Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
File:                     s-98dqs-aXHY-HMC3fksxgmISeo.mft (raw, json)
Hash identifier:          h+oxSXwLlTA/x8nuHvPH/ta7kS3yk5amM+iFo54HI3o=
Subject key identifier:   16:D4:BF:CC:EB:16:89:7F:F4:6B:87:B8:8B:FA:5E:E5:C9:15:19:E2
Authority key identifier: B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA
Certificate issuer:       /CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea
Certificate serial:       019E1FECC91D5315B50169224B93D2DC17F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
Manifest number:          190A
Signing time:             Wed 13 May 2026 06:01:12 +0000
Manifest this update:     Wed 13 May 2026 06:01:12 +0000
Manifest next update:     Thu 14 May 2026 06:01:12 +0000
Files and hashes:         1: dtqeW6Rynd2uiXS65wqI97i2PSI.roa (hash: ZHCN5Dvp384mlS+qqUt7NWTOJvWvW2F7gnjX0CX9nTI=)
                          2: s-98dqs-aXHY-HMC3fksxgmISeo.crl (hash: zgw+RbD0tU+m+kqsipnKzERlDRV0dGjFujX6eFvincw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ec:c9:1d:53:15:b5:01:69:22:4b:93:d2:dc:17:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea
        Validity
            Not Before: May 13 06:01:12 2026 GMT
            Not After : May 14 06:01:12 2026 GMT
        Subject: CN=16d4bfcceb16897ff46b87b88bfa5ee5c91519e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:75:90:d4:1a:42:75:39:1e:78:cc:52:89:ce:
                    b0:57:17:e6:cb:7e:b2:64:d8:a4:ad:f3:51:e1:84:
                    95:da:a7:3e:ee:b8:d7:d3:5e:c6:9d:c9:bc:92:30:
                    ef:3b:d4:33:92:bc:8a:83:69:09:80:26:3f:51:93:
                    3a:f9:c4:0a:0f:07:df:cc:86:00:2c:56:1c:81:5a:
                    41:a5:15:a3:e8:11:4a:5e:16:9e:60:d5:29:b2:73:
                    91:ff:00:3f:e9:2d:6b:6c:4b:c3:40:8a:01:f4:0a:
                    3d:b2:52:b0:33:b5:61:68:85:e7:31:3c:8e:c8:3f:
                    28:6d:1f:69:3d:42:31:b8:c2:4b:5a:92:fe:f7:aa:
                    da:7d:ec:b9:a5:45:f1:c9:2c:82:57:8c:3d:74:24:
                    71:df:11:fb:bf:84:78:3c:84:5a:c1:5e:b2:97:77:
                    36:31:08:c9:d4:85:02:11:36:1d:0c:2e:26:44:92:
                    a5:e0:9c:34:a7:b1:17:64:85:46:37:ba:0b:d5:5f:
                    34:1d:ec:6e:fd:5e:a5:47:a0:ed:17:99:62:fe:12:
                    a6:21:c8:06:54:f8:81:17:c4:1d:51:7d:ac:4d:e7:
                    10:f3:42:a3:8f:60:94:a6:97:10:e9:2a:73:7f:d3:
                    76:e9:62:f9:1d:2e:69:c4:06:e5:05:07:f0:df:fd:
                    a7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D4:BF:CC:EB:16:89:7F:F4:6B:87:B8:8B:FA:5E:E5:C9:15:19:E2
            X509v3 Authority Key Identifier:
                keyid:B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:14:95:ea:e6:59:30:95:60:c8:b2:e2:7f:60:24:94:63:51:
         41:63:69:bd:00:87:5d:54:42:bb:2d:10:ad:5e:9b:dc:9c:db:
         6b:bb:e0:e0:50:1f:5b:c1:c2:36:ad:55:31:82:f9:3c:b1:ed:
         df:96:58:7f:a8:68:c9:5e:7c:57:61:7c:c3:33:74:3e:b7:66:
         a0:1e:66:87:7f:21:54:c8:b5:c3:8b:c0:3b:55:db:da:23:16:
         9d:0e:63:2f:1f:73:a0:71:bc:22:17:2c:c3:14:b4:67:8e:cd:
         04:4f:d9:1b:d8:67:ae:13:f3:99:17:69:df:fe:28:45:81:68:
         3a:eb:4d:42:82:04:a0:9f:84:88:20:66:2f:32:e2:ba:e6:a5:
         35:73:5d:34:99:de:6d:da:82:75:a1:af:bf:da:cf:55:8a:b2:
         41:71:99:00:4f:d1:8c:17:8e:04:75:36:f3:59:40:72:0a:8e:
         93:a3:c5:b7:c1:a4:bd:08:7f:c3:75:07:11:8e:95:da:34:40:
         01:bf:3a:06:85:00:56:1e:4d:6e:51:b2:fe:85:f5:4c:e8:44:
         82:51:2b:33:36:a6:c8:5e:81:9e:c8:9c:f8:ed:5d:51:c8:44:
         71:08:0c:1a:ef:5e:d0:66:5d:17:fe:7e:26:bd:7c:10:d6:1a:
         44:17:26:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:59:43 2026 by rpki-client