Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
File:                     pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft (raw, json)
Hash identifier:          EiQ6m0PQPmZhfnANr2WblbVO8iC+m2YuI0DiwZaRgGY=
Subject key identifier:   C9:BF:9E:03:54:58:6C:70:ED:E1:6F:2F:65:F0:CA:60:A8:61:7B:32
Authority key identifier: A4:C9:3A:B3:64:C8:78:32:E7:77:62:26:EE:E6:C1:31:DB:E1:53:BB
Certificate issuer:       /CN=a4c93ab364c87832e7776226eee6c131dbe153bb
Certificate serial:       019E205ABF8F9FFE94DE5A8A6E88587F2734
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
Manifest number:          1909
Signing time:             Wed 13 May 2026 08:01:18 +0000
Manifest this update:     Wed 13 May 2026 08:01:18 +0000
Manifest next update:     Thu 14 May 2026 08:01:18 +0000
Files and hashes:         1: lI1XK5SZ4unF2gsULOFdifpJAaI.roa (hash: rfS2OFj3wmP/4G5TYdNqf/vwvU8JRB0c9MwtD5rUi20=)
                          2: pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl (hash: MMKNc9rUDtfvJvC+2FKGseZwWJZUGNsRcx7jBP0AhNQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:5a:bf:8f:9f:fe:94:de:5a:8a:6e:88:58:7f:27:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4c93ab364c87832e7776226eee6c131dbe153bb
        Validity
            Not Before: May 13 08:01:18 2026 GMT
            Not After : May 14 08:01:18 2026 GMT
        Subject: CN=c9bf9e0354586c70ede16f2f65f0ca60a8617b32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:cc:52:1d:8d:ec:a7:19:25:d6:70:32:4f:15:
                    50:18:3c:77:65:e4:cc:fe:61:bc:1d:e6:0b:84:4a:
                    01:e6:26:77:57:ae:b9:8b:db:af:88:62:27:94:ee:
                    69:f5:04:4e:09:9f:09:4f:52:80:fb:7d:33:a1:3c:
                    95:82:47:5a:ae:ad:fe:3e:0f:f5:6b:ee:b1:0d:1e:
                    a4:e0:17:70:bd:2a:3c:91:6f:16:1c:f9:7d:4b:fb:
                    7b:a4:fb:9f:f0:5f:8a:9b:1f:43:fb:66:ca:64:38:
                    d0:08:75:99:e0:91:50:89:3b:5f:3a:cd:a4:48:b1:
                    bf:82:24:b4:a5:0d:d7:8c:0b:cc:86:b3:ff:4c:e6:
                    df:87:18:23:ef:0f:06:c7:dd:70:a4:b6:24:fa:48:
                    d9:67:16:b7:09:48:85:1e:42:4b:97:c9:7a:47:e9:
                    60:78:48:32:aa:ef:d6:e2:f9:96:58:25:58:9d:6d:
                    e8:ad:b5:2b:0a:89:69:ac:92:b9:a8:3f:4a:22:cc:
                    49:21:95:f0:29:4d:41:89:0b:b1:2e:bb:f8:ff:52:
                    7a:65:0d:95:c0:be:9b:7d:1a:b0:5f:3d:23:8b:53:
                    82:af:0f:c2:34:fb:61:de:9f:78:4c:dc:26:0e:e8:
                    92:a4:18:9f:fd:e3:1c:4b:95:ee:9b:c8:f0:c3:54:
                    b8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:BF:9E:03:54:58:6C:70:ED:E1:6F:2F:65:F0:CA:60:A8:61:7B:32
            X509v3 Authority Key Identifier:
                keyid:A4:C9:3A:B3:64:C8:78:32:E7:77:62:26:EE:E6:C1:31:DB:E1:53:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:9d:4c:65:db:09:9f:aa:d7:3a:ae:cd:31:fa:00:c3:d9:77:
         a9:5b:59:ce:38:66:c7:02:9d:5a:a9:12:02:63:59:cc:29:62:
         c8:b1:f0:bb:82:d9:91:5a:da:8a:83:ea:42:f0:63:ff:e4:8f:
         27:75:13:79:6c:da:da:18:8f:ad:71:eb:39:dd:ef:20:97:ad:
         cc:cd:46:aa:ac:30:d9:8f:00:db:25:9a:72:70:27:0e:ae:8c:
         4a:43:16:41:7a:c7:8c:90:a7:ba:1c:ff:a3:e7:d5:65:d4:6e:
         dd:b6:17:f4:d6:ca:22:33:f7:54:94:7c:57:8f:a1:59:24:f4:
         f5:c4:97:ce:16:26:bd:63:77:78:6f:a0:23:80:31:27:42:dc:
         13:92:41:e6:a9:33:de:90:49:31:33:a8:bd:72:2b:1c:9f:ab:
         62:d6:15:4f:c8:6f:2d:1d:a7:23:2b:12:00:9b:bf:c3:ea:f5:
         ce:83:56:d5:1e:65:5d:c8:e2:bf:eb:99:fd:a9:d8:f9:26:d7:
         45:ba:f0:ba:c4:6b:ca:d0:0a:eb:ae:95:15:26:3a:55:e7:6a:
         41:32:e2:43:9c:51:fa:18:60:8e:7d:ed:c4:f3:98:10:da:ab:
         44:17:b0:5b:fd:ba:d0:27:9e:e8:c3:95:97:5c:25:d2:81:93:
         88:b0:c5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:07:02 2026 by rpki-client