61:e6:cc:fa:b8:
                    e6:70:ba:61:fa:06:19:14:43:3c:53:37:c2:33:d5:
                    cc:82:76:b7:4c:de:32:76:8f:ca:bd:5f:a1:23:ec:
                    09:e6:93:7e:1c:d2:48:37:5f:67:14:7a:ae:fd:3a:
                    fc:df:6f:b0:c3:41:88:c1:68:b6:61:b8:c7:d6:7c:
                    8e:fa:60:03:6f:87:dc:9f:e1:57:02:9b:ff:d6:bc:
                    24:0f:a3:b3:4e:e7:ab:81:4c:8b:05:2b:c3:94:ec:
                    08:a1:98:30:f5:e5:e7:1c:45:ea:06:e4:9a:cd:7d:
                    ea:58:4d:06:47:3d:3a:b3:c4:15:1c:06:3a:39:8a:
                    2f:6c:5a:a9:ea:84:36:0b:12:7a:11:0c:66:72:0a:
                    77:f7:db:fd:1a:26:c0:02:15:36:d5:75:9d:4d:69:
                    15:9b:9e:40:0f:55:e2:83:5f:13:f5:40:9d:41:28:
                    0c:9c:b9:84:c4:2a:04:bf:c0:6d:36:ef:95:ec:54:
                    0e:f6:73:10:1f:83:fd:c0:99:54:6f:a6:e0:f9:a3:
                    23:b0:0c:61:28:ba:24:6d:72:25:da:3c:f4:9f:73:
                    16:7c:d5:1a:48:47:e9:23:86:50:b6:49:ac:50:1c:
                    d3:5c:2f:24:ab:e7:fe:3e:fe:ba:b5:71:02:c6:6b:
                    23:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:5F:A4:29:1B:41:BC:86:8B:61:95:C1:6B:E2:C3:09:D0:A2:D3:11
            X509v3 Authority Key Identifier:
                keyid:E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:1d:95:a6:ba:cf:6f:30:81:22:13:1b:1e:6c:7b:7f:15:1b:
         ab:34:17:f1:f1:48:29:df:11:70:95:5b:6c:12:00:c3:27:a9:
         b4:10:e8:c9:9a:0c:d0:c1:39:47:c5:e2:65:c4:e0:63:71:6f:
         68:33:ab:84:52:fa:9b:36:20:5d:16:e5:f5:2f:29:d7:97:8e:
         2c:d4:27:61:79:96:2f:c8:2e:97:ee:7d:66:d8:21:31:bf:d2:
         da:47:8d:64:4c:03:34:4d:7a:83:da:aa:fd:f1:9f:79:cb:ed:
         5a:d7:a1:3f:3a:e7:fa:a9:b7:94:9f:99:dd:2e:6f:61:57:2d:
         20:72:27:6c:3b:e3:a3:bc:58:ef:77:6c:c9:23:a2:53:46:b5:
         2b:b6:a2:40:8c:ab:10:5e:5f:be:ae:5e:19:43:b9:67:57:bf:
         82:6e:ab:00:c5:89:40:e0:97:03:3c:f8:9c:6e:b6:eb:8b:61:
         12:eb:cc:cf:dd:f9:f9:c3:d5:cb:c4:a3:78:a0:06:3a:26:a1:
         46:d9:e7:9f:aa:3a:6d:a8:e5:c0:7b:fd:04:f7:d7:86:dd:64:
         20:3b:14:78:1c:a7:a0:92:db:da:8d:af:69:15:66:79:60:53:
         a3:2d:eb:60:33:a9:65:b9:8d:cb:45:ac:00:12:64:b8:ef:14:
         1b:5b:28:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:43:57 2026 by rpki-client