Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft
File:                     ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft (raw, json)
Hash identifier:          dAirYWAYKSBAG06x3Qhg08LYihIBP8Vr0VNlP2TZeA8=
Subject key identifier:   04:75:C2:EC:EB:87:92:63:60:78:BA:20:65:F6:73:C4:46:27:0D:2C
Authority key identifier: 8A:38:D1:19:1F:66:F1:F0:31:5D:E5:F4:5C:C1:94:D1:CD:19:D1:FB
Certificate issuer:       /CN=8a38d1191f66f1f0315de5f45cc194d1cd19d1fb
Certificate serial:       019E2023D6B1A2DC7B170A1F3F9E88A9896F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft
Manifest number:          1907
Signing time:             Wed 13 May 2026 07:01:20 +0000
Manifest this update:     Wed 13 May 2026 07:01:20 +0000
Manifest next update:     Thu 14 May 2026 07:01:20 +0000
Files and hashes:         1: Isf0X2VA5k71HKCeTyJN9hXCDdw.roa (hash: moujoYkwbdpd8nceyk8u6dwvR2yVCkwxf/DT9Cg/itk=)
                          2: ijjRGR9m8fAxXeX0XMGU0c0Z0fs.crl (hash: 1o8UP/VlSDD8F5APBJTBIjcDeZQ1vVoBCT1QQonEH6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 07:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:23:d6:b1:a2:dc:7b:17:0a:1f:3f:9e:88:a9:89:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a38d1191f66f1f0315de5f45cc194d1cd19d1fb
        Validity
            Not Before: May 13 07:01:20 2026 GMT
            Not After : May 14 07:01:20 2026 GMT
        Subject: CN=0475c2eceb8792636078ba2065f673c446270d2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fc:53:4c:c2:7c:5b:74:51:f6:66:ea:42:e7:
                    58:20:de:f1:fe:a6:a4:2e:5b:e9:a2:4a:00:8b:c7:
                    e4:1c:ac:41:1c:92:89:ac:e3:33:45:0a:42:ec:c0:
                    2e:4c:ca:2c:49:9f:98:da:1a:56:e0:89:48:3a:5f:
                    62:95:44:ce:ff:6d:ed:e4:5f:61:37:f2:68:c6:6f:
                    c9:f5:90:95:06:56:be:76:a1:50:52:77:d0:4f:16:
                    a8:73:cc:34:ed:13:c6:3a:80:ae:24:df:f8:7d:1d:
                    bb:a6:e2:f8:66:d2:54:c6:0b:67:2c:6e:1f:22:4c:
                    05:43:a8:2a:e5:1c:39:74:22:51:02:98:bb:df:aa:
                    cd:fa:2a:36:3a:20:ff:f8:bd:1b:c5:61:fb:57:8d:
                    5d:9c:c3:cf:13:e2:ab:84:9f:d0:c9:c4:9b:70:c3:
                    6f:9b:70:09:31:ff:5f:3a:d2:be:93:1e:19:ca:b2:
                    b2:85:bb:de:05:2f:73:fc:21:14:91:81:0a:6a:11:
                    e4:09:8a:1b:6f:79:e2:f8:41:07:09:35:e6:7f:0b:
                    14:e0:d6:d0:d5:6b:33:05:f9:c5:f9:57:fb:d8:e5:
                    68:4a:28:4f:ba:2f:29:10:e1:d5:cf:20:1c:1f:ef:
                    aa:f5:ef:ff:c3:e4:28:16:33:f6:bc:0d:a2:6c:25:
                    0a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:75:C2:EC:EB:87:92:63:60:78:BA:20:65:F6:73:C4:46:27:0D:2C
            X509v3 Authority Key Identifier:
                keyid:8A:38:D1:19:1F:66:F1:F0:31:5D:E5:F4:5C:C1:94:D1:CD:19:D1:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:4a:e5:c4:23:e3:0c:46:78:a6:94:5d:d4:aa:d8:75:1c:88:
         14:83:d5:43:bb:e8:f4:52:d1:1d:6f:2a:81:7a:50:60:ab:a8:
         e6:74:a4:ad:1e:e0:aa:b3:28:79:b7:c3:6b:72:2d:32:af:71:
         73:79:35:1e:84:e5:ec:62:89:77:55:0d:d2:e0:b5:d8:7a:43:
         28:07:c6:57:7a:34:e8:48:a7:ae:7e:bf:46:91:ef:c9:52:30:
         71:c7:3a:a4:ec:d9:57:71:d3:36:41:9b:c5:6c:d2:67:aa:07:
         94:88:5b:70:2d:30:f2:7a:e0:4c:01:2a:7e:e0:ee:bd:9d:0b:
         11:53:b5:82:d0:5d:c2:0a:c9:8d:bc:36:1b:90:96:24:0e:b8:
         cc:82:be:da:59:ca:98:f1:83:85:17:cf:91:20:98:16:80:98:
         27:34:3e:aa:bd:2b:20:9d:fe:ab:72:ec:2f:29:c4:d2:aa:ee:
         10:47:3c:06:03:ee:e5:27:8f:4b:a0:2d:e0:cf:1a:d7:01:71:
         51:d4:97:a9:90:55:cf:64:27:a0:9b:05:4f:9a:10:ad:6f:cc:
         52:b4:6c:04:49:3f:0b:83:c1:6d:21:8c:cd:f7:cf:2e:16:94:
         d1:2b:9c:7e:b8:d4:50:dd:3f:60:93:97:6d:42:ff:a3:3f:7f:
         26:21:4d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:25:56 2026 by rpki-client