Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
File:                     pmJGuAbomrpA5-WIiPNXZROjk0o.mft (raw, json)
Hash identifier:          Q5AGUq2Txt7VlXL5LEIpeXT7+1xY9sleeS3AB9ttD8I=
Subject key identifier:   75:E6:74:86:4A:38:52:29:2F:BE:32:31:56:10:1F:8F:15:62:C3:66
Authority key identifier: A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
Certificate issuer:       /CN=a66246b806e89aba40e7e58888f3576513a3934a
Certificate serial:       019E2091DE5F263AC8F453969C8651C92DE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
Manifest number:          190F
Signing time:             Wed 13 May 2026 09:01:30 +0000
Manifest this update:     Wed 13 May 2026 09:01:30 +0000
Manifest next update:     Thu 14 May 2026 09:01:30 +0000
Files and hashes:         1: 8MCnCiuGbqnzU7k4AiuuVxxMVjI.roa (hash: 3AKQoBBhnfUzI34hMZSnvSfZtjxdcBOFKymfp/vwl0g=)
                          2: MnRpYakEEH_3YM8B7YjpXHZCSHs.roa (hash: As4Z8EIpoOCvUeHagBG0PnKSVumw3phPbQAL1UT50X8=)
                          3: Xw_Yrbs6dG8gOuv7i9EZQhlPhlw.roa (hash: EFAh20ucPzMb4NyAoN8tNqkVM4vbiB7eJqswxMwPTCU=)
                          4: pmJGuAbomrpA5-WIiPNXZROjk0o.crl (hash: xJIHbWNmig12QUx35GlRc7uZTHoyGZrfjipNMACcyrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:91:de:5f:26:3a:c8:f4:53:96:9c:86:51:c9:2d:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a66246b806e89aba40e7e58888f3576513a3934a
        Validity
            Not Before: May 13 09:01:30 2026 GMT
            Not After : May 14 09:01:30 2026 GMT
        Subject: CN=75e674864a3852292fbe323156101f8f1562c366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:94:1a:f3:fb:d5:01:f7:d6:52:ed:e3:02:71:
                    7e:2b:79:cb:bf:13:84:01:1a:2e:a6:63:a8:9e:78:
                    c7:c4:31:3e:de:56:7c:5a:11:43:2b:68:d1:8f:bf:
                    ef:f3:51:9a:70:2d:23:f1:ac:d0:95:a9:45:e7:5a:
                    6d:01:57:2b:ae:c2:db:42:1f:cd:70:d0:c6:84:17:
                    ca:a0:79:07:52:f1:13:63:f1:ea:89:ec:e1:3e:66:
                    57:6b:2a:e5:01:5f:00:f2:79:24:b9:4b:a2:14:98:
                    bd:2d:1d:cb:ee:79:84:de:4a:ec:e0:e9:56:43:cc:
                    e4:3b:90:3c:1d:9e:ae:08:7d:80:16:0e:db:59:28:
                    44:a9:08:83:ad:30:e8:be:d6:49:72:62:81:72:38:
                    1a:3f:ec:d3:e5:a4:47:c5:c4:4d:5b:af:17:d0:7f:
                    fc:9f:cf:61:d8:0c:8e:6b:62:96:12:be:c5:93:9d:
                    58:45:15:62:a1:0f:0f:22:48:49:7c:61:6d:d1:67:
                    70:16:7f:cd:53:f6:dd:18:e0:e7:6f:6d:80:b0:22:
                    90:1e:46:f1:76:85:d2:bf:92:32:c6:02:d0:82:c2:
                    fb:cc:41:e9:2b:52:3c:d1:c8:e3:82:2d:1e:48:2e:
                    14:68:6c:93:b6:ad:cf:53:5c:dc:75:04:f1:47:57:
                    43:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E6:74:86:4A:38:52:29:2F:BE:32:31:56:10:1F:8F:15:62:C3:66
            X509v3 Authority Key Identifier:
                keyid:A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:c5:36:d1:2e:22:dd:17:b7:61:fb:bc:16:eb:2c:58:2f:8e:
         32:bd:74:cf:f4:0c:94:9b:de:0d:96:29:11:80:40:ee:f5:36:
         f7:b2:bf:0b:79:0b:a6:6e:8d:9f:ae:71:65:e7:84:c1:bb:d9:
         2c:19:3f:39:a1:fa:e8:12:ba:8f:dd:35:13:09:ae:59:da:4a:
         cd:51:75:e6:1b:02:d8:14:69:9e:25:99:3e:18:36:9c:8e:fa:
         7f:8c:20:11:f8:a7:8d:32:ef:76:25:d8:38:42:c3:5c:64:8c:
         08:97:54:0c:10:b6:9d:c1:17:26:6f:2f:af:d0:09:2c:53:f4:
         14:d5:17:7a:9a:1e:a7:36:ab:02:c4:49:c9:57:36:54:ff:0b:
         d3:2f:b1:b7:45:29:85:95:21:df:10:91:86:08:98:e3:d2:fd:
         4f:bd:fa:d6:0f:82:0a:ef:bc:61:e0:8c:bb:41:42:47:09:d6:
         ca:cb:1c:41:d3:c7:12:37:58:72:e0:0b:7a:b3:87:1a:14:12:
         60:20:b0:6d:20:31:d2:33:b2:c4:b2:de:a7:83:5d:04:2d:2a:
         e5:cd:02:35:41:b6:21:22:33:5a:3b:4b:6d:ed:c0:80:f6:b6:
         8c:5a:16:56:d1:37:cd:80:81:44:71:25:48:15:11:6c:9b:c9:
         43:93:22:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:00:38 2026 by rpki-client