Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
File:                     SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft (raw, json)
Hash identifier:          nR+K6CXypDVnvDvdZ2OdPfshUx1NewM7nRi/07FqDFU=
Subject key identifier:   57:B7:EA:05:87:53:66:CF:12:84:A9:B1:D6:27:B8:15:67:7A:D7:52
Authority key identifier: 49:0D:B9:99:CA:4C:E2:87:C5:C9:2A:B1:67:A5:00:90:22:59:BB:05
Certificate issuer:       /CN=490db999ca4ce287c5c92ab167a500902259bb05
Certificate serial:       019E216D57D155A280D52E2585557BFA5639
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
Manifest number:          190A
Signing time:             Wed 13 May 2026 13:01:14 +0000
Manifest this update:     Wed 13 May 2026 13:01:14 +0000
Manifest next update:     Thu 14 May 2026 13:01:14 +0000
Files and hashes:         1: SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl (hash: iok0VHoCaF9QIX3cBpKn5qGS6hK2o8cTZwviegdpXZY=)
                          2: hAZrKewTVxZT3GF5DqzKsU9bNKo.roa (hash: fsGaTWUHmLGtuoOa159GIKQVUnBG8uk4RWTcKenk10M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:21:6d:57:d1:55:a2:80:d5:2e:25:85:55:7b:fa:56:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490db999ca4ce287c5c92ab167a500902259bb05
        Validity
            Not Before: May 13 13:01:14 2026 GMT
            Not After : May 14 13:01:14 2026 GMT
        Subject: CN=57b7ea05875366cf1284a9b1d627b815677ad752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b8:02:88:ae:b9:77:0a:35:81:68:dc:47:be:
                    47:5f:dd:cc:91:66:74:8f:57:c1:e9:ba:89:86:0b:
                    a7:28:ef:15:87:86:33:2d:a0:bf:53:66:88:75:60:
                    a7:2d:9a:91:c8:93:02:85:03:45:25:68:68:75:e6:
                    57:46:12:3d:83:72:5d:0a:44:2e:f9:f3:46:b9:32:
                    ba:db:36:11:cd:7b:14:ea:3f:13:63:35:0d:2d:0d:
                    25:95:b9:07:92:7d:5a:1f:40:ca:30:24:e5:61:b7:
                    35:b1:21:1d:2c:a7:f4:f4:25:79:79:af:2c:b8:98:
                    67:42:bf:cd:f7:5b:22:aa:fe:df:e8:4e:d7:87:f7:
                    50:cb:11:1b:e0:2c:22:90:cd:25:df:6f:ab:86:73:
                    37:b2:10:14:bb:d5:08:b6:48:0d:85:c3:1a:c7:60:
                    12:c4:bc:f0:d2:03:8a:60:f9:eb:6d:e2:68:e0:0d:
                    5b:93:8b:26:57:e3:c9:0e:88:54:72:11:ba:d7:a9:
                    4d:b4:4e:2d:9e:a1:ce:0a:76:96:ca:d4:c4:98:58:
                    03:c9:7c:05:75:58:44:35:ef:41:e1:2d:93:92:01:
                    6c:0f:ff:9a:60:0d:57:6a:d8:c1:b5:d8:46:b6:af:
                    5d:d0:6d:39:86:0f:ec:af:52:30:d3:fa:ca:f2:40:
                    ff:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B7:EA:05:87:53:66:CF:12:84:A9:B1:D6:27:B8:15:67:7A:D7:52
            X509v3 Authority Key Identifier:
                keyid:49:0D:B9:99:CA:4C:E2:87:C5:C9:2A:B1:67:A5:00:90:22:59:BB:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:f0:62:44:7e:92:5a:d5:d3:d6:cd:b4:8e:eb:25:9e:4a:01:
         0e:49:68:07:d7:cf:5a:99:b3:79:5b:8d:79:ec:a9:d5:87:11:
         76:5f:5b:3d:35:18:27:c4:62:93:9f:f9:ab:09:03:26:b0:0a:
         ec:1d:69:39:01:98:d9:5e:80:03:f7:6c:41:23:f2:84:d5:8f:
         81:9d:0b:83:0d:5f:bb:09:ac:d9:ef:4e:30:ed:9d:1f:6c:f1:
         bd:2a:55:dd:eb:c1:e7:26:35:7d:8e:40:b7:71:dc:3c:e5:96:
         45:a7:70:d0:6f:86:bc:29:8f:9b:9f:97:5d:4c:58:c8:e7:cd:
         3e:da:a8:d5:0a:bf:0b:e5:45:3e:c5:1f:d2:2c:90:6d:c1:67:
         f7:09:2f:b6:c0:89:57:49:fd:96:bf:4c:43:fb:88:ce:1a:a0:
         ae:a1:3c:c4:13:36:a2:88:54:d1:7d:9a:9e:09:ea:0e:ff:83:
         6a:7c:ba:d6:e2:27:4c:37:08:f9:56:4b:4b:47:ec:2e:84:fb:
         b6:55:8d:54:3e:ad:a5:17:a1:fe:41:c5:36:ec:84:ab:18:c0:
         9b:98:07:3c:be:db:c4:b0:20:67:23:24:d6:27:6e:68:11:e9:
         cf:91:8c:37:1d:91:d6:2b:e7:7b:60:1e:89:94:12:ec:94:21:
         38:48:52:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:12:30 2026 by rpki-client