Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
File:                     4COOIod_cwOWQAfOPjQG9frZSWI.mft (raw, json)
Hash identifier:          y4hM6B9eHRSvEes6x7V9zvUIQ7kTTzSNCq0So1RO+sQ=
Subject key identifier:   51:20:87:23:BE:23:77:8B:80:F1:22:6E:D4:8A:D9:DA:1F:98:43:69
Authority key identifier: E0:23:8E:22:87:7F:73:03:96:40:07:CE:3E:34:06:F5:FA:D9:49:62
Certificate issuer:       /CN=e0238e22877f7303964007ce3e3406f5fad94962
Certificate serial:       019E1E35B39315D3655E2614381192EABABC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
Manifest number:          1908
Signing time:             Tue 12 May 2026 22:01:36 +0000
Manifest this update:     Tue 12 May 2026 22:01:36 +0000
Manifest next update:     Wed 13 May 2026 22:01:36 +0000
Files and hashes:         1: 4COOIod_cwOWQAfOPjQG9frZSWI.crl (hash: PkrA0FyORrldx30hWSq7f5prT+V0QdHYPDmQwcSiE38=)
                          2: MzwLUabPMVpWUbhvtlyD-QzTVcQ.roa (hash: X0nH2HeW8oMQ0R4XVjts1kBv71dyXZYfSTlTWrarM3g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:b3:93:15:d3:65:5e:26:14:38:11:92:ea:ba:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0238e22877f7303964007ce3e3406f5fad94962
        Validity
            Not Before: May 12 22:01:36 2026 GMT
            Not After : May 13 22:01:36 2026 GMT
        Subject: CN=51208723be23778b80f1226ed48ad9da1f984369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fe:cf:9a:88:d3:ea:cf:60:24:70:8c:44:40:
                    be:8e:53:cd:7b:ee:77:a0:d2:09:d4:de:40:06:e2:
                    b8:ba:fe:b9:7b:42:84:d8:17:e0:2a:93:c2:3d:84:
                    91:3b:e5:c0:18:86:a9:a6:77:f9:cd:ed:d4:1d:f7:
                    c4:c0:5a:c0:ff:3c:14:fe:57:a6:ff:67:b1:03:e6:
                    21:91:bf:f9:fc:52:53:04:b2:71:26:45:bf:cf:ac:
                    16:f2:25:85:f2:4a:e3:b3:36:b8:39:7a:44:87:70:
                    8f:d3:72:d0:5d:ac:4e:c3:e9:c8:ed:94:a3:fe:7d:
                    e0:ab:d2:c5:6a:61:c0:62:46:f0:e9:1a:46:7d:29:
                    1e:0e:33:e8:cc:7c:40:d5:d9:d1:ba:69:d8:63:07:
                    2a:a0:e7:49:fd:64:58:45:78:c9:c2:d5:58:e8:be:
                    dd:4a:66:70:ee:d3:3e:3b:31:4e:f6:45:62:cc:60:
                    8f:95:68:9a:56:52:00:cb:08:da:68:a9:91:35:e4:
                    6f:2a:a9:78:5e:bb:32:ea:df:34:f5:d3:28:63:ab:
                    81:51:61:dd:a0:5a:c0:0a:be:4d:2f:02:57:4d:07:
                    fd:dd:b6:1e:90:60:29:66:8e:91:98:90:e2:ae:3f:
                    e6:b0:1c:b1:c2:0c:79:40:36:af:c9:99:6a:5b:fb:
                    1e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:20:87:23:BE:23:77:8B:80:F1:22:6E:D4:8A:D9:DA:1F:98:43:69
            X509v3 Authority Key Identifier:
                keyid:E0:23:8E:22:87:7F:73:03:96:40:07:CE:3E:34:06:F5:FA:D9:49:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:a4:44:9b:d6:43:b9:21:71:69:44:ac:07:3f:dc:0a:98:d4:
         f6:9c:9f:a9:ad:fa:e3:c1:12:88:3a:0b:43:48:38:5b:f3:46:
         1f:03:34:2c:b5:fd:71:66:7a:1a:4b:d6:ee:70:70:20:99:71:
         de:39:0e:33:a6:98:ee:ce:a6:e7:fe:6d:9e:4e:17:ec:65:9f:
         2a:2c:8f:8f:f2:6c:fa:f6:07:b1:37:8c:29:c3:2a:3a:03:56:
         db:62:33:29:4e:fc:38:63:02:94:c9:40:64:57:5b:27:b5:75:
         e8:20:77:e8:b6:bb:3d:e0:7e:48:fe:07:d8:26:49:65:9e:f9:
         93:ba:04:f0:02:a7:fe:14:ab:12:6d:9e:0f:d1:b6:34:67:84:
         d2:6d:76:b0:97:34:dc:1c:cb:f3:22:4e:73:ef:67:b2:4d:83:
         7b:32:0b:df:b6:58:09:74:d5:fe:9c:46:db:18:4d:19:3e:47:
         8d:81:96:3f:7e:43:97:36:2f:d1:6a:80:f7:11:56:ac:4f:aa:
         8f:d8:65:41:b5:fb:fe:c0:28:e5:d4:16:9e:5d:c9:f0:54:b2:
         1b:18:9d:4a:c6:a9:2f:63:b2:7c:a7:19:eb:50:2d:b5:2f:4b:
         81:f7:07:fe:22:7c:5d:b7:95:de:42:86:bc:61:9c:5f:c4:68:
         7a:07:b8:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eNbOTFdNlXiYUOBGS6rq8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMjM4ZTIyODc3ZjczMDM5NjQwMDdjZTNlMzQwNmY1ZmFk
OTQ5NjIwHhcNMjYwNTEyMjIwMTM2WhcNMjYwNTEzMjIwMTM2WjAzMTEwLwYDVQQD
Eyg1MTIwODcyM2JlMjM3NzhiODBmMTIyNmVkNDhhZDlkYTFmOTg0MzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnf7PmojT6s9gJHCMREC+jlPNe+53
oNIJ1N5ABuK4uv65e0KE2BfgKpPCPYSRO+XAGIappnf5ze3UHffEwFrA/zwU/lem
/2exA+Yhkb/5/FJTBLJxJkW/z6wW8iWF8krjsza4OXpEh3CP03LQXaxOw+nI7ZSj
/n3gq9LFamHAYkbw6RpGfSkeDjPozHxA1dnRumnYYwcqoOdJ/WRYRXjJwtVY6L7d
SmZw7tM+OzFO9kVizGCPlWiaVlIAywjaaKmRNeRvKql4Xrsy6t809dMoY6uBUWHd
oFrACr5NLwJXTQf93bYekGApZo6RmJDirj/msByxwgx5QDavyZlqW/seMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFEghyO+I3eLgPEibtSK2dofmENpMB8GA1UdIwQY
MBaAFOAjjiKHf3MDlkAHzj40BvX62UliMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNENPT0lvZF9jd09XUUFmT1BqUUc5ZnJaU1dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9kYTIyNzYtNmRiZi00MjJlLTllYmIt
NTYxMTc1ZjA0ZDhlLzEvNENPT0lvZF9jd09XUUFmT1BqUUc5ZnJaU1dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9kYTIyNzYtNmRiZi00MjJlLTllYmItNTYxMTc1ZjA0ZDhl
LzEvNENPT0lvZF9jd09XUUFmT1BqUUc5ZnJaU1dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMqREm9ZD
uSFxaUSsBz/cCpjU9pyfqa3648ESiDoLQ0g4W/NGHwM0LLX9cWZ6GkvW7nBwIJlx
3jkOM6aY7s6m5/5tnk4X7GWfKiyPj/Js+vYHsTeMKcMqOgNW22IzKU78OGMClMlA
ZFdbJ7V16CB36La7PeB+SP4H2CZJZZ75k7oE8AKn/hSrEm2eD9G2NGeE0m12sJc0
3BzL8yJOc+9nsk2DezIL37ZYCXTV/pxG2xhNGT5HjYGWP35DlzYv0WqA9xFWrE+q
j9hlQbX7/sAo5dQWnl3J8FSyGxidSsapL2OyfKcZ61AttS9LgfcH/iJ8XbeV3kKG
vGGcX8Roege4Iw==
-----END CERTIFICATE-----
Generated at Wed May 13 00:23:47 2026 by rpki-client