Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
File:                     45Dy7gpwvK7-AZWj2LN300KXqUM.mft (raw, json)
Hash identifier:          xaTXUjASa6G0oJVYvX90fwZKaL/VEgLuE0jM/OUZuQE=
Subject key identifier:   CD:75:7F:72:9A:94:EF:67:70:F7:44:44:06:E9:74:3A:27:C4:92:D0
Authority key identifier: E3:90:F2:EE:0A:70:BC:AE:FE:01:95:A3:D8:B3:77:D3:42:97:A9:43
Certificate issuer:       /CN=e390f2ee0a70bcaefe0195a3d8b377d34297a943
Certificate serial:       019E1D5951A353ABDD3B792A684B2FCC3EB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
Manifest number:          1907
Signing time:             Tue 12 May 2026 18:00:53 +0000
Manifest this update:     Tue 12 May 2026 18:00:53 +0000
Manifest next update:     Wed 13 May 2026 18:00:53 +0000
Files and hashes:         1: 45Dy7gpwvK7-AZWj2LN300KXqUM.crl (hash: HLuOdoExyuAS1y0SBBzUI95TTAmWPwVA/hUqoWNjyPM=)
                          2: acUHfVCy5j8WfhXBkKrvtIIZ6u4.roa (hash: A0ZoDSyXeoOjiHDBQQXTi7qUdiWgsEQgspWWgoPcjbU=)
                          3: mY4iCleNhrzf8aXMLmHiJ52ay4A.roa (hash: XzaZ+/TpO1ZESBFBMtwiRlJAL9YVrFYukINjmUNi5KQ=)
                          4: mflNPwnPi4f5wBAod8r23N6IFVQ.roa (hash: eCHOBETtrQl/yFYeuqvktndVXTn5G2F5otfDMkWdMXY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 18:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:51:a3:53:ab:dd:3b:79:2a:68:4b:2f:cc:3e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e390f2ee0a70bcaefe0195a3d8b377d34297a943
        Validity
            Not Before: May 12 18:00:53 2026 GMT
            Not After : May 13 18:00:53 2026 GMT
        Subject: CN=cd757f729a94ef6770f7444406e9743a27c492d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e9:9c:f9:41:04:2f:18:c1:df:9d:58:33:e0:
                    a2:37:7b:e2:b1:6b:36:a2:00:a8:45:6b:1c:1e:2e:
                    98:2a:33:55:8a:93:45:44:3b:88:53:cf:9a:02:41:
                    0d:2f:5d:14:0e:78:f0:2d:84:fb:58:dd:b7:dd:01:
                    23:c0:d9:39:b4:63:fa:98:5c:3e:54:b3:cd:04:b2:
                    68:25:db:92:b6:9c:4a:03:0a:4a:c8:77:89:f3:da:
                    f8:01:c1:56:6c:3c:0b:49:71:08:84:a5:df:2b:ea:
                    26:77:22:74:d4:d1:87:91:8c:5d:e9:29:e5:d6:01:
                    01:8f:cf:79:26:8d:d3:6c:46:ef:d8:83:a1:e4:12:
                    26:d2:e2:67:f5:bb:b7:3b:79:99:e5:bc:36:3b:61:
                    f0:03:91:19:ba:0a:7c:bb:39:c3:24:e9:66:c0:28:
                    11:dc:3a:07:5d:2b:94:19:cc:07:ed:fe:85:0b:38:
                    c8:47:79:2c:84:10:5f:66:37:01:0a:26:ec:d1:63:
                    c0:f5:4e:af:d5:ae:9e:6f:d4:02:2f:b5:cd:8f:27:
                    d0:46:d1:08:fc:67:3b:9c:d1:db:04:79:ea:20:82:
                    3a:ee:e0:22:a1:d0:c6:22:0b:2e:7e:fe:5d:16:6c:
                    31:e1:70:5a:2f:cf:41:37:dc:15:5f:52:11:32:06:
                    07:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:75:7F:72:9A:94:EF:67:70:F7:44:44:06:E9:74:3A:27:C4:92:D0
            X509v3 Authority Key Identifier:
                keyid:E3:90:F2:EE:0A:70:BC:AE:FE:01:95:A3:D8:B3:77:D3:42:97:A9:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:9c:50:42:e9:04:d9:15:66:66:cc:c3:40:6d:44:06:76:51:
         cd:f9:4b:3b:03:b8:59:c7:94:a3:95:0f:bc:7f:10:c8:40:5d:
         3b:4b:66:14:41:03:20:ac:c2:4b:61:97:82:a6:2e:96:77:b3:
         84:7b:a0:7d:f6:31:b5:65:bf:04:fc:d7:db:9c:2f:77:41:d3:
         10:47:e6:bb:5b:da:df:d7:34:f6:0e:33:e4:eb:a2:ca:a9:d7:
         61:02:2c:4a:63:86:54:e0:2c:fb:52:fe:53:22:45:d4:09:25:
         d7:d5:c5:b6:bb:96:57:be:d3:5c:47:6f:06:83:b0:b2:4b:6c:
         71:18:54:36:27:7a:e1:ad:d0:fe:21:3d:e2:f2:f8:05:fc:46:
         b7:6e:b1:9d:05:bb:d2:5c:c4:f3:74:17:1d:95:91:7f:ce:8a:
         60:7a:f1:a4:53:3b:4f:42:e1:64:31:d2:0a:2a:86:a4:2a:28:
         00:78:00:cc:5e:02:f6:12:84:a6:58:3e:06:36:90:54:89:db:
         41:42:74:a6:78:42:86:90:5a:c9:ec:17:1e:90:d3:47:55:21:
         4b:ff:f8:26:1c:9f:28:0c:ad:e5:a9:c7:5a:5a:66:a7:cd:a6:
         1f:c7:a8:b7:d0:d7:a6:7d:4a:88:7e:d2:ea:f2:93:1c:16:b7:
         a0:94:82:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:36:16 2026 by rpki-client