Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
File:                     lTrJeoHHeU5iCA41ueh7QdSxho8.mft (raw, json)
Hash identifier:          uYQzXwOAlRrF1uLfuUP+kRiRz9YDJ2JdeZ/I7pw61l0=
Subject key identifier:   8F:E9:2F:F9:53:A8:BF:14:8D:CC:2B:FC:86:88:32:1D:BF:39:BA:17
Authority key identifier: 95:3A:C9:7A:81:C7:79:4E:62:08:0E:35:B9:E8:7B:41:D4:B1:86:8F
Certificate issuer:       /CN=953ac97a81c7794e62080e35b9e87b41d4b1868f
Certificate serial:       019E1F47A91487367228F921C2D188A26BE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
Manifest number:          189B
Signing time:             Wed 13 May 2026 03:00:50 +0000
Manifest this update:     Wed 13 May 2026 03:00:50 +0000
Manifest next update:     Thu 14 May 2026 03:00:50 +0000
Files and hashes:         1: JoxiTEz__YOaOxCEi1AcTpW23BQ.roa (hash: dtf1Gran/dauXjcEfmIG5/b4GMHMOMD8Fp69Iu8ScUY=)
                          2: lTrJeoHHeU5iCA41ueh7QdSxho8.crl (hash: Sbxv0z16NcC4WSj0gxEjEWDHvhcEAINevkEfPGDgL5k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 03:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:47:a9:14:87:36:72:28:f9:21:c2:d1:88:a2:6b:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=953ac97a81c7794e62080e35b9e87b41d4b1868f
        Validity
            Not Before: May 13 03:00:50 2026 GMT
            Not After : May 14 03:00:50 2026 GMT
        Subject: CN=8fe92ff953a8bf148dcc2bfc8688321dbf39ba17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a8:af:92:38:46:c3:31:9a:63:a0:ef:15:44:
                    1a:c8:22:24:1f:9a:45:f6:69:b4:ad:d3:00:8b:6f:
                    c7:e3:b1:ef:ec:8b:fb:18:25:06:d5:12:64:fc:41:
                    3f:fd:2c:07:1a:3d:9d:8f:45:6f:bb:ee:e5:02:84:
                    05:d8:14:92:62:55:da:41:19:63:e1:f2:16:d0:d8:
                    51:9c:b6:72:a6:c3:9b:25:bd:3d:57:ad:c5:8d:4f:
                    3b:bb:0e:cd:ed:ee:dd:96:f9:7b:e8:53:db:44:e5:
                    8b:b8:0b:ad:b8:9d:42:ff:79:97:60:08:42:93:bd:
                    3b:6f:03:f1:e9:88:86:34:5d:8e:40:83:07:d9:52:
                    94:50:2e:72:02:9d:b2:6b:37:23:a5:3b:4d:cd:65:
                    5d:d6:3d:ae:3f:29:7a:a2:45:d9:79:3a:7c:fa:56:
                    df:da:0a:02:53:1d:76:aa:f1:3a:b1:4a:ab:de:ce:
                    65:af:ad:a1:48:f8:66:91:27:e9:b2:a1:54:c1:b6:
                    c5:ab:cf:ed:7a:86:2b:97:bc:d5:93:f6:65:67:c8:
                    e8:4e:05:9e:97:27:65:e3:f4:63:79:95:22:93:46:
                    4a:57:2e:c8:65:f1:4b:ba:e7:09:82:39:36:42:62:
                    27:fc:e3:92:96:c9:1a:09:f5:f1:80:61:5d:09:7a:
                    2d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E9:2F:F9:53:A8:BF:14:8D:CC:2B:FC:86:88:32:1D:BF:39:BA:17
            X509v3 Authority Key Identifier:
                keyid:95:3A:C9:7A:81:C7:79:4E:62:08:0E:35:B9:E8:7B:41:D4:B1:86:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:84:e3:42:d8:79:74:5d:8e:10:fc:3d:a2:4b:e9:8b:49:c1:
         5f:44:8e:15:60:90:f0:03:0f:34:5a:46:da:37:13:75:99:f4:
         0c:1a:52:9b:f1:18:40:3b:41:82:72:25:de:e5:c4:3b:fd:71:
         4f:d5:df:64:05:77:04:50:2c:64:06:f8:57:ec:4b:71:ae:c4:
         c8:1e:a9:16:b5:64:d2:65:bb:3e:fb:ec:d7:51:bb:3d:21:f5:
         b1:ec:13:58:b0:ee:e8:a9:bf:f1:31:c7:e0:bd:f1:78:25:f2:
         ce:32:85:11:3d:7a:31:5a:98:c9:d8:17:50:f2:44:a1:46:80:
         dd:77:d7:7c:22:02:69:98:93:8e:46:0f:75:1a:b6:ab:a6:32:
         1c:31:62:1c:c8:73:b6:21:64:52:a9:7a:e6:d7:b7:f4:42:54:
         b6:81:93:89:b1:c6:06:c3:4c:fd:41:b9:bc:3a:46:d6:c1:d0:
         99:f3:12:4c:c6:b9:57:e5:60:6d:9b:e7:8d:18:53:50:b9:c5:
         64:da:8a:49:fc:7b:0b:1f:96:3f:d4:4f:1c:6f:ba:63:91:44:
         96:54:84:b9:d1:29:c1:fa:8d:83:af:db:f9:d5:9e:93:cc:90:
         21:07:8e:e5:d9:00:de:fe:d3:a0:e4:98:18:29:7a:e7:3c:e9:
         af:9a:8e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:26:48 2026 by rpki-client