Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
File:                     250Zf7vuKh3MtPVXIqghDTEFsEI.mft (raw, json)
Hash identifier:          aFvbtdfWFdJAjOAAt5B/qxMk60XNprih/3vRXCIDS70=
Subject key identifier:   91:B6:9B:62:3B:8F:7B:6F:56:BC:88:F3:14:95:9E:F7:D9:D1:3C:94
Authority key identifier: DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
Certificate issuer:       /CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Certificate serial:       019E1D903AED51B644511714786F334CFE52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
Manifest number:          14D3
Signing time:             Tue 12 May 2026 19:00:51 +0000
Manifest this update:     Tue 12 May 2026 19:00:51 +0000
Manifest next update:     Wed 13 May 2026 19:00:51 +0000
Files and hashes:         1: 250Zf7vuKh3MtPVXIqghDTEFsEI.crl (hash: Jsd0U1foguifqzulqnlg/2VNoOJIF58rY6CyHGcSe3k=)
                          2: 6mzFB1254QH_scGmAESdwoJirew.roa (hash: ZqsDszUXMXErK5gprgiRcwaopoCcJJcjnl51ncaMD10=)
                          3: CHwEEgIG46KrfCZubP2sgaYyQKQ.roa (hash: 1VYNsORWI1Jnmpu8/KvoEN63QsZYW/dgbty42oD0bdY=)
                          4: NJD3vCg8LdZrgIhkarwqZcVQWlY.roa (hash: Eumr2+B2PPkKKeprpzIU6OMcVz3MM+ic7NoPgJaopMw=)
                          5: OIl66vV-_xpjBLdW_e37i3MHj7k.roa (hash: cSop5Hl7odCbvTkJ91gKwEE+cGwI/Owv1OQiaa9DbOI=)
                          6: V_9jRl4u_GQEezWDQos1yT-0bqE.roa (hash: F7HIunKap/oz5qtM7/jZgccS28Y+qRZ8R7fBgjRlXdI=)
                          7: iNKNZeSZcVKtwBDeM9cWD2QfKgw.roa (hash: Ufjl8hlKJynYjHQsITek/FLuhc46CrmvrHtUUc2zMOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:3a:ed:51:b6:44:51:17:14:78:6f:33:4c:fe:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
        Validity
            Not Before: May 12 19:00:51 2026 GMT
            Not After : May 13 19:00:51 2026 GMT
        Subject: CN=91b69b623b8f7b6f56bc88f314959ef7d9d13c94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:6c:97:0b:c2:6c:47:b5:f1:df:f9:e1:aa:94:
                    cc:eb:f6:a1:25:4b:e3:fe:89:18:f2:9e:1d:27:4c:
                    18:77:e3:22:b6:63:4d:cb:87:dd:2a:3d:f2:42:b8:
                    92:ff:80:6d:8f:30:9c:82:7d:d8:97:ec:21:4a:4c:
                    2c:8c:9b:0e:24:70:05:87:9f:72:e1:b2:91:9e:33:
                    8e:3d:c7:c2:76:10:14:97:48:19:4f:2e:20:e0:35:
                    3e:4a:a6:d7:f9:92:cf:42:14:8e:aa:61:7f:6a:0c:
                    0c:2d:3a:d6:de:6d:65:71:9d:e5:40:31:4e:3a:b0:
                    d1:8a:fa:5e:84:eb:39:20:a9:f1:3e:43:0d:3c:ca:
                    b9:3c:e6:8b:57:fb:bd:40:1c:c7:a8:97:d4:93:50:
                    74:b2:ab:c0:f4:21:12:4b:f6:ca:15:2f:d0:4c:ed:
                    ed:74:30:15:67:86:f6:b2:d7:36:fe:8b:b8:f3:04:
                    97:97:16:f8:99:13:94:52:9f:62:60:54:98:a8:a0:
                    c9:35:c1:55:0f:97:98:ec:9f:91:29:21:48:ee:8d:
                    78:e7:b6:77:aa:3e:ea:86:6d:9d:ff:c7:12:eb:0b:
                    37:05:d1:8f:b3:a1:b9:e3:5e:9d:ec:c4:22:b7:7e:
                    c6:f9:25:5c:a8:7c:b7:13:29:94:61:50:a1:32:f6:
                    c6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B6:9B:62:3B:8F:7B:6F:56:BC:88:F3:14:95:9E:F7:D9:D1:3C:94
            X509v3 Authority Key Identifier:
                keyid:DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:63:30:14:a7:14:bd:cf:d9:1a:aa:e0:67:3b:77:92:06:cf:
         14:49:4e:a0:a5:55:95:ff:e2:aa:c4:87:35:21:23:e9:57:e1:
         dd:8b:af:4d:56:07:35:2a:88:1d:5e:ab:4e:be:df:18:6f:03:
         1d:ea:3d:11:1a:21:46:2c:7c:91:ee:6e:fe:64:a0:e3:a6:0d:
         2e:09:7c:eb:78:c0:96:47:96:da:c4:39:99:56:23:84:c3:48:
         98:02:49:e2:e2:00:42:40:a0:20:06:21:d8:57:f5:c5:4e:0c:
         bc:63:d1:da:67:a8:e0:42:2c:fc:2c:81:b4:ad:dc:e3:3b:8d:
         42:df:fd:d0:db:4c:97:93:c7:b5:ff:9d:29:a7:9f:bf:df:74:
         a2:8e:96:21:62:c2:c6:05:5b:de:c9:b7:cc:05:d9:78:8e:6f:
         be:ae:90:cf:45:f9:59:65:25:f7:e0:4e:2a:c6:bb:80:56:94:
         cd:d5:6f:66:7d:e8:b4:ce:a3:3d:6a:2f:8d:13:bf:47:93:0e:
         42:df:2b:6b:1c:08:a4:3d:aa:0d:26:f9:45:66:63:53:01:e9:
         ce:12:9b:2d:bd:a0:e8:37:b1:10:a1:ef:44:0b:c0:b6:35:be:
         8f:0e:20:a0:a6:04:4f:3e:59:6f:65:86:3f:ff:7e:48:b8:a0:
         8e:ac:8b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:03:39 2026 by rpki-client