Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
File:                     kY74I7sEHqOsfIk2x1C2AYE34s0.mft (raw, json)
Hash identifier:          KBoZhulGYtwH868NX6pM6WtoYfziDtNL216SE9orCfc=
Subject key identifier:   9A:01:98:40:0A:D3:E0:03:1A:97:01:A6:27:A8:F6:2A:37:83:57:D9
Authority key identifier: 91:8E:F8:23:BB:04:1E:A3:AC:7C:89:36:C7:50:B6:01:81:37:E2:CD
Certificate issuer:       /CN=918ef823bb041ea3ac7c8936c750b6018137e2cd
Certificate serial:       019E1CB4D4582F6A67FFDA3C4D9E06671EEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
Manifest number:          1907
Signing time:             Tue 12 May 2026 15:01:13 +0000
Manifest this update:     Tue 12 May 2026 15:01:13 +0000
Manifest next update:     Wed 13 May 2026 15:01:13 +0000
Files and hashes:         1: SAktSd8Yfiv8Z7AAoq9HqjAql5s.roa (hash: LtM8gbZ0jSfixz/hSjfeNQJi14O3+yjoZzQHAO5Ggx8=)
                          2: V7G0PqLXvHbILX1LHpBG4YAR7P8.roa (hash: dlrYc64tSG90TWHPrXR+wF6FxKtROact/mSKSd7YezI=)
                          3: YUvBprPTRfZZcuIZT5c81ftcfmE.asa (hash: 53yTBzuypoSdIg4y84fPhABfxj/Iwufg2RICzEJXFBY=)
                          4: kY74I7sEHqOsfIk2x1C2AYE34s0.crl (hash: rwg9KeMyXyWP6sZMcbzNMu3IIeaN4o+y+xCRGEm2yWs=)
                          5: phk0DUtP9juLO6Rie2WITcEati8.roa (hash: e91L1Q+nTnPD/oJ6jV8Vk2fQsj6tkZNRhSrVTsD9WQs=)
                          6: ycEAE8U3GOcT-dI1EM9rShcAaZs.roa (hash: xuaS4IHUOmueIKBaxW7itaqT5M/7ix/11RW1ctyKbMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b4:d4:58:2f:6a:67:ff:da:3c:4d:9e:06:67:1e:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=918ef823bb041ea3ac7c8936c750b6018137e2cd
        Validity
            Not Before: May 12 15:01:13 2026 GMT
            Not After : May 13 15:01:13 2026 GMT
        Subject: CN=9a0198400ad3e0031a9701a627a8f62a378357d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3e:f0:89:e4:4f:62:f6:36:98:d8:83:5d:c6:
                    63:05:dd:ea:ab:a8:6a:75:78:89:2c:ff:a4:59:01:
                    3d:b6:1b:b1:e5:b7:a9:e2:e5:3c:a0:b1:b9:f9:e5:
                    67:a5:bf:fc:c5:25:52:0d:d2:ad:13:97:fd:4c:fa:
                    31:93:f8:02:ac:ec:90:2c:e1:23:dd:bb:f1:65:0a:
                    66:34:d8:1d:07:73:76:cd:2e:ad:7c:48:fc:a5:9d:
                    cc:e2:e8:a7:7a:fb:7e:12:e6:ab:05:0c:08:ab:7d:
                    5c:be:ee:75:72:58:ef:25:00:6e:f5:97:48:eb:fd:
                    80:ac:cb:a6:27:0b:fa:3c:42:94:0f:d5:c2:6e:46:
                    6a:6c:ef:7b:6e:fb:2b:bc:c4:8a:88:5b:79:3d:81:
                    51:8d:4d:d3:fa:c3:09:0e:60:35:0d:83:c4:1c:fe:
                    b4:86:b0:79:9e:99:71:4f:4f:2f:f0:5e:8e:3b:69:
                    fe:d8:36:ae:e2:8f:69:57:54:e0:24:ef:85:92:5c:
                    ca:92:26:37:3d:f2:b2:10:26:c7:2f:13:e8:78:88:
                    db:75:35:73:a0:24:ae:c1:15:16:05:76:04:48:57:
                    2c:fa:0a:9b:0b:5c:82:8f:65:ed:ae:3a:f0:5d:14:
                    ac:9a:59:98:2e:9c:d3:cb:cb:e9:d0:c4:d8:3f:a5:
                    cc:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:01:98:40:0A:D3:E0:03:1A:97:01:A6:27:A8:F6:2A:37:83:57:D9
            X509v3 Authority Key Identifier:
                keyid:91:8E:F8:23:BB:04:1E:A3:AC:7C:89:36:C7:50:B6:01:81:37:E2:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:29:fc:89:23:d3:e4:14:54:b6:a4:09:1c:f0:3d:65:ac:ac:
         79:47:bc:84:48:a9:f3:b0:90:79:5e:14:88:79:7d:65:e8:a2:
         9a:aa:e3:82:7c:40:29:c2:8c:12:e7:a3:f3:c6:43:76:7b:1b:
         11:df:1b:a0:e9:45:b9:8c:a6:43:ca:e9:64:61:b3:ea:ee:25:
         51:61:04:f1:aa:b3:c1:48:87:5f:d3:19:a4:16:b1:96:ad:24:
         56:28:ae:a6:e2:69:50:a5:07:b1:46:57:41:49:18:76:b6:33:
         72:37:35:67:89:0a:45:6a:e1:ab:aa:a1:9f:f6:5d:9f:5e:14:
         8c:d4:21:6d:6d:89:21:b6:87:0f:f0:c8:1f:79:97:5b:54:aa:
         19:52:ef:8b:91:cb:d6:fe:94:f2:80:18:ef:3e:67:3a:e3:fe:
         22:df:03:79:2c:3c:fb:ea:c4:6d:ff:96:dc:f7:c5:fa:b1:c7:
         76:9f:62:23:aa:2a:4e:c4:28:1f:29:41:c3:e4:fb:92:8e:65:
         94:85:04:a4:10:56:98:f4:e0:04:45:c0:b6:d7:c4:55:81:de:
         9f:4e:67:5a:46:f6:8b:18:91:60:3d:5c:95:4c:6b:89:4f:90:
         77:3b:ab:4f:55:ce:07:4a:48:44:7c:b5:90:2e:b5:77:1c:04:
         13:f0:1b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:26:38 2026 by rpki-client