Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
File:                     8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft (raw, json)
Hash identifier:          luNhUIPDVgwNOfMbyOeHLAQsQTGEmuc8MNtY3StMCqg=
Subject key identifier:   48:23:DE:25:1A:C8:01:32:00:1D:A1:9E:F7:E8:21:BC:F5:89:26:D4
Authority key identifier: F2:2B:ED:3F:37:CD:72:82:65:11:C5:74:56:0D:EB:55:54:25:50:E4
Certificate issuer:       /CN=f22bed3f37cd72826511c574560deb55542550e4
Certificate serial:       019E1CEB7605E550E80A1AE4C42D2908CFE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
Manifest number:          1907
Signing time:             Tue 12 May 2026 16:00:53 +0000
Manifest this update:     Tue 12 May 2026 16:00:53 +0000
Manifest next update:     Wed 13 May 2026 16:00:53 +0000
Files and hashes:         1: 8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl (hash: P/3QOfV5Qt9ZtZJJbyQbPel29dtH6qNKoxVrDxEvQz4=)
                          2: F6j-udpyxSiM53qRqgF1OjyCqYA.roa (hash: eyZky30xL9+2ioqs8ucqzB8DYytkQbgUrYJfQpNtJ9Q=)
                          3: wmf-yPqG2ZS7mezex8_xqyD_zwI.roa (hash: 9fpYJ00dESb0YftBPOVVC+D9JxFJntLrwwnBd1IBOJY=)
                          4: z5Z8Z2tKlaGPktlL14fVg_CdiCU.roa (hash: iGd31TW0VOTBGCegE7DFxLDTrPbC8L1UiasnIsbIsjk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:76:05:e5:50:e8:0a:1a:e4:c4:2d:29:08:cf:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f22bed3f37cd72826511c574560deb55542550e4
        Validity
            Not Before: May 12 16:00:53 2026 GMT
            Not After : May 13 16:00:53 2026 GMT
        Subject: CN=4823de251ac80132001da19ef7e821bcf58926d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:88:4d:da:a6:19:bb:d2:17:b0:03:fe:d8:ff:
                    b6:5c:81:aa:36:1d:cd:b2:bb:72:a8:a3:53:9d:74:
                    16:5c:96:1b:3e:dc:64:c3:d8:b0:c5:33:09:56:b6:
                    0a:cd:df:21:db:e6:32:cf:15:68:1e:69:8f:35:6e:
                    cc:f2:4d:64:51:03:a9:04:85:ac:a9:1e:1d:f8:8a:
                    6a:a5:0f:55:1d:45:9f:6c:7e:c1:32:21:e8:59:ff:
                    11:34:c7:54:b0:4b:da:6c:39:88:60:49:04:1e:7d:
                    2a:51:47:33:3e:fd:07:f2:e8:01:19:96:d2:2e:1b:
                    ee:bf:63:7a:b2:8a:ea:05:a0:8a:1a:ed:06:8d:cc:
                    bd:f2:6f:fc:10:c9:5a:fd:0e:ce:0b:06:01:3a:10:
                    51:f7:45:c7:e6:6f:2f:25:50:6c:51:42:85:cb:8c:
                    49:97:65:eb:89:ed:81:0a:6a:fe:7a:0d:08:11:03:
                    00:e6:93:f6:1b:0f:9b:f3:5d:d5:05:e5:f2:e4:6a:
                    ae:55:bf:cb:e9:f4:eb:c0:92:20:e2:02:ab:d4:f0:
                    98:14:8e:27:f3:23:b3:2f:88:f9:dc:52:f8:49:cc:
                    d4:bc:68:6c:03:c8:7d:23:c5:5d:43:94:fe:e1:df:
                    54:e6:f2:4f:b6:60:66:b9:d0:c9:22:f4:3f:1c:6b:
                    a6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:23:DE:25:1A:C8:01:32:00:1D:A1:9E:F7:E8:21:BC:F5:89:26:D4
            X509v3 Authority Key Identifier:
                keyid:F2:2B:ED:3F:37:CD:72:82:65:11:C5:74:56:0D:EB:55:54:25:50:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:08:8b:96:6c:6d:47:b7:6c:02:57:82:d6:cf:01:54:f4:40:
         c3:d8:25:2f:ca:5b:ad:c5:18:60:8a:86:f4:d9:43:1d:0e:46:
         7e:91:71:db:3d:f4:99:38:30:85:50:12:4d:f8:e9:7a:6a:63:
         f2:ce:98:16:29:04:8b:99:de:ee:54:dc:fa:ef:8f:08:c7:31:
         15:10:d9:bf:2d:63:90:89:1f:51:09:b8:d3:90:27:7c:f3:df:
         dc:19:92:40:d1:dc:93:c9:27:72:4e:2b:70:2f:ba:3f:65:d8:
         74:da:ae:99:0b:23:f6:46:67:ee:76:f5:d7:83:8e:53:35:c7:
         47:58:87:ad:88:19:93:02:30:51:6c:88:ff:a4:9e:59:aa:aa:
         32:c1:65:fc:79:a3:8d:40:75:d5:a5:e8:45:c9:12:c5:a7:7a:
         10:22:97:42:1b:4b:1a:3a:3d:a6:10:69:ac:6a:d5:be:b9:5d:
         b6:eb:51:05:b6:27:ac:a6:12:4f:91:0f:59:e9:05:16:7d:b8:
         85:95:1c:7e:42:2b:2c:ad:9a:72:64:62:97:62:50:c2:61:4a:
         f8:ef:e7:7b:e3:bc:c4:10:be:41:6d:7e:fd:20:18:d4:ad:d3:
         f4:74:eb:1e:d8:78:f8:b6:b3:bf:a6:ff:aa:07:69:31:ae:67:
         d8:a5:8e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:29:42 2026 by rpki-client