Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft
File:                     rf2QyzV0L55YHoy98OPhI6hJyDA.mft (raw, json)
Hash identifier:          Wirt2JWqPGpqIZ8HdmHPOIroOD8yEIMh+nyL9+3gzEo=
Subject key identifier:   0B:2A:53:BD:88:A8:D5:33:83:0C:3E:74:D9:CD:92:05:4B:0E:8D:65
Authority key identifier: AD:FD:90:CB:35:74:2F:9E:58:1E:8C:BD:F0:E3:E1:23:A8:49:C8:30
Certificate issuer:       /CN=adfd90cb35742f9e581e8cbdf0e3e123a849c830
Certificate serial:       019E1D228406B29E02C963D2080663779D09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft
Manifest number:          1899
Signing time:             Tue 12 May 2026 17:01:01 +0000
Manifest this update:     Tue 12 May 2026 17:01:01 +0000
Manifest next update:     Wed 13 May 2026 17:01:01 +0000
Files and hashes:         1: rf2QyzV0L55YHoy98OPhI6hJyDA.crl (hash: tkmL0xutWkvMpu2XK48RMob4wQVbImShSXfyZpIQX8o=)
                          2: zilAvi0gPY9JFc-GVd3-_608WgE.roa (hash: ZyVYNr8SF0SGWYnff8EK2MHWbU5TL3VAzX0qJ7R6ce0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 17:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:84:06:b2:9e:02:c9:63:d2:08:06:63:77:9d:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adfd90cb35742f9e581e8cbdf0e3e123a849c830
        Validity
            Not Before: May 12 17:01:01 2026 GMT
            Not After : May 13 17:01:01 2026 GMT
        Subject: CN=0b2a53bd88a8d533830c3e74d9cd92054b0e8d65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a4:a4:42:e3:a1:5b:ab:10:cc:0a:1c:40:62:
                    9a:28:d2:66:fb:16:84:b8:db:4c:bf:4f:3f:eb:b0:
                    62:c3:50:ab:06:82:a3:36:e0:c8:11:04:a5:9e:03:
                    07:88:21:d9:db:8c:81:53:15:07:3c:e7:dc:f0:48:
                    90:dc:00:75:b0:d3:e6:98:02:c0:a4:53:02:f7:8c:
                    d7:7f:c4:a0:37:07:b5:8d:b2:a7:b7:ba:6f:53:39:
                    6a:3a:61:27:04:74:fd:f5:aa:c3:10:62:cf:0f:e2:
                    c2:ff:56:03:9a:9a:df:bc:05:4d:d4:f6:96:f3:6c:
                    7c:b0:e6:46:69:ce:b4:f3:a3:af:a8:ec:e5:e5:98:
                    20:b4:9a:96:ac:26:20:1d:a3:9f:45:97:8d:43:50:
                    bb:68:b3:14:7f:dd:75:5a:e0:0f:2d:47:6e:61:41:
                    f3:50:b2:36:e3:69:00:c9:ad:fc:a5:f0:b0:53:61:
                    e7:d7:05:0b:52:6a:5d:12:74:e1:26:c8:e7:3c:cc:
                    d3:b4:a0:20:6c:4c:dd:1d:4f:6f:e8:ed:d0:2e:ff:
                    cb:5b:98:5a:0a:7f:1c:3a:c5:c0:3a:23:ef:76:3b:
                    fd:ee:bc:35:35:30:0a:3c:00:e4:c6:f4:0d:9b:27:
                    80:92:9b:c6:87:65:ea:ab:99:18:2d:e6:fc:66:6f:
                    fc:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:2A:53:BD:88:A8:D5:33:83:0C:3E:74:D9:CD:92:05:4B:0E:8D:65
            X509v3 Authority Key Identifier:
                keyid:AD:FD:90:CB:35:74:2F:9E:58:1E:8C:BD:F0:E3:E1:23:A8:49:C8:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:ef:77:6b:90:97:c8:8b:83:e7:eb:e3:5e:16:05:0f:aa:2e:
         57:82:87:c3:2f:08:51:09:26:99:e2:80:c9:27:37:4c:76:1d:
         00:1a:a7:64:c6:8a:00:b6:15:51:8d:ef:0a:38:4d:85:90:88:
         45:50:c6:43:23:aa:33:d3:65:6d:fb:d6:cf:b6:bb:4b:7c:cf:
         89:79:03:ed:76:ea:ca:31:b7:22:83:7e:6e:22:e3:00:56:1d:
         55:bd:05:d4:91:f7:6b:04:3d:6b:5f:dd:a2:e9:a6:80:49:46:
         2f:b4:31:a1:c6:d8:1c:f0:6d:90:b1:1b:87:9c:ab:96:7c:92:
         e3:bb:22:6e:8c:ca:44:f3:c2:3a:46:36:30:d0:a3:a4:9a:2a:
         e7:53:b2:fc:1b:a1:05:43:5b:24:c6:c2:16:57:65:a9:f8:1c:
         1b:a5:30:75:d5:03:c8:59:69:f4:1b:f7:6c:42:e9:cd:6c:71:
         c4:c5:01:7e:46:d0:81:d2:8b:fd:d7:f9:df:7a:ed:6d:87:db:
         14:48:ce:95:a9:7d:37:6e:64:29:06:68:f2:ac:27:2d:20:91:
         9d:fe:b0:15:29:5e:61:07:e3:95:f6:69:72:97:35:b0:83:be:
         fb:b2:12:c8:ac:18:6b:a8:b6:c4:68:0c:92:8e:67:24:67:e2:
         3f:f0:91:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:17:53 2026 by rpki-client