Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
File:                     1PvHTNH4egvxbEgvYgHJueskTqI.mft (raw, json)
Hash identifier:          petV7CJfcApe+Mj4GzxVDbUYFYR2R6v+zedrcxjgMMs=
Subject key identifier:   7A:E0:BD:AD:A3:95:26:56:80:13:B2:14:77:7A:01:D7:B2:DB:13:4F
Authority key identifier: D4:FB:C7:4C:D1:F8:7A:0B:F1:6C:48:2F:62:01:C9:B9:EB:24:4E:A2
Certificate issuer:       /CN=d4fbc74cd1f87a0bf16c482f6201c9b9eb244ea2
Certificate serial:       019E205A757FD2A1C04D726AF9D93F9CA189
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
Manifest number:          1909
Signing time:             Wed 13 May 2026 08:00:59 +0000
Manifest this update:     Wed 13 May 2026 08:00:59 +0000
Manifest next update:     Thu 14 May 2026 08:00:59 +0000
Files and hashes:         1: 1PvHTNH4egvxbEgvYgHJueskTqI.crl (hash: I5wnNDjT6+EwsovyoLzqntmGy7cBZBNv/GURpBnPmWs=)
                          2: R3ml3p2UCbj2WZwYh-kGTkhVCeI.roa (hash: 61bHqaM6yloEoaMB3RQ50xunau9HQvm40J9/cQnFMg0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:5a:75:7f:d2:a1:c0:4d:72:6a:f9:d9:3f:9c:a1:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4fbc74cd1f87a0bf16c482f6201c9b9eb244ea2
        Validity
            Not Before: May 13 08:00:59 2026 GMT
            Not After : May 14 08:00:59 2026 GMT
        Subject: CN=7ae0bdada39526568013b214777a01d7b2db134f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d8:df:a1:0d:13:50:c5:eb:0c:9b:37:27:3b:
                    b3:2b:c8:46:0d:46:70:78:dc:33:7c:3f:e9:51:cd:
                    36:ad:ee:05:e4:b4:c0:a3:8b:72:b3:88:2e:37:dc:
                    58:c1:ea:0f:5d:2f:12:d0:61:ac:13:72:81:12:30:
                    4d:1e:f5:17:4e:28:a7:86:9a:eb:70:10:e5:5e:f3:
                    c8:27:e6:d0:29:53:af:c7:e0:79:60:63:53:82:5e:
                    58:56:0d:9d:4e:07:c7:41:d8:87:62:78:ff:4a:59:
                    5c:f0:96:87:33:3b:11:45:c2:8a:09:d4:28:ea:e1:
                    35:17:90:aa:c4:30:c2:2b:f3:09:3a:69:05:1b:fb:
                    6c:48:60:45:fa:23:e2:71:33:f0:9e:02:e6:38:04:
                    cf:3c:24:f7:20:0b:9c:66:0c:e1:4d:2e:f3:13:5c:
                    c1:db:a8:14:72:43:5c:61:bd:13:bf:be:56:57:f2:
                    89:1f:43:76:59:84:f2:bd:7a:49:77:0d:b0:c3:06:
                    95:bd:23:21:47:dc:ea:39:fb:43:a3:a0:9f:58:0b:
                    f4:dc:48:47:8e:91:41:31:ed:4b:f1:4b:ee:1b:be:
                    1b:be:4c:56:33:07:e3:c1:7a:60:6b:dd:18:42:3a:
                    6a:14:87:39:00:3b:39:7c:50:1d:51:ec:61:e0:09:
                    40:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E0:BD:AD:A3:95:26:56:80:13:B2:14:77:7A:01:D7:B2:DB:13:4F
            X509v3 Authority Key Identifier:
                keyid:D4:FB:C7:4C:D1:F8:7A:0B:F1:6C:48:2F:62:01:C9:B9:EB:24:4E:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:10:1c:8a:25:95:b7:c9:22:0e:d2:af:d9:97:6e:ab:e5:98:
         a4:3d:77:b7:0f:b3:d8:36:34:dd:ce:59:91:68:75:71:59:14:
         27:84:ce:e6:88:a7:5b:5e:a9:73:ef:16:81:ca:81:8f:34:55:
         b5:60:8e:68:f2:e9:5b:66:80:59:50:2a:99:4d:72:66:c1:19:
         79:70:01:e5:87:4a:f4:a2:61:67:06:d7:44:14:2a:ac:81:99:
         a7:d0:e4:78:0d:89:5e:08:cd:5b:a7:78:e5:59:4f:cd:71:af:
         d2:66:90:5e:9f:1d:36:46:03:48:38:71:de:eb:c3:5c:30:06:
         50:ed:ec:ff:d7:c4:a8:05:d0:74:ed:9a:05:21:77:5d:2c:b5:
         19:b1:93:e1:24:42:c8:76:61:a6:45:f0:8d:94:aa:0c:10:eb:
         38:6a:88:e6:a9:ce:84:d2:e8:85:27:c1:57:4a:f4:8c:e4:6d:
         ea:45:9c:65:c6:dd:5e:4c:40:42:78:31:a1:9c:30:4a:69:b6:
         c8:8d:6b:27:62:f3:0e:69:c6:2b:c9:7b:85:ea:11:9e:4d:6a:
         db:63:e6:9d:0c:ff:b1:1d:7e:85:dc:6f:d6:6b:be:6d:cf:23:
         76:4d:ed:c9:65:04:99:62:6a:f4:b5:82:1f:84:42:79:1e:48:
         1f:de:6a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:55:39 2026 by rpki-client