Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
File:                     90REoIZ_zKmjVpwf0JITNUajf0s.mft (raw, json)
Hash identifier:          TRE4jOL0dtznLsPBXa0QUZ49hAJw1j6TbRS0XINEbN8=
Subject key identifier:   44:CD:E7:87:E9:18:65:C3:F0:C8:C4:E9:21:93:BB:A2:D1:88:57:AD
Authority key identifier: F7:44:44:A0:86:7F:CC:A9:A3:56:9C:1F:D0:92:13:35:46:A3:7F:4B
Certificate issuer:       /CN=f74444a0867fcca9a3569c1fd092133546a37f4b
Certificate serial:       019E1DFDF993541F2BE4D67DE3BF2968F105
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
Manifest number:          1896
Signing time:             Tue 12 May 2026 21:00:44 +0000
Manifest this update:     Tue 12 May 2026 21:00:44 +0000
Manifest next update:     Wed 13 May 2026 21:00:44 +0000
Files and hashes:         1: 90REoIZ_zKmjVpwf0JITNUajf0s.crl (hash: XZZQXZeFC14UQXFOBN9p2HbscYKmYmivNmnZb/2GxMs=)
                          2: n2KWOfawjYsdrcU5kcTAVZoJ1KA.roa (hash: xCEQfYPaY0aViHtL0tmC47O4thf/Lzk7C/w84Q6tZQg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fd:f9:93:54:1f:2b:e4:d6:7d:e3:bf:29:68:f1:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f74444a0867fcca9a3569c1fd092133546a37f4b
        Validity
            Not Before: May 12 21:00:44 2026 GMT
            Not After : May 13 21:00:44 2026 GMT
        Subject: CN=44cde787e91865c3f0c8c4e92193bba2d18857ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:47:51:66:22:2a:43:6a:17:10:a4:45:4a:b7:
                    50:50:4d:c1:67:68:1a:ed:c2:1d:07:1d:e5:b2:6d:
                    03:a7:e4:83:d2:c6:6e:47:71:2c:b1:fe:8b:d6:5c:
                    69:84:1a:58:76:da:89:d1:bc:85:e7:16:e7:f7:88:
                    61:9a:90:1c:96:1e:eb:b8:0e:6e:7f:a3:bb:22:10:
                    81:5a:f4:c4:bd:44:04:c8:58:6d:e3:90:89:3e:a3:
                    23:d8:5e:0b:a4:d9:5a:80:b1:04:bd:4d:34:9b:d6:
                    d4:f8:13:6a:1d:db:8c:a1:80:fc:58:f6:d8:9a:c5:
                    a1:6c:7a:9e:05:29:d6:53:88:5b:a7:e5:cd:25:cc:
                    27:86:1f:7d:4a:8a:31:1f:31:e6:f5:68:9f:b3:21:
                    96:69:a5:c4:c3:80:58:29:f5:c7:65:e2:a6:ba:f6:
                    cc:cb:58:8e:41:3f:00:6b:cd:32:c7:de:e4:42:90:
                    5e:f1:e2:bd:61:e7:47:ec:02:68:f0:98:ac:04:be:
                    63:2f:e6:e1:b6:ef:34:b2:f2:b8:18:db:2c:30:15:
                    ab:88:a8:70:16:e1:69:f4:f6:20:8e:27:56:96:25:
                    55:11:51:e5:61:54:fb:f5:c5:e6:6f:f9:04:a9:97:
                    62:28:54:38:3d:ba:2e:5c:f7:ed:e3:de:c6:6e:a1:
                    c3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:CD:E7:87:E9:18:65:C3:F0:C8:C4:E9:21:93:BB:A2:D1:88:57:AD
            X509v3 Authority Key Identifier:
                keyid:F7:44:44:A0:86:7F:CC:A9:A3:56:9C:1F:D0:92:13:35:46:A3:7F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:e4:ae:1c:7c:63:99:cc:c9:a5:01:94:ae:4b:a2:42:05:83:
         52:ea:c8:df:22:9a:33:c7:cc:21:d5:8d:73:13:d3:95:0a:a1:
         eb:8b:0b:ea:63:9b:80:7e:07:20:d0:12:ab:a7:e9:0e:40:ee:
         22:f8:3f:fd:84:5e:9d:33:1a:48:f7:d6:3a:a2:e7:5e:eb:8f:
         85:e1:f2:71:a1:df:d9:d6:1a:1a:16:13:40:e7:af:32:26:bd:
         2a:2f:b4:78:c3:87:2c:69:dd:25:bf:eb:1c:47:56:66:ff:9e:
         26:e6:9c:ed:cc:dc:6d:e9:46:d6:9b:bd:28:80:c4:06:74:da:
         12:38:08:8a:3c:2a:b5:95:b5:91:67:ba:90:a1:6f:2d:5b:aa:
         a7:b8:7c:2b:60:bd:6c:e4:f4:11:5d:b9:47:55:a5:99:f4:6f:
         1e:29:0d:d4:68:77:52:7f:01:1f:e3:91:c3:e2:81:e0:0d:cb:
         b7:0c:ba:68:37:88:66:ae:e4:b8:08:54:54:22:7d:88:5f:77:
         9f:84:3c:ec:d3:76:16:5b:2a:dd:d7:f4:48:c4:19:3a:20:ec:
         c4:da:38:ef:37:fc:1a:29:52:6d:29:70:88:3e:2a:ce:5e:c7:
         d6:4d:12:34:29:1a:89:62:f1:0f:45:d6:41:56:45:da:cc:58:
         b8:48:4b:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/fmTVB8r5NZ9478paPEFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NDQ0NGEwODY3ZmNjYTlhMzU2OWMxZmQwOTIxMzM1NDZh
MzdmNGIwHhcNMjYwNTEyMjEwMDQ0WhcNMjYwNTEzMjEwMDQ0WjAzMTEwLwYDVQQD
Eyg0NGNkZTc4N2U5MTg2NWMzZjBjOGM0ZTkyMTkzYmJhMmQxODg1N2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkdRZiIqQ2oXEKRFSrdQUE3BZ2ga
7cIdBx3lsm0Dp+SD0sZuR3Essf6L1lxphBpYdtqJ0byF5xbn94hhmpAclh7ruA5u
f6O7IhCBWvTEvUQEyFht45CJPqMj2F4LpNlagLEEvU00m9bU+BNqHduMoYD8WPbY
msWhbHqeBSnWU4hbp+XNJcwnhh99SooxHzHm9WifsyGWaaXEw4BYKfXHZeKmuvbM
y1iOQT8Aa80yx97kQpBe8eK9YedH7AJo8JisBL5jL+bhtu80svK4GNssMBWriKhw
FuFp9PYgjidWliVVEVHlYVT79cXmb/kEqZdiKFQ4PbouXPft497GbqHD2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFETN54fpGGXD8MjE6SGTu6LRiFetMB8GA1UdIwQY
MBaAFPdERKCGf8ypo1acH9CSEzVGo39LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTBSRW9JWl96S21qVnB3ZjBKSVROVWFqZjBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9mNjQwNTMtYjkzOC00YzUxLThlYzUt
NWQyNTI0NGU0YWFkLzEvOTBSRW9JWl96S21qVnB3ZjBKSVROVWFqZjBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9mNjQwNTMtYjkzOC00YzUxLThlYzUtNWQyNTI0NGU0YWFk
LzEvOTBSRW9JWl96S21qVnB3ZjBKSVROVWFqZjBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD+SuHHxj
mczJpQGUrkuiQgWDUurI3yKaM8fMIdWNcxPTlQqh64sL6mObgH4HINASq6fpDkDu
Ivg//YRenTMaSPfWOqLnXuuPheHycaHf2dYaGhYTQOevMia9Ki+0eMOHLGndJb/r
HEdWZv+eJuac7czcbelG1pu9KIDEBnTaEjgIijwqtZW1kWe6kKFvLVuqp7h8K2C9
bOT0EV25R1WlmfRvHikN1Gh3Un8BH+ORw+KB4A3Ltwy6aDeIZq7kuAhUVCJ9iF93
n4Q87NN2Flsq3df0SMQZOiDsxNo47zf8GilSbSlwiD4qzl7H1k0SNCkaiWLxD0XW
QVZF2sxYuEhLVg==
-----END CERTIFICATE-----
Generated at Wed May 13 05:52:23 2026 by rpki-client