Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.mft
File:                     dLTNPt9SHfjsChURESctP7kbmcM.mft (raw, json)
Hash identifier:          3hS1Cc51QDSK8PZv2+Sm8VvuXG4JvQUz02SbtHdytjE=
Subject key identifier:   14:39:2D:9E:4F:49:EA:51:BC:AA:35:7C:E3:07:95:40:DF:23:4A:80
Authority key identifier: 74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3
Certificate issuer:       /CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
Certificate serial:       019E1E35E96FB2D52C8E5350F48ECBBC7133
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.mft
Manifest number:          18CA
Signing time:             Tue 12 May 2026 22:01:50 +0000
Manifest this update:     Tue 12 May 2026 22:01:50 +0000
Manifest next update:     Wed 13 May 2026 22:01:50 +0000
Files and hashes:         1: QORmhi_9epbeW9LCcd6n0EGtUY8.roa (hash: yh8fGZBqg446G7IvQWeFZ53Dmb/4eGEcmhE71J/WqVg=)
                          2: VISbwQPxKE4ZMWN4N2M-Ot4MfO4.roa (hash: 31aRf+y4KMCXXKPf61vmEKuD5SrxcJx1XR4Sfcx1mPk=)
                          3: d1KZjcdpNHIYVpiceFKi35WBNOI.roa (hash: bhgrHFOFhyZ/ACw8GjeBW0aMegg7PL6RgkmabbugbK8=)
                          4: dLTNPt9SHfjsChURESctP7kbmcM.crl (hash: 38vQUmFAYfG6jUkIcsoxY4zfNFxljw6OMkXVVRB1wAQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:e9:6f:b2:d5:2c:8e:53:50:f4:8e:cb:bc:71:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
        Validity
            Not Before: May 12 22:01:50 2026 GMT
            Not After : May 13 22:01:50 2026 GMT
        Subject: CN=14392d9e4f49ea51bcaa357ce3079540df234a80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e3:eb:57:37:5f:f3:3e:e8:50:4b:bf:02:12:
                    ae:e1:dd:8a:05:50:8f:a8:8c:55:28:95:4d:27:83:
                    04:7a:b3:73:e8:7a:ea:ba:39:32:0d:06:b8:31:23:
                    c2:c0:35:b8:40:b8:c8:90:6e:19:b4:73:ca:fe:96:
                    fe:df:b5:99:a0:7d:28:98:92:95:ea:d5:e4:cf:6d:
                    83:25:4a:eb:e2:88:3b:ee:9e:74:a6:bd:bb:54:ce:
                    06:4c:61:b4:d2:26:a8:0e:d4:40:f8:a0:3b:0e:76:
                    78:50:f7:9c:de:5b:7b:fc:33:66:45:fc:bc:37:dd:
                    83:1c:37:b1:a2:43:be:a4:10:61:53:c5:6b:e5:c8:
                    9e:b2:e3:73:6b:5a:49:27:8a:74:5e:45:80:34:48:
                    a2:d7:21:a1:e7:dc:d3:2b:e1:ca:46:89:7c:ea:44:
                    06:30:6b:e2:7b:f6:54:26:10:d2:a9:82:f0:27:57:
                    30:aa:ef:c9:3d:8a:42:40:9b:03:d1:2f:4b:4d:4c:
                    35:f5:07:f7:dd:66:bb:dc:a8:0e:16:ed:e6:48:f1:
                    e5:76:ee:f4:81:2a:ec:e6:69:6b:3b:d0:e3:56:81:
                    70:c2:57:e9:9f:2a:2b:47:b2:75:a9:1f:ce:50:34:
                    a8:8f:a6:ed:b2:7b:8d:31:dc:62:60:eb:04:51:a7:
                    cd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:39:2D:9E:4F:49:EA:51:BC:AA:35:7C:E3:07:95:40:DF:23:4A:80
            X509v3 Authority Key Identifier:
                keyid:74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:77:28:61:96:ad:cd:d4:0a:0c:69:11:82:af:22:d5:57:4c:
         92:5c:5e:fe:ba:a3:c0:35:6a:65:4f:d6:d3:db:f1:4d:3e:6c:
         0c:57:1d:75:4a:cc:0c:73:18:06:b3:b7:e9:a1:c4:43:ad:83:
         70:01:09:47:38:f7:45:fd:52:5d:4f:4d:21:27:f4:c5:41:32:
         4b:10:b3:d8:f3:ac:09:f4:a4:32:6b:99:cc:09:15:05:eb:5f:
         09:a8:d9:1d:7e:18:b0:2c:4e:27:48:10:6a:7f:0e:ef:6e:20:
         35:df:9e:50:38:4d:ff:c2:39:5b:2c:b9:a9:10:dc:48:d6:bb:
         1a:e4:7d:8b:e0:6e:16:7a:bf:61:a4:a6:12:23:2e:a6:22:16:
         ca:4f:81:82:50:ad:c0:9b:f8:be:5c:7c:16:1a:bd:56:46:50:
         53:57:56:2a:17:b1:25:2e:ca:84:c4:05:01:c1:e5:6b:b1:a9:
         f1:b8:7e:6f:8a:2c:0b:82:54:9d:67:32:22:55:2f:24:6f:a6:
         40:ed:b0:6e:7a:29:6e:90:4f:96:97:83:85:82:c4:c8:f5:87:
         43:e9:92:20:79:a2:c2:f6:1f:a4:b2:72:b2:34:98:9b:fa:9f:
         f9:35:dc:70:d2:54:57:eb:e1:1d:ee:f3:06:db:c4:14:23:7e:
         65:ce:dc:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:31:00 2026 by rpki-client