Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
File:                     F1lDaGkInNnH5tAgKPJKL-SbhtU.mft (raw, json)
Hash identifier:          sVzuRoQ2IW7F+GWko2n4ESCuhHPbjsBgCRZUA79NEE4=
Subject key identifier:   B9:5A:3E:79:BA:AB:FD:17:BA:8E:BA:9E:8D:2F:A7:30:35:03:1A:C2
Authority key identifier: 17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5
Certificate issuer:       /CN=1759436869089cd9c7e6d02028f24a2fe49b86d5
Certificate serial:       019E1D59DF548EE8DB7CF2109970AD651A20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
Manifest number:          1914
Signing time:             Tue 12 May 2026 18:01:29 +0000
Manifest this update:     Tue 12 May 2026 18:01:29 +0000
Manifest next update:     Wed 13 May 2026 18:01:29 +0000
Files and hashes:         1: 7QjRRYA7jcCFNync-7ZqAYQ9Lvk.roa (hash: Ww9Vf4lv8aoiNND6Ah1rgZbAtQ03hE7wpG+7oWtfpX4=)
                          2: F1lDaGkInNnH5tAgKPJKL-SbhtU.crl (hash: +fXPhPCnf+dbWL7tYj+rKKN0r8e3PRBjcgn9xHCFQJM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 18:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:df:54:8e:e8:db:7c:f2:10:99:70:ad:65:1a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1759436869089cd9c7e6d02028f24a2fe49b86d5
        Validity
            Not Before: May 12 18:01:29 2026 GMT
            Not After : May 13 18:01:29 2026 GMT
        Subject: CN=b95a3e79baabfd17ba8eba9e8d2fa73035031ac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:79:7e:95:f3:c7:90:d2:56:b9:97:0b:7e:d3:
                    6f:dd:88:a6:a9:32:e0:d5:2f:73:69:8c:b0:fd:e6:
                    fb:ca:b5:c6:81:25:cc:9b:12:11:a2:d4:59:c1:2e:
                    1a:45:b8:1d:1b:0e:11:14:4a:a6:ad:5c:da:d9:11:
                    0f:65:65:f8:fa:20:98:fd:1a:d0:cf:31:3a:70:42:
                    28:52:ae:77:a5:c0:db:f2:50:7d:c7:0a:47:b8:57:
                    c5:f7:21:03:33:43:a8:a1:fb:85:33:d0:f6:98:3a:
                    9b:b9:4e:1c:86:a8:5a:b4:af:13:2d:31:b9:a9:63:
                    91:63:36:7b:f4:98:a2:36:b6:bb:89:ff:a8:20:37:
                    7c:ab:c7:1e:90:bd:ac:84:d6:19:ae:ee:a2:c4:92:
                    23:0e:d9:3f:51:52:98:34:c2:b5:b9:39:6b:c4:e7:
                    25:d4:aa:6a:22:44:48:37:76:64:f4:b5:b0:0a:9d:
                    27:13:2e:a4:ab:08:0c:2d:20:c0:bb:c0:5b:03:a5:
                    e2:59:2e:83:9f:7b:c2:7f:80:af:db:79:28:03:b9:
                    27:b3:9d:b7:70:e1:19:7a:05:e0:5a:6c:0f:72:8b:
                    ab:ce:2b:79:13:4e:61:5f:cc:95:33:6b:06:f7:f5:
                    da:97:e3:f7:dd:26:b7:bc:27:7f:97:ae:d7:b8:b8:
                    22:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:5A:3E:79:BA:AB:FD:17:BA:8E:BA:9E:8D:2F:A7:30:35:03:1A:C2
            X509v3 Authority Key Identifier:
                keyid:17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:d7:46:2d:9c:9f:1b:43:20:0f:ce:9c:df:8d:a1:e0:1f:90:
         36:4f:4e:48:54:55:76:f7:3b:c8:ad:17:47:d2:21:a2:63:4f:
         f3:69:40:75:1e:63:33:53:91:53:1c:5c:bf:2a:22:6e:50:5e:
         8a:7c:78:06:cc:22:4f:9f:63:e0:12:a2:3f:7a:d6:b1:4c:7f:
         88:74:1a:39:ca:4d:cf:b5:3d:bc:f5:01:f7:72:c7:09:8e:4b:
         94:56:03:b2:35:40:86:b1:7b:01:2f:23:62:64:51:77:94:d1:
         84:e0:02:09:bb:6d:42:3e:f4:b1:86:22:5f:83:57:50:4e:6e:
         08:af:74:de:78:2b:da:c9:a5:a9:df:ab:e1:23:e5:c4:17:26:
         69:dc:ed:67:11:af:d2:6e:05:8c:6c:75:62:12:e7:d4:44:9c:
         8d:51:7f:34:51:44:6f:6b:a5:6a:b3:66:eb:67:27:2d:ee:91:
         c6:98:91:27:7c:8f:9f:70:9d:4f:1e:73:ca:42:1a:de:f1:5d:
         6c:38:4d:0f:d0:a4:c8:85:f8:0d:d9:6d:8d:f9:c5:bb:7f:1d:
         74:b8:a7:43:59:ae:f6:f3:28:2d:52:a4:a1:1f:1c:30:d6:63:
         41:cb:1e:b8:1e:9a:cd:bf:d5:4e:f4:38:b0:d2:af:b2:4d:81:
         b5:8e:91:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:03:24 2026 by rpki-client