Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
File:                     tOiC9xca9tzczJzXn5jexnV_4Yk.mft (raw, json)
Hash identifier:          ort27uiMPtB7Nifi5HG4wUfkayw1Wpqz1kgB3EUQQI4=
Subject key identifier:   CC:50:79:78:43:BA:7F:23:38:94:59:EE:EA:1B:F2:C0:94:77:D6:6B
Authority key identifier: B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89
Certificate issuer:       /CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189
Certificate serial:       019E2092311CE3EAB391C188A85F37615027
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
Manifest number:          1905
Signing time:             Wed 13 May 2026 09:01:52 +0000
Manifest this update:     Wed 13 May 2026 09:01:52 +0000
Manifest next update:     Thu 14 May 2026 09:01:52 +0000
Files and hashes:         1: mRAbVrC4vL4GmozrjHi2i0Iaytw.roa (hash: vC24nQiiHK47q4YRBJHF/HkE+eYaEpAw6ZvG99eAnwU=)
                          2: tOiC9xca9tzczJzXn5jexnV_4Yk.crl (hash: OSF7btHFVLHNSrP9Xo5b/nB+7ZIbgnOwPHPmEWHeL7s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 09:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:92:31:1c:e3:ea:b3:91:c1:88:a8:5f:37:61:50:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189
        Validity
            Not Before: May 13 09:01:52 2026 GMT
            Not After : May 14 09:01:52 2026 GMT
        Subject: CN=cc50797843ba7f23389459eeea1bf2c09477d66b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:96:85:db:5f:ea:db:75:4a:13:c7:54:46:a7:
                    fe:29:d1:f4:fc:33:10:f8:9c:d6:6a:35:6e:d1:83:
                    7e:a0:cc:d0:f1:55:9e:c0:c2:06:a1:31:fa:ff:43:
                    08:c2:3a:db:ea:b4:2f:ff:3e:5a:b7:d8:f9:bd:14:
                    ea:58:00:aa:07:85:99:28:7b:bc:11:79:96:26:5d:
                    93:89:de:9f:25:97:aa:b8:41:06:71:8b:78:b0:04:
                    75:e8:66:33:27:ab:16:4c:45:ee:44:9e:3d:81:63:
                    7e:e2:35:9b:34:6c:4c:d2:ee:61:f3:9d:b2:c6:9d:
                    8f:f2:da:92:9c:2b:4f:23:c5:34:8e:ad:bb:96:c1:
                    b4:9a:b1:f0:78:e6:40:ae:b2:88:8d:1f:f0:ff:f5:
                    77:61:d1:5f:19:59:53:64:95:38:2c:82:51:ea:6a:
                    c8:6e:da:7b:6a:85:91:11:42:45:a0:ea:8a:8a:ba:
                    c6:0c:69:a9:78:68:e0:37:ac:e3:c6:b4:d4:e5:f1:
                    56:39:5b:68:ed:88:ce:7f:4c:44:02:13:48:82:2f:
                    df:3f:23:0e:c0:4f:8c:5c:3a:18:18:b6:d1:54:9b:
                    c6:24:e6:e8:cc:75:3e:40:66:2c:5b:74:cc:0c:25:
                    9f:61:84:f0:86:90:ac:aa:80:6e:51:1f:a0:61:f2:
                    6f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:50:79:78:43:BA:7F:23:38:94:59:EE:EA:1B:F2:C0:94:77:D6:6B
            X509v3 Authority Key Identifier:
                keyid:B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:d5:6b:9d:e2:18:8d:b5:42:f3:2b:b2:cd:64:d7:b3:56:9d:
         36:0f:0d:c1:3f:b0:f6:9b:fe:8c:a1:3d:52:45:39:10:56:65:
         97:28:55:f8:9b:69:b8:58:60:bf:e3:df:df:f2:d5:e8:0f:eb:
         0e:5c:73:22:a1:8a:07:c6:28:f2:f2:00:a6:9d:16:dc:a0:8b:
         80:7e:e7:2c:44:a5:69:76:38:e2:23:99:7c:5d:36:7e:65:cc:
         26:33:80:03:3e:a6:8b:92:f3:81:9b:64:02:48:51:84:74:f5:
         e3:64:8e:3a:39:de:73:fd:78:54:d6:c2:c4:80:1b:eb:cd:27:
         7d:b5:bc:f8:2d:73:93:bc:11:72:3d:41:7e:28:fa:29:f7:0a:
         f1:9e:26:75:9a:ab:d1:7a:cf:cf:20:d8:03:5d:5e:b6:f8:f2:
         86:96:22:6c:bd:b2:58:42:40:84:47:22:fe:49:bb:a5:41:fa:
         bb:44:1e:16:71:8a:d3:76:11:a8:14:e0:1c:4c:0e:0c:1d:0b:
         69:00:d9:38:b3:80:e2:d2:cf:ac:77:ed:0f:f2:e1:dd:df:ed:
         96:f6:e2:ec:3d:b9:03:2f:21:d0:61:c3:c5:20:da:7c:9b:47:
         99:c8:ad:23:33:3b:e0:58:84:01:d7:9f:cd:5b:43:da:0c:a4:
         ec:1f:2e:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gkjEc4+qzkcGIqF83YVAnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZTg4MmY3MTcxYWY2ZGNkY2NjOWNkNzlmOThkZWM2NzU3
ZmUxODkwHhcNMjYwNTEzMDkwMTUyWhcNMjYwNTE0MDkwMTUyWjAzMTEwLwYDVQQD
EyhjYzUwNzk3ODQzYmE3ZjIzMzg5NDU5ZWVlYTFiZjJjMDk0NzdkNjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJaF21/q23VKE8dURqf+KdH0/DMQ
+JzWajVu0YN+oMzQ8VWewMIGoTH6/0MIwjrb6rQv/z5at9j5vRTqWACqB4WZKHu8
EXmWJl2Tid6fJZequEEGcYt4sAR16GYzJ6sWTEXuRJ49gWN+4jWbNGxM0u5h852y
xp2P8tqSnCtPI8U0jq27lsG0mrHweOZArrKIjR/w//V3YdFfGVlTZJU4LIJR6mrI
btp7aoWREUJFoOqKirrGDGmpeGjgN6zjxrTU5fFWOVto7YjOf0xEAhNIgi/fPyMO
wE+MXDoYGLbRVJvGJObozHU+QGYsW3TMDCWfYYTwhpCsqoBuUR+gYfJvswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMxQeXhDun8jOJRZ7uob8sCUd9ZrMB8GA1UdIwQY
MBaAFLTogvcXGvbc3Myc15+Y3sZ1f+GJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE9pQzl4Y2E5dHpjekp6WG41amV4blZfNFlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81ZjViYzgtZTVmMy00MjFkLTlmYTAt
ZmVmZThlMzQwMDZjLzEvdE9pQzl4Y2E5dHpjekp6WG41amV4blZfNFlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My81ZjViYzgtZTVmMy00MjFkLTlmYTAtZmVmZThlMzQwMDZj
LzEvdE9pQzl4Y2E5dHpjekp6WG41amV4blZfNFlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO9VrneIY
jbVC8yuyzWTXs1adNg8NwT+w9pv+jKE9UkU5EFZllyhV+JtpuFhgv+Pf3/LV6A/r
DlxzIqGKB8Yo8vIApp0W3KCLgH7nLESlaXY44iOZfF02fmXMJjOAAz6mi5LzgZtk
AkhRhHT142SOOjnec/14VNbCxIAb680nfbW8+C1zk7wRcj1Bfij6KfcK8Z4mdZqr
0XrPzyDYA11etvjyhpYibL2yWEJAhEci/km7pUH6u0QeFnGK03YRqBTgHEwODB0L
aQDZOLOA4tLPrHftD/Lh3d/tlvbi7D25Ay8h0GHDxSDafJtHmcitIzM74FiEAdef
zVtD2gyk7B8u+Q==
-----END CERTIFICATE-----
Generated at Wed May 13 19:48:56 2026 by rpki-client