Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
File:                     1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft (raw, json)
Hash identifier:          mwHB3ogEcWSYQmIpFBQVhBqT5sBkX+u+l+vbuh+tglM=
Subject key identifier:   9D:30:26:CC:75:DF:43:83:CB:E6:24:C3:1F:4E:A3:D4:E1:1A:E1:C7
Authority key identifier: FB:F4:00:E6:3C:B2:62:C2:00:0E:07:1C:E9:0A:A7:2E:F6:93:E6:A2
Certificate issuer:       /CN=fbf400e63cb262c2000e071ce90aa72ef693e6a2
Certificate serial:       019E1D22EE0A9E5ED2982D398A757D3B98E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
Manifest number:          1906
Signing time:             Tue 12 May 2026 17:01:28 +0000
Manifest this update:     Tue 12 May 2026 17:01:28 +0000
Manifest next update:     Wed 13 May 2026 17:01:28 +0000
Files and hashes:         1: 1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl (hash: QzcCqjCf4LXGfuvJnkMJayezhyp7Rf+i15cMv+3zwjo=)
                          2: Rgo2xEGDtwl1Aqv6lnZ3W9C4Qvk.roa (hash: odpOex+bLP44T2CZB4hEU633jHaa81Iak+Z1Bzzr7eM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:ee:0a:9e:5e:d2:98:2d:39:8a:75:7d:3b:98:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbf400e63cb262c2000e071ce90aa72ef693e6a2
        Validity
            Not Before: May 12 17:01:28 2026 GMT
            Not After : May 13 17:01:28 2026 GMT
        Subject: CN=9d3026cc75df4383cbe624c31f4ea3d4e11ae1c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5a:ce:88:fa:e7:70:39:04:b6:49:e0:3a:95:
                    94:79:cc:c0:c8:e2:79:a1:41:20:b9:3a:e3:6a:f5:
                    e2:65:b4:d9:8a:d0:6b:eb:93:e4:f9:40:97:5e:85:
                    fb:5a:b6:b7:77:f6:d3:07:bd:d4:ed:22:20:5c:a1:
                    ad:55:97:c1:84:63:0b:ce:4a:94:1b:56:62:55:70:
                    57:7f:f3:a0:61:9a:4a:1d:8f:89:b1:16:f8:2c:58:
                    cf:f9:5b:63:6f:14:d3:a3:2b:2a:ec:fa:49:81:dd:
                    0e:6f:13:ec:5c:2e:aa:79:e2:e3:4f:31:09:7d:9a:
                    74:0f:a2:a2:3c:43:4b:c6:13:6e:74:27:bb:c9:9a:
                    35:7a:1e:9a:ef:b3:c4:d0:72:ec:f1:88:00:b1:da:
                    29:ef:c1:5b:60:6f:c6:d9:04:2b:ba:fd:09:e9:87:
                    fe:1e:68:f4:26:86:9c:07:13:e1:80:48:93:a8:13:
                    b2:1b:37:6d:76:70:78:51:aa:4a:bf:4d:a0:ad:7a:
                    ed:2e:1a:59:26:c8:1b:d3:63:37:33:1b:74:bc:54:
                    cf:7b:09:19:6e:4f:18:24:9f:2b:7e:46:6a:55:1e:
                    e1:6a:17:7d:81:67:79:0f:75:1e:29:a9:a2:09:7e:
                    21:1e:ec:42:93:7c:76:46:5b:3f:12:6f:f6:6f:09:
                    b9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:30:26:CC:75:DF:43:83:CB:E6:24:C3:1F:4E:A3:D4:E1:1A:E1:C7
            X509v3 Authority Key Identifier:
                keyid:FB:F4:00:E6:3C:B2:62:C2:00:0E:07:1C:E9:0A:A7:2E:F6:93:E6:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:5b:83:70:d5:95:eb:55:73:17:d5:29:db:51:a3:a4:aa:89:
         14:8e:71:c9:5f:fc:fd:3d:f0:90:0f:c3:4f:26:a9:67:bc:bd:
         a6:e2:84:9d:fa:8c:be:77:45:ae:b6:1d:29:38:c2:43:78:f0:
         14:cf:ba:59:19:50:d6:32:79:34:c9:54:87:34:a6:bd:57:f6:
         49:ff:b4:0e:75:41:7c:6b:d5:5a:49:b4:93:06:95:a7:3b:e6:
         90:9c:c7:8c:35:5d:c1:2b:33:b3:9f:8e:4d:f0:1e:a0:8f:09:
         34:02:db:f9:a9:44:5b:47:8c:a5:05:75:76:43:ff:3d:80:10:
         73:48:2c:fa:59:48:3c:1e:2c:85:b2:72:9a:d5:08:1e:fb:92:
         61:a7:ca:52:b6:91:0f:ee:1e:eb:37:d0:3b:e8:ab:b1:d6:5f:
         42:13:96:42:e9:44:af:f9:8d:f7:27:79:89:97:f2:13:0a:84:
         03:07:2c:53:df:80:ce:09:c5:2a:87:74:21:c1:0d:f6:db:c6:
         c8:2c:b4:a1:91:21:b2:09:78:ff:62:62:e4:e4:6d:e6:b7:b6:
         08:8b:13:9e:cf:65:d6:a9:d8:ce:a2:c4:b6:70:12:55:b1:b4:
         91:06:ee:14:3a:dd:7f:13:5e:ad:27:5f:19:4f:9a:1b:c9:d7:
         3b:cc:40:42
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ4dIu4Knl7SmC05inV9O5jnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZjQwMGU2M2NiMjYyYzIwMDBlMDcxY2U5MGFhNzJlZjY5
M2U2YTIwHhcNMjYwNTEyMTcwMTI4WhcNMjYwNTEzMTcwMTI4WjAzMTEwLwYDVQQD
Eyg5ZDMwMjZjYzc1ZGY0MzgzY2JlNjI0YzMxZjRlYTNkNGUxMWFlMWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVrOiPrncDkEtkngOpWUeczAyOJ5
oUEguTrjavXiZbTZitBr65Pk+UCXXoX7Wra3d/bTB73U7SIgXKGtVZfBhGMLzkqU
G1ZiVXBXf/OgYZpKHY+JsRb4LFjP+VtjbxTToysq7PpJgd0ObxPsXC6qeeLjTzEJ
fZp0D6KiPENLxhNudCe7yZo1eh6a77PE0HLs8YgAsdop78FbYG/G2QQruv0J6Yf+
Hmj0JoacBxPhgEiTqBOyGzdtdnB4UapKv02grXrtLhpZJsgb02M3Mxt0vFTPewkZ
bk8YJJ8rfkZqVR7hahd9gWd5D3UeKamiCX4hHuxCk3x2Rls/Em/2bwm5MQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJ0wJsx130ODy+Ykwx9Oo9ThGuHHMB8GA1UdIwQY
MBaAFPv0AOY8smLCAA4HHOkKpy72k+aiMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1fUUE1anl5WXNJQURnY2M2UXFuTHZhVDVxSS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvOWIzZjZmLTk3NTQtNDU4Zi1iNWI0
LWY5NTg1NWYxMDc2My8xLzEtX1FBNWp5eVlzSUFEZ2NjNlFxbkx2YVQ1cUkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzU0LzliM2Y2Zi05NzU0LTQ1OGYtYjViNC1mOTU4NTVmMTA3
NjMvMS8xLV9RQTVqeXlZc0lBRGdjYzZRcW5MdmFUNXFJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVluD
cNWV61VzF9Up21GjpKqJFI5xyV/8/T3wkA/DTyapZ7y9puKEnfqMvndFrrYdKTjC
Q3jwFM+6WRlQ1jJ5NMlUhzSmvVf2Sf+0DnVBfGvVWkm0kwaVpzvmkJzHjDVdwSsz
s5+OTfAeoI8JNALb+alEW0eMpQV1dkP/PYAQc0gs+llIPB4shbJymtUIHvuSYafK
UraRD+4e6zfQO+irsdZfQhOWQulEr/mN9yd5iZfyEwqEAwcsU9+AzgnFKod0IcEN
9tvGyCy0oZEhsgl4/2Ji5ORt5re2CIsTns9l1qnYzqLEtnASVbG0kQbuFDrdfxNe
rSdfGU+aG8nXO8xAQg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:12:21 2026 by rpki-client