Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft
File:                     V04loW5dOqEQrF6DNfiPY-VLQvE.mft (raw, json)
Hash identifier:          b+c6qtHi9Zmp11ghadwoRDf8cu2c3TnS/RMgbRIwK3w=
Subject key identifier:   FC:EC:2B:6F:DB:C5:EE:A7:0F:D7:C3:D9:B1:1C:CD:71:D7:96:2D:B8
Authority key identifier: 57:4E:25:A1:6E:5D:3A:A1:10:AC:5E:83:35:F8:8F:63:E5:4B:42:F1
Certificate issuer:       /CN=574e25a16e5d3aa110ac5e8335f88f63e54b42f1
Certificate serial:       019E1D223CA6F4E68ED457D8C1677C42319B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft
Manifest number:          190F
Signing time:             Tue 12 May 2026 17:00:43 +0000
Manifest this update:     Tue 12 May 2026 17:00:43 +0000
Manifest next update:     Wed 13 May 2026 17:00:43 +0000
Files and hashes:         1: ChXWstjRWA_OODNRO9MDbRfgOQU.asa (hash: +k73MShgqLwwtEUsqO+3IrwBNnY2nL4l+Ep35pG4oXI=)
                          2: Qm8uhcNnRTaqoYGKrdrNLc_aZD8.roa (hash: hvZBXvz5QZfJbWaG3RcO8weSJZHMPwQu8jySYopR30I=)
                          3: V04loW5dOqEQrF6DNfiPY-VLQvE.crl (hash: 0kZXWaHFOFO3L9c3H1+D6WdHFaZZ/c48Wijllh+utp8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:3c:a6:f4:e6:8e:d4:57:d8:c1:67:7c:42:31:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=574e25a16e5d3aa110ac5e8335f88f63e54b42f1
        Validity
            Not Before: May 12 17:00:43 2026 GMT
            Not After : May 13 17:00:43 2026 GMT
        Subject: CN=fcec2b6fdbc5eea70fd7c3d9b11ccd71d7962db8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5b:16:3d:43:f5:42:b7:af:c5:7f:8f:cb:7b:
                    70:91:c1:52:ef:e0:16:07:98:8b:46:23:b2:12:73:
                    e2:9e:46:3b:ed:26:3d:de:28:a7:1b:f5:61:97:e6:
                    03:22:43:d1:bc:8b:d9:a4:98:28:93:0d:0a:21:ab:
                    15:79:92:c7:44:16:28:85:d1:47:37:e9:f1:e8:62:
                    86:72:f4:2a:7d:3f:09:db:db:9d:4f:a5:0b:a1:cb:
                    03:7a:d6:28:94:df:83:33:bf:8e:cc:b5:c2:00:1a:
                    2b:e7:6a:0f:51:3b:e7:81:8a:22:c5:9d:f0:f4:4b:
                    63:44:f4:b4:d9:d3:2c:f1:00:f8:1f:ed:23:d8:24:
                    36:c5:fd:2d:94:54:e0:72:91:82:4e:3e:a1:36:2f:
                    de:95:e8:8c:e1:b1:81:8d:43:39:ee:95:5a:4b:ae:
                    86:df:f0:6b:78:94:e3:2f:6d:ac:3c:8b:7b:95:55:
                    e8:30:d7:31:88:0c:78:b3:e8:1b:3b:71:d1:11:9e:
                    0d:ef:5c:8d:bc:b5:45:ee:32:54:d7:b2:59:9e:a8:
                    3e:69:5a:c7:fe:d8:37:01:9e:5d:71:fb:81:90:73:
                    3e:ad:3c:d2:e7:77:80:52:6b:cf:41:24:7d:a0:66:
                    17:88:06:79:b9:a0:b4:e9:32:90:e5:78:71:16:b7:
                    d6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:EC:2B:6F:DB:C5:EE:A7:0F:D7:C3:D9:B1:1C:CD:71:D7:96:2D:B8
            X509v3 Authority Key Identifier:
                keyid:57:4E:25:A1:6E:5D:3A:A1:10:AC:5E:83:35:F8:8F:63:E5:4B:42:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:5e:ce:0d:29:b7:70:e3:9c:b4:be:35:8f:79:e8:e0:ae:82:
         42:ec:fe:70:8b:cb:46:10:bb:48:5d:0b:58:a4:be:6e:6e:48:
         ad:37:5f:4d:92:68:99:93:a6:a8:7d:ae:b7:74:af:6a:60:7c:
         d8:d4:31:9b:81:25:0e:72:0a:e3:fe:73:31:4e:c9:14:af:43:
         bf:43:96:a4:ca:09:a8:3a:5b:e0:cc:12:95:28:0c:e9:cd:da:
         fa:98:a4:06:2a:5a:56:77:47:d1:ef:4d:db:d1:c2:ad:8c:3e:
         4a:a9:6f:18:a4:09:bc:f7:da:27:a2:c6:94:ff:6c:ff:f0:7a:
         48:e6:de:17:ef:59:de:14:49:f1:b8:e7:20:89:88:e9:88:0a:
         d0:72:38:41:16:2c:c9:8f:f9:86:d8:7c:42:d0:e2:c6:ea:42:
         31:f3:4b:69:c1:85:a6:30:39:74:31:d9:25:9d:38:b3:a7:4c:
         de:57:ef:cd:60:25:5d:4d:d1:15:d1:42:1c:54:8d:ac:11:e2:
         0f:bf:ad:10:4e:78:ea:7f:72:e5:6e:5d:93:fa:42:a9:9d:30:
         6c:9c:69:80:1f:5b:4b:71:0a:4f:15:85:c1:5d:12:98:bc:92:
         8f:4b:c8:05:24:18:d6:de:cf:3d:4a:e6:92:43:5d:b4:56:af:
         da:88:ed:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:27:15 2026 by rpki-client