Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
File:                     sK3wWv729l-hmmHDCuT7EcfPJbY.mft (raw, json)
Hash identifier:          Aycjdu8zKSPNqGFPPsVOFEDs3U0Mlyy9cLQBDGB1+oE=
Subject key identifier:   28:B1:60:4E:50:64:6A:DB:19:B3:76:BF:F0:A4:92:99:DF:14:7F:0B
Authority key identifier: B0:AD:F0:5A:FE:F6:F6:5F:A1:9A:61:C3:0A:E4:FB:11:C7:CF:25:B6
Certificate issuer:       /CN=b0adf05afef6f65fa19a61c30ae4fb11c7cf25b6
Certificate serial:       019E1CEB57F91BF636073EDF70C29B97C1E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
Manifest number:          1907
Signing time:             Tue 12 May 2026 16:00:45 +0000
Manifest this update:     Tue 12 May 2026 16:00:45 +0000
Manifest next update:     Wed 13 May 2026 16:00:45 +0000
Files and hashes:         1: cJdPxb0RSH0QMcbmsxnfVVZLI9o.roa (hash: 7Mc+8VOQ2R5S9UUsL5A35++MoKrgCRu3M3X3wsPiNFQ=)
                          2: sK3wWv729l-hmmHDCuT7EcfPJbY.crl (hash: SiB97DtehvtPmUFUfggz50N+4JDCo1WthEx71R2FUP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 16:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:57:f9:1b:f6:36:07:3e:df:70:c2:9b:97:c1:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0adf05afef6f65fa19a61c30ae4fb11c7cf25b6
        Validity
            Not Before: May 12 16:00:45 2026 GMT
            Not After : May 13 16:00:45 2026 GMT
        Subject: CN=28b1604e50646adb19b376bff0a49299df147f0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fe:45:be:eb:06:c5:ac:e3:75:dd:70:5c:74:
                    56:72:e2:38:99:d5:20:55:71:0f:5a:dd:3d:b4:f1:
                    ba:c2:21:5d:d3:bb:09:d1:5a:c2:be:73:23:c9:7e:
                    06:f4:82:4f:43:80:a4:92:f9:19:67:fc:af:81:0f:
                    e9:75:8d:ed:2e:a1:6a:32:5d:25:ac:20:82:39:f7:
                    15:98:dc:cc:6e:39:c2:b6:e1:92:c4:74:c9:49:6c:
                    e9:89:62:4a:45:68:33:da:98:53:2c:a0:e2:84:ff:
                    6f:69:09:e7:68:44:1f:78:b2:ce:a1:a2:04:43:be:
                    fb:9f:bb:f0:32:9f:18:5a:d6:b4:0a:eb:22:4e:3c:
                    6b:92:33:9e:39:d7:1e:95:99:35:45:cc:d1:12:c0:
                    f3:1d:50:6b:d2:84:86:fb:a2:c5:86:4f:62:89:91:
                    cf:e0:ca:5f:98:9c:83:bd:bf:d4:4c:bc:c5:62:0d:
                    ee:a2:1a:39:32:64:1d:bd:0b:6c:3c:61:9c:76:6f:
                    f2:96:26:e0:cc:8d:6b:46:0e:79:b9:0f:fd:3d:c5:
                    45:64:ac:94:98:c9:8e:f4:ae:62:65:b8:cf:ef:d4:
                    ad:77:87:86:2c:d4:b1:52:37:3d:e5:a3:ab:de:d8:
                    16:38:29:38:e0:55:6f:32:d8:19:21:c9:48:29:13:
                    6e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:B1:60:4E:50:64:6A:DB:19:B3:76:BF:F0:A4:92:99:DF:14:7F:0B
            X509v3 Authority Key Identifier:
                keyid:B0:AD:F0:5A:FE:F6:F6:5F:A1:9A:61:C3:0A:E4:FB:11:C7:CF:25:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:64:42:ef:81:cb:e0:0b:c4:65:50:6a:0f:2f:a4:a0:a8:18:
         17:a1:c9:a5:38:09:7a:d7:68:b9:6b:d4:07:2d:c3:b9:b6:8d:
         31:9f:2f:98:49:72:4d:a3:b0:17:8e:fb:5d:ed:e8:bb:8c:de:
         a7:42:0e:4f:b2:87:6f:9e:b0:77:34:b6:43:3c:e3:ee:08:58:
         da:55:9f:4c:03:47:12:36:e9:01:6d:9f:57:b2:11:5d:b3:b7:
         d3:d5:4d:56:a9:0f:b0:2e:35:f9:a3:bf:b6:d4:99:11:fe:ba:
         8d:bf:55:7e:5c:8f:ca:78:bf:dd:0c:67:11:2c:81:d9:5a:7a:
         3d:7f:4c:4b:10:80:a8:12:b7:1b:39:28:5e:d1:5a:46:59:76:
         38:1d:42:0b:5b:48:8d:70:b6:96:8c:e1:02:37:56:f4:aa:34:
         f1:51:21:33:fc:63:e2:df:d6:b3:28:1e:99:93:fa:9f:6c:e3:
         dc:39:14:56:04:bb:cd:49:51:1d:26:0e:07:4d:66:e1:bc:35:
         4f:2b:68:7e:b6:01:26:42:4c:ec:c2:ad:9a:f7:71:16:74:7d:
         79:a0:98:87:bf:43:0a:c8:c0:e7:7a:b6:a4:0d:1b:8a:db:d1:
         a6:e0:02:1d:5f:18:10:71:5a:2f:08:5e:e3:83:11:ce:bf:c1:
         7c:4e:4a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:36:21 2026 by rpki-client