Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
File:                     hNt0eyiXF6BoTNasgjB6pnuy17s.mft (raw, json)
Hash identifier:          CmWTX8r1wSUIHfu+efXhUtGX0dwpfzf2fBrkR8AzJxI=
Subject key identifier:   AD:0C:F1:CA:BB:8D:FF:18:11:4C:EC:59:FA:8A:BF:6B:10:2E:EF:C8
Authority key identifier: 84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB
Certificate issuer:       /CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
Certificate serial:       019E2091F7C93A6C2468248AC9F30E3F552D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
Manifest number:          1648
Signing time:             Wed 13 May 2026 09:01:37 +0000
Manifest this update:     Wed 13 May 2026 09:01:37 +0000
Manifest next update:     Thu 14 May 2026 09:01:37 +0000
Files and hashes:         1: 1-3Gcx58fzra_v9eEZ6N_xRMnk-U.roa (hash: LxQsMlE6dccDgJVSFe4kQrNckGUI9bmtbjF5OIYdtrs=)
                          2: 4KN1agjGCetNojWRsDbUJbjhQKs.roa (hash: yTfVhH1Hf4jYfP2TiWx0oinRMtZ2QHu/x1BdH7OqRl0=)
                          3: hNt0eyiXF6BoTNasgjB6pnuy17s.crl (hash: 9cHcXk+cCNmrheygmDkbMPf0gVNVw/51AcW24ZWChh4=)
                          4: yyn2geOIU_--UUnG8pkuvnJsDpQ.roa (hash: bxmnlrGKd567WF+3ZEEy2gfmdqW2wGXYEodGeY8tXEU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:91:f7:c9:3a:6c:24:68:24:8a:c9:f3:0e:3f:55:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
        Validity
            Not Before: May 13 09:01:37 2026 GMT
            Not After : May 14 09:01:37 2026 GMT
        Subject: CN=ad0cf1cabb8dff18114cec59fa8abf6b102eefc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ac:1b:ff:6a:dc:36:80:f7:68:a6:fb:48:d5:
                    19:8a:7d:6f:aa:0d:6a:05:5a:82:7c:43:10:58:4a:
                    6a:40:b0:3d:bd:98:68:b5:9b:75:98:23:1b:9c:02:
                    3f:c2:16:d5:0d:c9:eb:50:64:9c:c8:5b:bb:c1:2f:
                    c3:3f:e6:f1:4f:8c:df:0b:1c:ed:27:71:c1:54:67:
                    c4:ed:6c:1d:49:5b:ac:ef:73:6e:d3:12:56:f6:9c:
                    c5:92:20:d5:8b:b0:f7:05:ff:26:38:d9:1b:68:b6:
                    4d:26:1d:11:ab:5b:d8:ed:09:79:88:89:1b:be:af:
                    ad:4e:66:11:15:96:fe:f6:1a:83:81:e7:f1:50:57:
                    f8:08:37:de:93:40:db:27:5b:1e:65:2d:2f:c6:29:
                    d8:d7:eb:b7:d3:25:ea:f0:7f:b3:af:29:a2:72:9c:
                    be:e9:90:c3:66:8e:37:18:46:23:73:13:f2:e1:a4:
                    1c:0d:e0:de:c0:83:ec:b3:17:40:ae:a0:e1:fc:4a:
                    71:80:a8:c0:d2:8b:37:ca:bc:4b:94:1e:1b:32:d2:
                    7d:04:ad:cf:c1:18:18:7e:5f:c5:b0:76:5f:72:75:
                    d6:86:24:47:79:a7:d0:5f:73:93:ee:4e:c4:02:ce:
                    d5:c7:e1:bb:1a:11:50:7f:12:e0:bb:6a:75:4f:dc:
                    63:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:0C:F1:CA:BB:8D:FF:18:11:4C:EC:59:FA:8A:BF:6B:10:2E:EF:C8
            X509v3 Authority Key Identifier:
                keyid:84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:ee:26:da:b7:4f:1c:d8:e3:f4:5c:2a:f0:7a:bb:f0:d5:fb:
         be:3b:14:a6:45:27:22:ee:04:b9:d8:23:7f:51:fc:5d:42:22:
         ea:a4:ca:2e:ea:27:c6:96:5f:6f:13:03:dc:47:d9:7d:72:b3:
         b7:5c:0c:a7:12:bb:42:9b:8b:2c:7b:4c:13:5c:87:0b:ae:a5:
         89:70:0f:df:a3:0a:af:75:17:41:3a:18:cc:81:1e:3f:2b:ef:
         8f:f1:63:c1:fc:78:c0:18:44:ad:15:05:57:c0:ae:02:61:d7:
         ea:68:6e:ec:ea:4e:45:ac:ad:fa:5f:a2:89:ee:01:da:44:ab:
         96:f8:c4:56:34:dc:f8:51:ff:49:03:76:80:70:c2:3b:b9:2e:
         b1:2b:eb:98:98:2f:70:90:aa:d5:ff:6f:45:a5:d1:e1:da:33:
         27:cb:bb:00:a6:80:4d:8c:ce:9d:1d:c6:5f:c5:20:a3:0d:d4:
         fb:48:2f:c9:e1:4f:77:1e:b2:fa:b6:cb:49:9c:84:fd:a4:e8:
         86:14:11:56:6b:e4:6f:7b:8a:de:a2:e6:c1:12:a7:be:e4:e1:
         39:de:26:81:5a:03:59:ec:a8:18:a6:bc:15:0e:19:e8:ec:47:
         31:de:bf:39:a2:ec:4b:02:e4:52:e8:64:f5:34:1a:51:bc:e2:
         e9:5d:38:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:39:43 2026 by rpki-client