Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
File:                     lV_PknmKnbswq9K5-im_qIBCIPM.mft (raw, json)
Hash identifier:          yfNBQigv9ZHXiyUBC1N8H8G7X8cbN48d1H2bI90zFbQ=
Subject key identifier:   5C:F3:A4:1C:54:FD:5B:95:56:58:98:16:00:10:BD:66:E2:88:89:D7
Authority key identifier: 95:5F:CF:92:79:8A:9D:BB:30:AB:D2:B9:FA:29:BF:A8:80:42:20:F3
Certificate issuer:       /CN=955fcf92798a9dbb30abd2b9fa29bfa8804220f3
Certificate serial:       019E1ED9E8D11B3D7CB8A6D7925FF7DE0D31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
Manifest number:          1907
Signing time:             Wed 13 May 2026 01:00:57 +0000
Manifest this update:     Wed 13 May 2026 01:00:57 +0000
Manifest next update:     Thu 14 May 2026 01:00:57 +0000
Files and hashes:         1: EV5B5CDx-yO9QhQKgIOGKQuwu8Y.roa (hash: BneDEJ5QoDJkAJJC30tOaDJaCQOMhWb/wOIFibxQ6Ms=)
                          2: L8bZH6SZP0Do8W2usy05gMWTJfA.roa (hash: GqrUrTcZzLpiG3dkPkOQYKLJl/nz6um2HMjJRvXU0cM=)
                          3: N8RSRMP8UAQKEFAGsHIuhNlTork.roa (hash: ApP8TEU/5MswzkOImjIl/nU5p8uqAw/j2QPZ3Oxhfdg=)
                          4: lV_PknmKnbswq9K5-im_qIBCIPM.crl (hash: PYcypXlvQpEi5Yhb1AswixAWYQVBO24HIt9WhpMT1ic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:d9:e8:d1:1b:3d:7c:b8:a6:d7:92:5f:f7:de:0d:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=955fcf92798a9dbb30abd2b9fa29bfa8804220f3
        Validity
            Not Before: May 13 01:00:57 2026 GMT
            Not After : May 14 01:00:57 2026 GMT
        Subject: CN=5cf3a41c54fd5b95565898160010bd66e28889d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:16:e6:cf:46:84:b3:a0:f5:24:91:01:3b:e5:
                    6f:1c:5e:db:45:f9:24:d1:eb:04:07:9a:bd:1e:0a:
                    dc:2d:e2:e9:78:9d:76:fc:8c:14:b9:7e:7b:4d:68:
                    2c:2f:5e:ca:6f:c9:e3:f7:b2:c9:a0:5e:29:ac:d0:
                    b0:4e:ed:2c:52:53:b4:ae:95:df:bd:69:17:19:d2:
                    ad:4d:c0:67:67:09:e8:49:92:2a:84:40:80:50:69:
                    dd:17:d2:8c:5a:36:d2:74:fc:09:56:4b:fd:e5:78:
                    c9:4e:9d:9c:29:3e:92:69:c2:b4:13:92:d2:1c:a7:
                    09:54:28:80:0c:7d:e4:4c:a8:ac:5e:4d:d3:d6:50:
                    b9:d7:76:e7:c3:16:cf:5a:38:cc:a4:64:56:a8:c0:
                    f6:31:6d:14:4b:20:5a:ef:ba:e7:0a:a6:73:62:68:
                    10:69:7c:7b:9d:49:a1:f5:4d:fa:2f:e9:c8:63:ff:
                    3e:3f:ae:8e:03:c7:ca:79:57:8b:00:b5:49:40:6f:
                    9a:58:85:b9:aa:b6:47:a1:ab:cd:df:ac:90:6f:14:
                    b6:35:22:f8:11:ac:29:80:bd:1e:8c:3e:7e:22:dc:
                    79:0f:df:7c:c6:1d:86:97:34:f2:7b:c7:f4:9d:a4:
                    ef:3f:6c:23:d5:d7:25:80:79:2a:28:ec:65:9f:4f:
                    aa:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F3:A4:1C:54:FD:5B:95:56:58:98:16:00:10:BD:66:E2:88:89:D7
            X509v3 Authority Key Identifier:
                keyid:95:5F:CF:92:79:8A:9D:BB:30:AB:D2:B9:FA:29:BF:A8:80:42:20:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:79:06:8b:83:f6:0c:3b:c3:d7:31:7d:80:dc:2f:e3:15:da:
         d0:cd:4e:3c:b2:68:c1:e8:8a:3e:d3:c6:3a:21:1e:a0:ae:40:
         4e:65:02:19:ab:48:b2:12:77:6f:d7:37:00:26:00:c5:ba:71:
         90:f5:0b:b6:26:25:55:26:51:0d:bd:f2:8f:d8:c9:69:f8:fe:
         24:f4:5b:15:54:74:f5:28:32:2a:13:63:79:fb:a1:63:fe:ae:
         bb:d4:20:87:b4:bf:c8:e9:e6:06:a6:94:8a:4a:07:d3:0b:6e:
         ef:f6:6f:d3:89:41:62:9c:3b:ac:f7:43:31:c5:40:1d:84:3b:
         09:20:a6:91:d3:7e:2a:f3:ea:66:c5:e6:97:e7:4f:22:fa:eb:
         bb:36:4c:36:8e:9f:71:4d:43:71:2e:ec:95:8b:9c:83:ba:3e:
         60:4a:26:0a:fc:e9:64:4f:ff:56:8f:82:6b:59:19:51:f8:fc:
         17:d0:fe:22:3e:4e:8a:04:d1:39:fa:b2:23:f1:5f:a1:bb:18:
         2c:45:f7:6c:1a:03:c1:3a:32:f7:1f:65:fa:88:a9:eb:cd:83:
         b3:6e:bf:a4:0c:96:65:8a:29:19:73:a9:84:43:fb:13:d7:6d:
         ef:cd:8e:52:9e:47:dd:12:d1:eb:b2:16:35:70:22:93:87:a2:
         55:ed:b3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:25:28 2026 by rpki-client