Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
File:                     ho8gMJli98bhwyZ_CD4STYPddvw.mft (raw, json)
Hash identifier:          QW20dOnSRRKHyEa7iQbCL/NA7ywISIGrBHr0A/XETYQ=
Subject key identifier:   BB:B7:44:79:67:9B:7A:C1:90:41:FF:34:8D:F3:10:12:03:9F:27:B5
Authority key identifier: 86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC
Certificate issuer:       /CN=868f20309962f7c6e1c3267f083e124d83dd76fc
Certificate serial:       019E21A3CBC18FBB5E5B3280B895AA1A0B3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
Manifest number:          190B
Signing time:             Wed 13 May 2026 14:00:42 +0000
Manifest this update:     Wed 13 May 2026 14:00:42 +0000
Manifest next update:     Thu 14 May 2026 14:00:42 +0000
Files and hashes:         1: 55TydbG7XIPM3ovk6O_qtpxMT5g.roa (hash: Irnfw7dwlSnEFTktO5O7WLJDCKpVdnM7re9+EYkh2Fg=)
                          2: ho8gMJli98bhwyZ_CD4STYPddvw.crl (hash: yn2uQsRjX5dYPloo1vYR1CkPC6lPuHxL+Q3ypnmc0ZE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 14:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:21:a3:cb:c1:8f:bb:5e:5b:32:80:b8:95:aa:1a:0b:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=868f20309962f7c6e1c3267f083e124d83dd76fc
        Validity
            Not Before: May 13 14:00:42 2026 GMT
            Not After : May 14 14:00:42 2026 GMT
        Subject: CN=bbb74479679b7ac19041ff348df31012039f27b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c2:5e:19:62:4b:7f:9a:00:a6:99:bb:c3:bd:
                    87:75:fc:f7:d5:cf:a8:77:7e:b7:28:4d:81:25:be:
                    fc:34:ab:a4:91:98:5f:10:2c:e2:07:19:0d:9b:56:
                    53:0b:ca:b0:2b:84:82:d2:42:b1:8d:c7:2d:fb:fc:
                    b0:4a:bc:09:80:8f:c6:c5:3b:c4:51:12:c8:56:f8:
                    2c:76:d7:c8:57:34:8a:05:ab:e2:8f:35:b1:49:28:
                    84:7c:b0:f3:7c:91:18:8f:d8:06:24:49:cc:1f:71:
                    d1:e5:c0:7a:20:c6:9c:32:5c:9a:dd:f0:8c:1a:01:
                    27:10:45:45:fe:1b:38:d1:3f:e7:2f:42:1d:9c:31:
                    17:d6:2a:a5:ed:d9:65:e8:16:90:57:08:1e:80:c0:
                    0c:52:14:41:95:55:9e:12:5d:0f:08:fd:8f:2d:06:
                    25:0c:be:1c:d2:70:22:39:d1:e8:79:c5:d2:de:03:
                    c0:5b:0e:0b:fd:77:e2:ae:bc:e4:02:95:97:fa:2d:
                    25:a7:35:8e:4d:15:43:bf:41:e0:3f:27:bd:fd:96:
                    7a:85:da:94:d0:54:88:04:3f:0f:bf:a3:dd:fa:61:
                    a0:bf:68:47:14:94:32:d3:d3:c4:1c:b0:d4:51:83:
                    f4:a3:ed:5f:eb:97:8a:6b:bc:d3:68:10:be:02:98:
                    0c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B7:44:79:67:9B:7A:C1:90:41:FF:34:8D:F3:10:12:03:9F:27:B5
            X509v3 Authority Key Identifier:
                keyid:86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:33:5d:a4:8d:4f:4f:50:92:ee:d3:aa:cf:9f:6c:f8:aa:f9:
         3c:cf:90:5b:b0:c9:ad:72:df:08:60:b9:86:3f:eb:d4:70:de:
         0a:a5:4b:77:d9:2c:c4:d9:04:79:64:41:ae:3d:cf:dc:86:bb:
         e4:0d:7d:a1:9f:55:6a:90:29:20:cf:4d:ac:25:72:38:3d:ee:
         bc:ee:ef:7f:5f:f7:28:f0:92:0c:19:ae:48:9a:bf:d6:ff:61:
         46:80:6c:b2:ae:05:c5:72:43:ca:aa:03:66:2d:d7:57:73:38:
         7c:05:6d:a1:69:0f:73:21:91:b7:61:0b:d1:a2:7b:fc:52:55:
         08:f8:e0:cc:e3:41:d5:1f:0c:27:93:c8:42:f6:52:c6:34:ef:
         84:be:0d:05:fc:54:a7:01:ce:61:01:70:01:a8:82:cd:03:68:
         98:16:68:d4:39:6b:83:cc:dd:2c:d3:d3:27:f3:ef:cb:35:69:
         18:d2:af:2a:34:90:bf:cb:95:b8:90:2c:05:b3:15:5f:ce:02:
         51:21:2d:c4:be:4b:13:59:0a:d7:8f:7c:e7:9c:37:13:62:bc:
         8b:57:b1:fa:54:20:87:ca:63:5c:1a:26:74:54:74:be:59:a2:
         02:ca:b3:78:47:8d:d7:56:45:17:25:ec:59:54:9b:83:c8:95:
         ee:f0:47:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:42:35 2026 by rpki-client