Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
File:                     sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft (raw, json)
Hash identifier:          V2tZO/FVULRUjLvujPcX+2Bq3HXLsT9kt3Y5PRWV7LY=
Subject key identifier:   25:07:D2:B4:BB:C9:1C:3F:8D:D7:4F:68:39:67:DC:47:B8:CD:01:5E
Authority key identifier: B0:D6:2D:16:66:C5:C4:D1:92:18:35:31:58:4A:FD:72:BE:D0:84:85
Certificate issuer:       /CN=b0d62d1666c5c4d192183531584afd72bed08485
Certificate serial:       019E1EA2AA10E96DA83B1428CF54AEBCDBFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
Manifest number:          1909
Signing time:             Wed 13 May 2026 00:00:37 +0000
Manifest this update:     Wed 13 May 2026 00:00:37 +0000
Manifest next update:     Thu 14 May 2026 00:00:37 +0000
Files and hashes:         1: 6Ie5sPRwouKDZ63tHw4hyjJqq10.roa (hash: XieQfcrAZvNQQrTrpSeqvq6G/q8IwApTZ6vvc3HLXb0=)
                          2: sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl (hash: wpzEKiaPDSX4wlrXO7FjUhkUZFpPwXkiskLkigFptR8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a2:aa:10:e9:6d:a8:3b:14:28:cf:54:ae:bc:db:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0d62d1666c5c4d192183531584afd72bed08485
        Validity
            Not Before: May 13 00:00:37 2026 GMT
            Not After : May 14 00:00:37 2026 GMT
        Subject: CN=2507d2b4bbc91c3f8dd74f683967dc47b8cd015e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:1e:28:1f:2f:af:28:13:b2:b6:22:fa:11:42:
                    2a:38:12:35:fd:6e:fc:fc:a9:32:5f:bd:9b:35:c8:
                    e5:b4:bd:0b:98:ae:37:a1:2b:01:9f:ea:ea:b7:af:
                    b5:52:d2:7c:60:b1:73:e0:d2:47:03:bb:79:55:4a:
                    ac:e9:1c:eb:22:ed:a9:b2:14:81:52:1f:df:26:ec:
                    42:b4:e3:9c:6b:0a:00:7f:a2:dc:58:86:91:21:ef:
                    3d:86:8f:b1:72:db:52:f4:c2:07:b7:95:53:29:8b:
                    f5:07:ea:7e:89:b2:84:59:1d:d5:88:50:cf:a6:e5:
                    cc:cf:35:bb:47:3e:f1:6f:c7:86:8d:94:41:f2:75:
                    54:64:27:4a:dd:ab:8c:5f:25:f2:34:68:d8:b6:87:
                    07:18:85:23:4e:30:b2:f4:04:21:b3:7b:48:ed:1a:
                    9b:e2:59:e1:20:7e:8a:1e:2d:44:37:be:fd:4b:f2:
                    e3:0b:52:fb:6b:35:8f:33:5c:13:12:23:ec:7e:56:
                    9d:0a:59:04:e0:6c:56:5f:41:06:b8:31:3b:5a:f2:
                    82:ea:82:12:0f:e3:e3:c6:97:95:7a:01:15:a6:b5:
                    e8:48:54:0f:2f:0a:72:f7:e3:57:b6:77:87:4a:ef:
                    94:78:cb:bf:9f:ca:fd:5d:7b:48:ec:11:2b:9e:2c:
                    c5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:07:D2:B4:BB:C9:1C:3F:8D:D7:4F:68:39:67:DC:47:B8:CD:01:5E
            X509v3 Authority Key Identifier:
                keyid:B0:D6:2D:16:66:C5:C4:D1:92:18:35:31:58:4A:FD:72:BE:D0:84:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:59:78:2b:50:3f:51:f7:9d:a9:aa:12:fc:56:39:b8:86:0c:
         0c:27:28:62:3a:e3:72:a7:e7:44:cc:34:64:1a:6c:3e:3b:75:
         33:40:d3:c9:10:d4:04:76:99:db:ee:95:28:4c:28:d3:33:0e:
         62:c7:32:36:2e:86:82:31:c2:40:94:44:68:ff:76:9c:67:05:
         d9:c3:38:5f:fa:49:4c:ae:12:0f:8d:f5:71:6b:dc:b1:99:8c:
         f4:c1:9d:2e:a8:1a:fa:f1:2f:8b:ea:ff:1a:7c:80:bc:07:f3:
         a9:d7:05:5e:72:5e:2b:80:27:1a:6d:99:7e:cb:b1:6e:f8:5d:
         79:a3:d6:52:6d:4f:cd:b6:76:e4:91:dc:ee:6c:19:e0:bc:5a:
         bd:ea:b5:93:31:41:78:36:ea:9b:04:eb:eb:c4:cd:31:1f:c1:
         6c:80:ac:11:f2:84:a1:4e:bf:b7:71:6b:90:31:0c:77:d4:ef:
         87:12:2e:68:94:f6:5c:7d:17:63:a1:2c:96:3a:4f:1b:6a:08:
         7d:f2:f0:6d:fc:b2:05:73:8b:ed:3a:00:80:b5:2f:ee:48:73:
         e8:2a:99:2a:d6:7f:23:43:4b:fb:78:58:56:a9:b1:02:67:fa:
         a6:81:14:97:12:54:ee:71:51:3d:8f:5f:6b:a9:62:8d:eb:2b:
         a5:52:8c:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eoqoQ6W2oOxQoz1SuvNv6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwZDYyZDE2NjZjNWM0ZDE5MjE4MzUzMTU4NGFmZDcyYmVk
MDg0ODUwHhcNMjYwNTEzMDAwMDM3WhcNMjYwNTE0MDAwMDM3WjAzMTEwLwYDVQQD
EygyNTA3ZDJiNGJiYzkxYzNmOGRkNzRmNjgzOTY3ZGM0N2I4Y2QwMTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6h4oHy+vKBOytiL6EUIqOBI1/W78
/KkyX72bNcjltL0LmK43oSsBn+rqt6+1UtJ8YLFz4NJHA7t5VUqs6RzrIu2pshSB
Uh/fJuxCtOOcawoAf6LcWIaRIe89ho+xcttS9MIHt5VTKYv1B+p+ibKEWR3ViFDP
puXMzzW7Rz7xb8eGjZRB8nVUZCdK3auMXyXyNGjYtocHGIUjTjCy9AQhs3tI7Rqb
4lnhIH6KHi1EN779S/LjC1L7azWPM1wTEiPsfladClkE4GxWX0EGuDE7WvKC6oIS
D+PjxpeVegEVprXoSFQPLwpy9+NXtneHSu+UeMu/n8r9XXtI7BErnizFMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCUH0rS7yRw/jddPaDln3Ee4zQFeMB8GA1UdIwQY
MBaAFLDWLRZmxcTRkhg1MVhK/XK+0ISFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc05ZdEZtYkZ4TkdTR0RVeFdFcjljcjdRaElVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iNGFhNjMtNDI1OS00NGU2LWFjMjkt
NGZhNTNiZjBlMTU1LzEvc05ZdEZtYkZ4TkdTR0RVeFdFcjljcjdRaElVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9iNGFhNjMtNDI1OS00NGU2LWFjMjktNGZhNTNiZjBlMTU1
LzEvc05ZdEZtYkZ4TkdTR0RVeFdFcjljcjdRaElVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfFl4K1A/
UfedqaoS/FY5uIYMDCcoYjrjcqfnRMw0ZBpsPjt1M0DTyRDUBHaZ2+6VKEwo0zMO
YscyNi6GgjHCQJREaP92nGcF2cM4X/pJTK4SD431cWvcsZmM9MGdLqga+vEvi+r/
GnyAvAfzqdcFXnJeK4AnGm2ZfsuxbvhdeaPWUm1PzbZ25JHc7mwZ4Lxaveq1kzFB
eDbqmwTr68TNMR/BbICsEfKEoU6/t3FrkDEMd9TvhxIuaJT2XH0XY6EsljpPG2oI
ffLwbfyyBXOL7ToAgLUv7khz6CqZKtZ/I0NL+3hYVqmxAmf6poEUlxJU7nFRPY9f
a6lijesrpVKMRg==
-----END CERTIFICATE-----
Generated at Wed May 13 05:39:05 2026 by rpki-client