Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
File:                     bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft (raw, json)
Hash identifier:          lVX3KLdxVsTnRUXMe2PiELwBYuJ9P+8sgEPDdbK1vlA=
Subject key identifier:   27:8C:F8:02:77:B9:5D:0F:2D:BC:5B:8D:02:98:A4:40:FE:9A:9E:2A
Authority key identifier: 6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07
Certificate issuer:       /CN=6cc57691c15c9eb3a379917806d294fd39175e07
Certificate serial:       019E1FB5E208F4B42667CEEEE6C56A9CC2FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
Manifest number:          190A
Signing time:             Wed 13 May 2026 05:01:13 +0000
Manifest this update:     Wed 13 May 2026 05:01:13 +0000
Manifest next update:     Thu 14 May 2026 05:01:13 +0000
Files and hashes:         1: bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl (hash: rKyGfXak9zUwQbliQj2r43SgeSLPqldbs0n0/2I8Omo=)
                          2: oetUUkO4cZ8XU4zZUrbGoYOdszE.roa (hash: wn2OyJ+kz4z5ywBpw9YbEq0aRUfcFISzvLJUM7TfkuA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:e2:08:f4:b4:26:67:ce:ee:e6:c5:6a:9c:c2:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cc57691c15c9eb3a379917806d294fd39175e07
        Validity
            Not Before: May 13 05:01:13 2026 GMT
            Not After : May 14 05:01:13 2026 GMT
        Subject: CN=278cf80277b95d0f2dbc5b8d0298a440fe9a9e2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c3:b9:83:27:28:0c:5e:3a:d9:3d:32:1b:25:
                    63:88:d4:0d:c5:5d:4c:7f:f4:ed:3a:0f:a5:32:d2:
                    fb:be:f3:f4:13:02:20:6a:07:14:4c:a5:c3:54:18:
                    35:94:f2:ac:46:94:ef:88:6c:24:e6:f1:91:d4:a4:
                    7a:74:d4:57:97:7a:e4:55:5b:d9:0f:5b:19:a4:d5:
                    a6:4a:dd:48:e0:d4:56:42:c6:30:20:b2:83:64:2d:
                    1b:8f:1d:3a:5f:3f:66:71:27:61:80:6f:e3:70:ba:
                    cb:7c:50:17:30:5b:7b:47:83:1a:0a:75:2b:42:d5:
                    42:3d:5e:4e:0e:05:c0:92:ce:32:18:fa:1d:68:12:
                    c1:c5:ab:2c:b1:2c:49:5e:10:f9:f7:a5:d0:8a:17:
                    d7:bb:78:8c:81:ee:9a:28:a8:31:86:8f:4b:f5:4a:
                    42:8f:82:14:e0:11:73:46:6b:a9:32:36:da:4f:72:
                    11:d0:cd:f9:b0:d7:e8:3e:58:a2:09:c0:75:bc:9e:
                    f8:08:c3:64:2f:1e:3a:c3:d3:52:09:8d:0b:d5:51:
                    49:a3:0b:93:49:25:2d:9e:20:75:13:06:eb:40:73:
                    3f:81:17:22:51:68:ed:bd:5d:8e:46:d6:e9:f8:cb:
                    0e:34:8a:af:df:e1:df:7e:d4:43:2e:85:26:d6:21:
                    21:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:8C:F8:02:77:B9:5D:0F:2D:BC:5B:8D:02:98:A4:40:FE:9A:9E:2A
            X509v3 Authority Key Identifier:
                keyid:6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:79:07:92:66:f9:b6:f7:0a:16:26:8f:5c:bd:5b:41:99:b8:
         47:23:25:47:3b:83:1b:a3:09:05:02:10:a5:07:4e:fc:1d:1e:
         0a:65:87:5d:84:b7:8f:e1:05:a6:43:41:40:a7:11:ef:80:38:
         71:85:a0:6a:cc:71:c0:a8:f3:6f:2b:8c:ae:0c:97:3f:d5:0f:
         5a:06:45:8a:fa:23:8a:d4:24:7b:03:27:38:6d:4a:b4:e4:90:
         4e:7f:0b:4d:fe:be:c2:b9:6b:0e:27:0c:54:15:ad:43:00:df:
         4b:e5:08:0b:5c:0f:52:4b:81:55:81:ef:3e:d4:4c:01:2c:c8:
         97:9e:a0:b1:cb:24:22:a2:0c:5e:b3:dd:b0:16:86:4b:2d:2c:
         34:2a:74:67:97:99:b4:9b:c9:c0:0e:cf:12:c8:8d:48:f2:bc:
         3f:7c:e1:af:25:d1:9d:68:92:90:a3:48:4f:49:ab:6f:74:14:
         37:90:d3:64:aa:94:db:d0:6b:1d:e1:d6:d4:ae:91:c3:d3:bc:
         5b:15:84:76:34:28:e7:c0:ea:f2:04:1d:fe:9d:8f:99:38:07:
         9b:f3:21:11:65:12:83:3b:ca:b1:38:d9:74:3e:b8:c8:0f:62:
         8f:bc:a2:6e:e6:4c:b2:ab:1a:51:be:af:71:cc:f7:15:01:de:
         c9:29:55:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fteII9LQmZ87u5sVqnML6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYzU3NjkxYzE1YzllYjNhMzc5OTE3ODA2ZDI5NGZkMzkx
NzVlMDcwHhcNMjYwNTEzMDUwMTEzWhcNMjYwNTE0MDUwMTEzWjAzMTEwLwYDVQQD
EygyNzhjZjgwMjc3Yjk1ZDBmMmRiYzViOGQwMjk4YTQ0MGZlOWE5ZTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cO5gycoDF462T0yGyVjiNQNxV1M
f/TtOg+lMtL7vvP0EwIgagcUTKXDVBg1lPKsRpTviGwk5vGR1KR6dNRXl3rkVVvZ
D1sZpNWmSt1I4NRWQsYwILKDZC0bjx06Xz9mcSdhgG/jcLrLfFAXMFt7R4MaCnUr
QtVCPV5ODgXAks4yGPodaBLBxasssSxJXhD596XQihfXu3iMge6aKKgxho9L9UpC
j4IU4BFzRmupMjbaT3IR0M35sNfoPliiCcB1vJ74CMNkLx46w9NSCY0L1VFJowuT
SSUtniB1EwbrQHM/gRciUWjtvV2ORtbp+MsONIqv3+HfftRDLoUm1iEh2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCeM+AJ3uV0PLbxbjQKYpED+mp4qMB8GA1UdIwQY
MBaAFGzFdpHBXJ6zo3mReAbSlP05F14HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk1WMmtjRmNuck9qZVpGNEJ0S1VfVGtYWGdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zYzQyZGItMTU2NS00ZWJlLWI0YmMt
ZmRkYjk2ZTZkYWQxLzEvYk1WMmtjRmNuck9qZVpGNEJ0S1VfVGtYWGdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8zYzQyZGItMTU2NS00ZWJlLWI0YmMtZmRkYjk2ZTZkYWQx
LzEvYk1WMmtjRmNuck9qZVpGNEJ0S1VfVGtYWGdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABHkHkmb5
tvcKFiaPXL1bQZm4RyMlRzuDG6MJBQIQpQdO/B0eCmWHXYS3j+EFpkNBQKcR74A4
cYWgasxxwKjzbyuMrgyXP9UPWgZFivojitQkewMnOG1KtOSQTn8LTf6+wrlrDicM
VBWtQwDfS+UIC1wPUkuBVYHvPtRMASzIl56gscskIqIMXrPdsBaGSy0sNCp0Z5eZ
tJvJwA7PEsiNSPK8P3zhryXRnWiSkKNIT0mrb3QUN5DTZKqU29BrHeHW1K6Rw9O8
WxWEdjQo58Dq8gQd/p2PmTgHm/MhEWUSgzvKsTjZdD64yA9ij7yibuZMsqsaUb6v
ccz3FQHeySlVsg==
-----END CERTIFICATE-----
Generated at Wed May 13 08:53:19 2026 by rpki-client