Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft
File:                     96oDm4hrImV4vbakJ4G_WQRLsTg.mft (raw, json)
Hash identifier:          XhnNIo3R7PqufoPpPOi1U/l1v+zCW5857KmnnX5H0O8=
Subject key identifier:   C2:F0:DF:D7:83:9F:13:D4:46:98:45:57:A8:ED:64:5E:B6:12:D1:DE
Authority key identifier: F7:AA:03:9B:88:6B:22:65:78:BD:B6:A4:27:81:BF:59:04:4B:B1:38
Certificate issuer:       /CN=f7aa039b886b226578bdb6a42781bf59044bb138
Certificate serial:       019E1C47A806133C2C6B254EAE18B65146CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft
Manifest number:          190B
Signing time:             Tue 12 May 2026 13:01:58 +0000
Manifest this update:     Tue 12 May 2026 13:01:58 +0000
Manifest next update:     Wed 13 May 2026 13:01:58 +0000
Files and hashes:         1: 96oDm4hrImV4vbakJ4G_WQRLsTg.crl (hash: DU7KWFP1QZi/0WNYRnCbKrS5qDSMNrslwOHFLJtD4G0=)
                          2: AdZDptogFPfZkzR5C2w7ewUy5fM.roa (hash: eY6m5Pfp09t+29CrdJcppfTJAkMyMsubBMzfDZuh9Pg=)
                          3: Mhow_zubVnvAcwQbBcXt37SkVbo.roa (hash: 6hC28liE87/PAEstEfDeR9v3wr68y7o5n3aUzo7i9jo=)
                          4: lyKU2cRz1rwVy67EiMdpJEVU-uw.roa (hash: MyEdGCpP2vsnLyoMOlKjt9pc63D/h3XJBUfmhnb515g=)
                          5: qS5aITzh8bm2lSNZ9w-1v_OwEkM.roa (hash: nyRJgnJF5E43/9qDPBbeFHXa4kSfjJ0ENxyk0mTysYQ=)
                          6: uBEokvW7aAgryoMWD6Cv0elcFmo.roa (hash: H/a3hMppgWLont3KdCAnRpO2zISV9Otu71OhQuyZUU4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:47:a8:06:13:3c:2c:6b:25:4e:ae:18:b6:51:46:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7aa039b886b226578bdb6a42781bf59044bb138
        Validity
            Not Before: May 12 13:01:58 2026 GMT
            Not After : May 13 13:01:58 2026 GMT
        Subject: CN=c2f0dfd7839f13d446984557a8ed645eb612d1de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5c:1a:f9:b9:24:5c:fd:8b:d1:6a:8a:75:e3:
                    0a:fe:38:21:e0:33:8a:11:f4:1e:14:0f:aa:a7:0b:
                    0a:ab:db:8a:d9:8d:1e:aa:cf:34:55:f8:c3:5c:00:
                    07:65:90:d1:cf:e3:49:64:83:8b:7f:c8:4b:4a:2b:
                    5f:03:6b:09:0f:4d:6f:98:f6:96:dc:a2:62:d0:8a:
                    64:34:1c:ce:88:33:6b:d0:b8:a3:70:e9:2b:84:cb:
                    d7:87:9b:c1:5e:51:81:92:1a:9e:59:27:f3:57:53:
                    13:56:3e:b2:d7:d9:37:88:4f:e2:0a:34:de:65:73:
                    8a:c0:fd:67:06:44:78:20:a3:93:99:82:9b:21:be:
                    89:09:df:80:96:cf:98:e3:50:ba:db:57:df:9f:93:
                    a4:ee:84:95:1e:11:0c:44:6e:45:f9:c4:b5:8d:a7:
                    59:0e:79:fe:85:f8:63:d5:9a:f8:b4:12:8e:f7:c1:
                    3d:a2:2e:f6:45:d9:f1:60:e3:7c:be:2b:5b:f6:e7:
                    d2:39:66:f8:f2:68:2d:32:bd:82:dc:8e:24:17:17:
                    35:fc:d0:e6:87:6d:b3:0a:1d:ab:d4:40:b4:e3:15:
                    33:b6:4c:79:27:82:ff:b0:2d:25:e7:c9:54:1f:1b:
                    a0:15:d7:d6:34:12:2c:a6:f3:95:1e:c3:4e:36:2f:
                    c1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F0:DF:D7:83:9F:13:D4:46:98:45:57:A8:ED:64:5E:B6:12:D1:DE
            X509v3 Authority Key Identifier:
                keyid:F7:AA:03:9B:88:6B:22:65:78:BD:B6:A4:27:81:BF:59:04:4B:B1:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:ce:82:e1:13:4b:d5:4e:30:97:b9:7b:4b:98:81:d4:4f:78:
         9e:ca:34:e7:5b:4f:87:35:63:fb:75:43:b0:11:bf:ca:36:7d:
         55:91:83:75:be:96:a7:4c:3c:c4:44:24:d0:ff:fb:cb:2a:9f:
         8a:38:41:b4:88:6b:26:43:34:56:e1:86:e9:bd:f7:be:cb:50:
         8a:98:be:00:b7:54:c5:d0:88:40:f7:ff:e9:2d:05:0b:a6:de:
         87:ca:1a:55:d6:cf:57:8b:18:fe:ea:1f:d0:7b:74:99:a3:cd:
         94:9f:cf:76:c0:a7:13:11:bd:4a:0f:ba:9e:5e:ce:55:63:ea:
         9e:ff:3e:71:89:53:4b:70:8b:ce:7c:51:8a:32:4e:82:e6:1e:
         55:3d:37:7c:7e:c4:f4:ca:2a:ed:87:9f:15:bb:21:2b:f5:f1:
         25:58:41:b9:65:0a:f5:3f:1c:98:46:5b:5c:4c:c5:a9:e7:92:
         73:1f:09:d7:d5:8a:fd:c4:43:8a:e9:79:70:fa:30:8d:8e:75:
         71:94:c8:c0:bb:1a:f1:30:9b:a2:fb:2c:40:d5:1a:4d:6c:74:
         09:75:74:c6:34:f6:ac:41:3f:41:2c:4a:d4:d3:0f:64:5c:30:
         ce:02:f0:eb:19:04:74:b8:49:7a:1e:29:e4:af:45:13:23:00:
         fc:b6:73:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:54:56 2026 by rpki-client