Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft
File:                     tMflb0aH6hstd2PQiI0QUCNbV0s.mft (raw, json)
Hash identifier:          1AwqCaadTt/33UERuL7hUggoBaFqo5xO5s25oA626/c=
Subject key identifier:   75:47:08:A4:EA:D8:69:3C:F9:44:34:39:9C:F8:76:C2:99:95:0B:88
Authority key identifier: B4:C7:E5:6F:46:87:EA:1B:2D:77:63:D0:88:8D:10:50:23:5B:57:4B
Certificate issuer:       /CN=b4c7e56f4687ea1b2d7763d0888d1050235b574b
Certificate serial:       019E20243A908E4D924455D64C118595C7A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tMflb0aH6hstd2PQiI0QUCNbV0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft
Manifest number:          1899
Signing time:             Wed 13 May 2026 07:01:45 +0000
Manifest this update:     Wed 13 May 2026 07:01:45 +0000
Manifest next update:     Thu 14 May 2026 07:01:45 +0000
Files and hashes:         1: tMflb0aH6hstd2PQiI0QUCNbV0s.crl (hash: ZkrarP+JH+1imV5eXar1BR1yrrJaE47Scrw0Pn4y8uE=)
                          2: wFX4ltKD_gZlOj3Qf_Lnn0NhN4U.roa (hash: pjVKRqlOO9z+7mcPGp3goRgbyLNPwv20Ps3g73hf4MM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tMflb0aH6hstd2PQiI0QUCNbV0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:24:3a:90:8e:4d:92:44:55:d6:4c:11:85:95:c7:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4c7e56f4687ea1b2d7763d0888d1050235b574b
        Validity
            Not Before: May 13 07:01:45 2026 GMT
            Not After : May 14 07:01:45 2026 GMT
        Subject: CN=754708a4ead8693cf94434399cf876c299950b88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:13:ba:18:80:cb:d1:df:8f:82:35:e3:94:bc:
                    c4:56:f8:3a:5c:79:3c:95:8d:a9:b5:46:12:a4:33:
                    25:69:c7:5d:90:6e:01:bf:8e:af:25:18:b1:1c:58:
                    29:35:28:23:e2:39:52:29:17:8a:73:12:97:da:9a:
                    ab:3a:33:69:38:60:d0:8a:b5:16:e1:6a:5c:a8:d8:
                    23:7e:6f:86:b8:51:1e:b5:f7:6a:15:53:8e:4f:5e:
                    ba:32:78:2f:b2:86:11:34:94:28:bc:bb:40:63:d5:
                    b0:55:4f:23:7b:1c:0b:a8:4d:d3:a8:86:85:9f:7a:
                    f4:cc:72:1b:70:60:97:36:ee:ae:c2:56:14:94:53:
                    40:8d:e9:ba:2e:e0:cb:13:08:1e:5d:eb:65:c0:d1:
                    de:80:67:cb:52:f7:44:ce:db:0a:5a:24:89:24:95:
                    d8:58:3e:c6:30:de:02:29:b0:97:1c:aa:24:4a:d0:
                    13:25:09:51:ea:09:d6:3a:7b:64:18:b8:1b:ca:93:
                    9b:e6:1c:93:73:ec:97:80:d8:c1:31:14:bd:18:33:
                    b9:49:f5:bd:a6:a2:fd:cb:4e:f3:d8:0c:0e:e4:99:
                    33:a0:4a:99:54:7f:25:97:ca:44:86:a5:f6:4e:da:
                    2c:42:fb:ac:40:b6:60:ff:48:a6:cf:81:15:81:4c:
                    43:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:47:08:A4:EA:D8:69:3C:F9:44:34:39:9C:F8:76:C2:99:95:0B:88
            X509v3 Authority Key Identifier:
                keyid:B4:C7:E5:6F:46:87:EA:1B:2D:77:63:D0:88:8D:10:50:23:5B:57:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMflb0aH6hstd2PQiI0QUCNbV0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:e5:f6:16:bc:b6:51:4e:e1:92:58:f1:72:ee:67:c2:26:c5:
         90:44:f8:c0:26:34:89:ca:46:db:56:27:e7:64:ea:88:ad:ce:
         88:2f:35:b8:73:cd:71:8f:7c:88:b0:26:97:85:be:92:78:08:
         ed:60:3c:c8:c1:13:fd:ea:12:4a:23:d8:19:a0:9c:ae:c9:c5:
         7a:a1:e4:e7:6d:82:5b:95:20:59:51:f5:b3:ab:99:06:e7:6c:
         0a:f5:59:cc:35:c5:19:ce:d3:fa:41:f5:2d:e5:30:b1:e5:60:
         af:ce:bd:86:12:3a:7b:67:3c:01:c5:86:e3:bb:08:f1:0d:4c:
         8c:74:34:88:51:5d:8c:aa:7b:dc:5f:a7:8c:db:9b:be:2d:fd:
         b7:a2:a5:b8:1f:f1:da:f9:42:e5:05:93:6b:b1:4d:a7:e5:a0:
         54:32:98:f0:12:1f:e2:01:4b:13:72:56:5a:09:a6:12:27:fa:
         a4:75:ff:78:3e:21:b1:88:28:5e:f8:f3:46:b6:6f:12:76:e5:
         3c:31:07:9f:40:53:33:13:2e:8e:33:65:e6:0b:57:84:12:57:
         2a:55:fb:d1:03:db:1d:f2:80:cd:ed:7a:1d:fe:f2:fe:b7:d7:
         e9:99:27:f8:a2:ab:ea:b1:79:1c:9a:a4:32:96:b0:0c:a2:b9:
         a0:77:83:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:46:22 2026 by rpki-client