Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
File:                     E38zct9XyBSrqLUakHhh2SueT1U.mft (raw, json)
Hash identifier:          pamB1aRoRAfE6G1zMrcFn5uOW/AxLGuYGFRgR9pTmXY=
Subject key identifier:   C0:06:9F:44:71:C5:99:7A:30:E5:6E:24:58:04:65:B9:2D:78:F3:2A
Authority key identifier: 13:7F:33:72:DF:57:C8:14:AB:A8:B5:1A:90:78:61:D9:2B:9E:4F:55
Certificate issuer:       /CN=137f3372df57c814aba8b51a907861d92b9e4f55
Certificate serial:       019E1DFEBBE67DB42E891C2E8D4ADA20424E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
Manifest number:          1909
Signing time:             Tue 12 May 2026 21:01:33 +0000
Manifest this update:     Tue 12 May 2026 21:01:33 +0000
Manifest next update:     Wed 13 May 2026 21:01:33 +0000
Files and hashes:         1: CwDjP9tnkLMqRQJExwbW5a8tb2c.roa (hash: Cvhm4+Ug1T3hSPp5fKBEvpgdxdZDIyd8JjxFJnRL+xc=)
                          2: E38zct9XyBSrqLUakHhh2SueT1U.crl (hash: 5otZrbMjRzrvEBOknzmxfaQn7a6hMoBWWECfRgBwmtk=)
                          3: dYc4QHw_MlBGkai83ebw6UpAabw.roa (hash: PhHK3yJG/efNPRvamiA5Euk3gsAbVkNsvmnaGEDrJ+4=)
                          4: lV7YMWxQNgA7TeXSrVvxVEzp5zI.roa (hash: gNnh1Gc1ZxAnhLjUx2sE8mDgR6U7dHMmlaCZ5/JRTJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:bb:e6:7d:b4:2e:89:1c:2e:8d:4a:da:20:42:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137f3372df57c814aba8b51a907861d92b9e4f55
        Validity
            Not Before: May 12 21:01:33 2026 GMT
            Not After : May 13 21:01:33 2026 GMT
        Subject: CN=c0069f4471c5997a30e56e24580465b92d78f32a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:92:ec:c8:d3:37:79:b6:4d:ca:95:3b:a8:fb:
                    07:d0:1b:6a:56:5e:32:74:56:69:a3:a9:4e:4c:9c:
                    bd:3d:28:42:4e:86:32:82:98:02:b0:1b:2f:b8:90:
                    8c:dc:fe:62:bb:3a:49:13:c0:7a:7e:a1:28:76:c6:
                    13:ed:62:1b:1c:65:66:7c:1d:8a:47:ae:7b:6a:46:
                    0d:a9:ed:12:d8:82:9e:be:90:f7:61:73:3e:c1:fc:
                    3c:50:00:ed:86:74:88:dd:0c:ce:0d:0a:88:7d:42:
                    35:28:41:06:90:21:78:86:42:0c:40:6b:17:c1:f8:
                    07:d8:e6:b1:e9:ba:28:27:a4:4d:e3:b3:92:d0:dd:
                    1b:e5:43:dc:2c:a4:29:2a:d2:7f:b6:4a:f1:32:a8:
                    02:f4:a1:29:e1:e8:b6:5a:11:b0:df:7c:03:e4:48:
                    89:a6:97:bc:2c:80:46:48:c0:82:f3:59:f2:5b:f3:
                    b6:6d:d4:1e:6f:45:04:2a:73:c0:d0:91:ad:c0:98:
                    f0:9f:4b:ad:fe:d5:47:68:c3:10:04:6f:d1:61:51:
                    5e:07:40:94:44:52:b6:a0:c6:cf:7e:da:82:87:f1:
                    9b:30:ee:60:f7:c8:85:73:bb:de:2f:14:bc:c2:7f:
                    fe:e7:fc:fc:da:4a:7a:7f:60:79:60:ae:14:cd:f5:
                    f2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:06:9F:44:71:C5:99:7A:30:E5:6E:24:58:04:65:B9:2D:78:F3:2A
            X509v3 Authority Key Identifier:
                keyid:13:7F:33:72:DF:57:C8:14:AB:A8:B5:1A:90:78:61:D9:2B:9E:4F:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:f9:51:cf:88:35:1b:dc:ff:4d:56:34:d3:f1:34:2b:4b:68:
         63:35:78:2d:2d:d2:7e:db:89:cb:99:2e:59:31:da:93:f6:60:
         a2:2a:ed:d1:f4:f6:01:57:aa:79:3f:02:fd:29:9d:50:12:1c:
         e7:13:38:05:b8:81:bd:2f:6c:06:bc:da:b2:36:bc:17:45:0f:
         2d:80:be:dc:7c:2f:59:3b:d5:42:10:55:24:67:6d:cc:31:e5:
         96:21:54:93:1a:43:db:1d:f8:c7:17:77:ff:3c:3d:7e:4f:57:
         5e:f8:20:8b:52:67:f4:95:e0:a1:98:84:a0:ec:da:0d:5c:2c:
         68:49:a4:03:00:bb:5a:92:1b:5e:88:d7:77:f0:73:d1:99:d5:
         e1:a8:a5:e4:0a:00:12:03:d7:f8:9a:1d:da:eb:6d:e9:89:c5:
         f9:4d:4d:bd:92:8e:68:51:2b:25:f0:50:a4:c8:38:21:67:e9:
         97:fa:ea:7b:7c:ba:ae:a9:56:c1:6f:87:98:c0:21:20:47:98:
         3d:b2:a1:33:5e:b7:c5:dd:e1:95:57:c8:ce:eb:75:ad:da:ec:
         12:6b:45:fa:c6:ac:0d:b5:57:c1:74:28:10:8a:a2:05:87:8f:
         f7:28:4a:9f:a2:21:84:b4:1f:f3:4c:e0:bb:a0:10:58:01:28:
         9a:3b:7c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:01:14 2026 by rpki-client