Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft
File:                     3E5FOv_olbZFK4QCdDfFwA_TcGc.mft (raw, json)
Hash identifier:          a8rvCU/mFTtTQEcfJTnRHf8Gp/6FVuw3q5v+jN4rYzI=
Subject key identifier:   BB:24:DD:01:87:58:61:0D:7F:54:AF:13:D1:6F:A2:7D:05:58:F4:86
Authority key identifier: DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
Certificate issuer:       /CN=dc4e453affe895b6452b84027437c5c00fd37067
Certificate serial:       019E1C7DCCA7D673A148FE084A1BBCC82389
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft
Manifest number:          191F
Signing time:             Tue 12 May 2026 14:01:06 +0000
Manifest this update:     Tue 12 May 2026 14:01:06 +0000
Manifest next update:     Wed 13 May 2026 14:01:06 +0000
Files and hashes:         1: 3E5FOv_olbZFK4QCdDfFwA_TcGc.crl (hash: Tvh0nqI3mLp7qtydOIAwzPKCGLKBp10zG0H/7DDtLX8=)
                          2: 4SNFp6iYtBMi4zD2eo7t1Q8ufcI.roa (hash: 0dpWI2PXhik+N7S7lz0H4gx+qXCOtuPMoys6zPW4AAE=)
                          3: EB7WqqxXodos-Bnfwa3U1V_EWyk.roa (hash: mUbVMHBEzz3yLOktyc5V1n031Bt7w2ivVLElxz97H04=)
                          4: LR-gOJTdtI8bzPduiQVCYwkMZFA.roa (hash: bVwiIJwDd0Bu+uS+HlMtLfyphNhcg2aLcVX98Jb8Wj8=)
                          5: Ub8GbvDA35aTIzVecXGmXtHsXEc.roa (hash: elt6C1OboYliVZXwfhYgZV3fxNGiHeY3wGhmbW2ynL4=)
                          6: yW8TWZLrtFaFqiAuiN0m0gWF_fI.roa (hash: 9L+sA1TE/tnPgnqt0eplM+GhjWLDs24P3usFFtq4BoU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:7d:cc:a7:d6:73:a1:48:fe:08:4a:1b:bc:c8:23:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc4e453affe895b6452b84027437c5c00fd37067
        Validity
            Not Before: May 12 14:01:06 2026 GMT
            Not After : May 13 14:01:06 2026 GMT
        Subject: CN=bb24dd018758610d7f54af13d16fa27d0558f486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ff:4a:54:4d:3f:4d:16:db:22:74:aa:3b:b9:
                    da:70:4f:f6:bc:e6:a5:dc:29:db:66:d9:ec:c4:81:
                    e6:0b:2e:6b:37:84:77:a3:d5:b3:0a:99:de:ad:bd:
                    fe:48:1d:d7:a7:a5:19:10:d0:01:f3:63:65:b6:e2:
                    e1:be:4a:df:1a:7f:7a:0e:8a:24:ee:61:21:c3:bb:
                    44:72:c2:b6:38:ef:f0:f2:0d:17:a8:f9:64:a7:83:
                    78:71:ff:f5:05:50:e5:dc:3c:1c:4b:05:bf:40:a0:
                    91:be:aa:27:42:89:42:01:63:38:88:90:1f:f5:24:
                    2c:68:a1:56:43:55:df:61:ec:51:64:a1:4a:4b:59:
                    ef:9d:4b:e0:e0:af:af:73:d0:2d:bb:94:ee:3e:f7:
                    a3:54:26:05:13:d2:73:0d:35:ad:7f:f2:bf:89:49:
                    86:ef:21:84:36:21:76:ea:20:fc:3e:91:bd:4a:ff:
                    30:58:dd:10:68:47:ec:7b:cf:44:53:32:33:9e:d7:
                    e9:8b:67:eb:3a:19:e9:b2:21:48:67:d3:9f:56:71:
                    fd:78:d0:20:ac:1d:66:4b:28:cb:d1:6b:d9:2b:48:
                    c2:cd:11:90:cd:35:92:8b:96:71:e3:ba:46:6b:05:
                    30:ce:68:f1:3f:da:de:24:34:77:41:b3:70:0c:1b:
                    14:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:24:DD:01:87:58:61:0D:7F:54:AF:13:D1:6F:A2:7D:05:58:F4:86
            X509v3 Authority Key Identifier:
                keyid:DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:8c:90:9b:a3:0a:e1:8d:89:4c:fd:53:04:83:1b:b6:b9:c1:
         9a:99:dd:a8:58:ba:b0:f9:9a:55:35:6f:81:8b:60:8b:61:ee:
         73:48:2d:f0:9c:87:dc:43:26:32:ec:e5:51:d2:40:24:fe:22:
         0a:6b:e1:bf:42:2d:98:24:f1:36:19:f4:b4:3c:da:c9:31:41:
         cf:b8:0b:58:a8:53:f3:c5:9e:40:87:b6:96:58:78:42:89:89:
         20:4d:37:e8:a9:e8:43:87:d2:b4:5a:d6:25:7c:d1:11:cb:91:
         e6:10:2d:32:8b:45:2d:fe:f1:7d:34:94:ce:0d:2e:f6:42:da:
         6c:c9:73:29:1a:30:aa:7b:a4:68:e0:a7:e2:df:b8:8a:3d:b0:
         ca:76:51:47:e3:e7:76:97:f6:83:62:37:2e:0a:db:45:f1:f1:
         e8:41:7b:87:8f:5c:a9:b1:35:31:77:d9:75:a3:9c:27:44:55:
         ac:6d:d0:7e:5a:8a:32:26:2d:f0:a5:f3:32:2b:a8:99:59:37:
         cd:25:7d:0a:7a:67:99:a9:4d:42:ed:d2:be:09:e4:8e:84:77:
         cb:e4:0b:df:75:84:c9:f2:4c:e9:0f:0c:6b:18:73:a4:43:b6:
         d7:75:c1:0c:5c:49:5e:4a:02:5e:cd:8d:07:5d:bb:2c:2d:15:
         64:eb:18:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:21:54 2026 by rpki-client