Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
File:                     dFkBtALUgvPW3Sko6oztLuts5BI.mft (raw, json)
Hash identifier:          BucBXSeAjLQyo5lthC/3VyIsaujPPA2037ClH2M0D/M=
Subject key identifier:   08:5E:3A:1F:41:3F:AE:6A:5A:55:BB:5F:0C:CB:5A:C0:25:7E:F4:81
Authority key identifier: 74:59:01:B4:02:D4:82:F3:D6:DD:29:28:EA:8C:ED:2E:EB:6C:E4:12
Certificate issuer:       /CN=745901b402d482f3d6dd2928ea8ced2eeb6ce412
Certificate serial:       019E216CE77CA0B19768B5CCB2A3134E4507
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
Manifest number:          1907
Signing time:             Wed 13 May 2026 13:00:45 +0000
Manifest this update:     Wed 13 May 2026 13:00:45 +0000
Manifest next update:     Thu 14 May 2026 13:00:45 +0000
Files and hashes:         1: LCf-Tegx0fZiipUoAGLWioHn_mQ.roa (hash: gYRcDzeAFInSekOjnAJBC9uOYALnCXCAmTDWjzmnLrQ=)
                          2: dFkBtALUgvPW3Sko6oztLuts5BI.crl (hash: Y77+1CfiYewwKkrLsVvFvU79uJ8IkMKapY67TkbKBoA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:21:6c:e7:7c:a0:b1:97:68:b5:cc:b2:a3:13:4e:45:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=745901b402d482f3d6dd2928ea8ced2eeb6ce412
        Validity
            Not Before: May 13 13:00:45 2026 GMT
            Not After : May 14 13:00:45 2026 GMT
        Subject: CN=085e3a1f413fae6a5a55bb5f0ccb5ac0257ef481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ba:62:ba:be:de:8b:e6:e6:21:34:b2:60:ce:
                    0d:00:15:b2:12:9e:0b:3c:9f:25:cb:ec:ae:42:57:
                    92:e8:a3:93:88:3c:70:8a:3a:ee:72:66:b7:28:06:
                    c9:4c:84:3d:59:ae:b5:c0:97:09:60:e6:2b:15:cf:
                    f0:c9:84:2a:21:57:c5:01:53:13:b0:22:ae:67:1e:
                    c5:67:f9:ad:b7:58:1b:c0:4a:f5:84:1e:3b:7e:8f:
                    d2:1d:f4:b8:71:23:77:97:e9:55:a4:cd:22:82:38:
                    79:4f:d2:2f:1b:fd:75:c3:e3:95:ad:1c:01:19:11:
                    c4:c0:f2:d9:37:8f:cb:41:04:4f:9b:7b:5f:cc:92:
                    f1:6c:b1:50:05:86:74:dc:da:54:f4:24:6c:45:16:
                    06:db:01:a0:9b:0c:b6:16:17:e2:e2:99:9d:93:fc:
                    b2:cd:66:56:00:e1:da:29:3e:aa:9e:c1:80:81:ec:
                    9b:83:9a:c9:3a:6e:3c:22:59:ce:21:46:a3:39:47:
                    c0:db:88:15:15:a0:d0:23:19:e5:00:5f:35:46:c4:
                    c1:27:b7:01:c9:f8:7e:db:90:83:63:93:00:8c:ce:
                    bf:63:6f:cc:08:a7:0c:00:bb:7c:c0:1a:d6:b4:56:
                    fe:ba:23:a8:af:b1:45:77:37:d2:1b:f2:97:a4:4e:
                    bf:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:5E:3A:1F:41:3F:AE:6A:5A:55:BB:5F:0C:CB:5A:C0:25:7E:F4:81
            X509v3 Authority Key Identifier:
                keyid:74:59:01:B4:02:D4:82:F3:D6:DD:29:28:EA:8C:ED:2E:EB:6C:E4:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:f1:82:eb:06:43:83:38:2c:1b:36:93:b0:29:fe:e6:ae:69:
         16:0f:1c:19:4b:30:62:ea:a7:dc:ed:ed:26:22:2f:c9:24:dd:
         37:ac:3f:fc:d4:67:ab:c8:89:e7:6e:85:33:01:eb:fa:b4:53:
         10:5e:54:f2:d5:9e:7a:4e:08:83:6b:5c:e1:26:3d:a7:cc:c9:
         be:1d:f8:44:6a:86:af:6a:6e:fb:bb:c8:db:67:58:9c:57:3c:
         f7:38:27:06:6a:5a:c3:7e:d7:9f:c9:e3:36:3c:e9:0b:42:ca:
         87:52:89:06:a6:13:87:dc:43:ff:85:ea:78:64:b9:47:28:f2:
         ed:eb:a0:b7:ae:f2:46:62:d3:69:3c:26:7a:e0:c5:be:ef:90:
         ec:cd:40:8f:0c:c2:fd:d5:9a:3a:d5:16:22:be:3e:7f:c3:52:
         c8:a5:95:43:42:21:57:4e:2b:d1:c4:c2:41:35:51:c7:5a:da:
         76:50:a9:d6:2a:82:30:80:e8:0a:db:c8:c2:3d:57:c9:32:32:
         37:23:ef:08:f8:61:1b:39:e8:d7:a3:c1:14:ff:2b:fd:96:2b:
         2f:21:ea:20:8b:87:e7:6d:69:6d:9b:55:97:5e:fd:51:2a:7b:
         d1:18:52:d2:12:b0:df:24:23:b2:19:15:43:4c:34:1b:5d:35:
         bf:ae:dc:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4hbOd8oLGXaLXMsqMTTkUHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NTkwMWI0MDJkNDgyZjNkNmRkMjkyOGVhOGNlZDJlZWI2
Y2U0MTIwHhcNMjYwNTEzMTMwMDQ1WhcNMjYwNTE0MTMwMDQ1WjAzMTEwLwYDVQQD
EygwODVlM2ExZjQxM2ZhZTZhNWE1NWJiNWYwY2NiNWFjMDI1N2VmNDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLpiur7ei+bmITSyYM4NABWyEp4L
PJ8ly+yuQleS6KOTiDxwijrucma3KAbJTIQ9Wa61wJcJYOYrFc/wyYQqIVfFAVMT
sCKuZx7FZ/mtt1gbwEr1hB47fo/SHfS4cSN3l+lVpM0igjh5T9IvG/11w+OVrRwB
GRHEwPLZN4/LQQRPm3tfzJLxbLFQBYZ03NpU9CRsRRYG2wGgmwy2Fhfi4pmdk/yy
zWZWAOHaKT6qnsGAgeybg5rJOm48IlnOIUajOUfA24gVFaDQIxnlAF81RsTBJ7cB
yfh+25CDY5MAjM6/Y2/MCKcMALt8wBrWtFb+uiOor7FFdzfSG/KXpE6/hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAheOh9BP65qWlW7XwzLWsAlfvSBMB8GA1UdIwQY
MBaAFHRZAbQC1ILz1t0pKOqM7S7rbOQSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEZrQnRBTFVndlBXM1NrbzZvenRMdXRzNUJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84ZmQ2ZGYtMzAxMi00ZTQ2LWJiZDgt
ZDdjMzZlMTVjZjBlLzEvZEZrQnRBTFVndlBXM1NrbzZvenRMdXRzNUJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi84ZmQ2ZGYtMzAxMi00ZTQ2LWJiZDgtZDdjMzZlMTVjZjBl
LzEvZEZrQnRBTFVndlBXM1NrbzZvenRMdXRzNUJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKPGC6wZD
gzgsGzaTsCn+5q5pFg8cGUswYuqn3O3tJiIvySTdN6w//NRnq8iJ526FMwHr+rRT
EF5U8tWeek4Ig2tc4SY9p8zJvh34RGqGr2pu+7vI22dYnFc89zgnBmpaw37Xn8nj
NjzpC0LKh1KJBqYTh9xD/4XqeGS5Ryjy7eugt67yRmLTaTwmeuDFvu+Q7M1AjwzC
/dWaOtUWIr4+f8NSyKWVQ0IhV04r0cTCQTVRx1radlCp1iqCMIDoCtvIwj1XyTIy
NyPvCPhhGzno16PBFP8r/ZYrLyHqIIuH521pbZtVl179USp70RhS0hKw3yQjshkV
Q0w0G101v67c2w==
-----END CERTIFICATE-----
Generated at Wed May 13 15:40:39 2026 by rpki-client