Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
File:                     ppR2gdoNt_55MV7G29oov41mD8A.mft (raw, json)
Hash identifier:          CK6Rv+MqAnaAUzi3g4LL1qukRMeJLoP1R6NpqtQRd2A=
Subject key identifier:   52:CC:17:76:F0:B1:62:7D:74:39:46:64:2B:43:B2:FF:47:8B:4B:F7
Authority key identifier: A6:94:76:81:DA:0D:B7:FE:79:31:5E:C6:DB:DA:28:BF:8D:66:0F:C0
Certificate issuer:       /CN=a6947681da0db7fe79315ec6dbda28bf8d660fc0
Certificate serial:       019E1DC76ECD362C6E9B4F474F0FAC65C2E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
Manifest number:          1908
Signing time:             Tue 12 May 2026 20:01:09 +0000
Manifest this update:     Tue 12 May 2026 20:01:09 +0000
Manifest next update:     Wed 13 May 2026 20:01:09 +0000
Files and hashes:         1: KImIqYFb29b3KU70kYQGUgTjwXY.roa (hash: OkLquITh6UHZc59jyD3mteFTooB7+Z7+DnhjU4+WM/A=)
                          2: ppR2gdoNt_55MV7G29oov41mD8A.crl (hash: jenOjX1ItepvGw5R++hW7FKmzOW0fvUwe9QA9f4RPJo=)
                          3: wJhrCbB9HaKVaJIOdovc6nXak8I.roa (hash: DNB7tfiEdhadZKuh5CRqn/FIXhNGqeMKaW1BhhcXm8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:6e:cd:36:2c:6e:9b:4f:47:4f:0f:ac:65:c2:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6947681da0db7fe79315ec6dbda28bf8d660fc0
        Validity
            Not Before: May 12 20:01:09 2026 GMT
            Not After : May 13 20:01:09 2026 GMT
        Subject: CN=52cc1776f0b1627d743946642b43b2ff478b4bf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:13:20:e2:e9:57:4f:1c:5c:60:26:71:cb:0e:
                    5c:94:27:13:7e:95:d7:17:ab:ac:03:f0:a4:f0:6b:
                    92:45:bf:90:86:59:6d:33:f9:bd:91:51:3d:97:5d:
                    02:68:31:32:46:a8:ee:9f:95:2d:28:5d:0f:44:3a:
                    14:4d:cc:e9:0e:3c:9a:2c:7f:96:60:31:5e:d6:99:
                    33:2a:21:96:86:65:0c:0e:7c:ac:3e:0e:01:96:72:
                    f0:43:b5:96:08:99:61:01:ba:85:74:a5:94:a4:a4:
                    bc:56:33:1f:17:1d:e9:e4:7e:bf:a0:01:65:7f:0e:
                    65:d0:b4:fb:e8:fe:c2:ce:14:1c:2f:3e:74:82:d6:
                    63:a1:8a:0c:92:00:1c:f4:57:8f:c9:6d:b0:06:0c:
                    12:d4:51:fd:24:a6:d5:ac:d1:2e:6c:91:6a:60:81:
                    cf:c8:74:eb:d6:2c:a3:2c:71:93:fb:dd:cd:6c:20:
                    04:de:1d:fd:59:9f:6a:4b:a1:7c:61:cb:2a:d7:03:
                    15:2e:ef:a1:0c:68:e8:f4:2c:ea:56:d5:83:01:f9:
                    ab:fb:49:71:eb:40:f6:9c:16:3a:ff:7f:db:b2:1e:
                    ec:fc:8d:b8:20:f2:9a:71:00:89:2f:cd:3a:20:1b:
                    c9:60:ef:a8:23:84:4f:d4:3f:8d:7d:80:49:b2:aa:
                    37:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:CC:17:76:F0:B1:62:7D:74:39:46:64:2B:43:B2:FF:47:8B:4B:F7
            X509v3 Authority Key Identifier:
                keyid:A6:94:76:81:DA:0D:B7:FE:79:31:5E:C6:DB:DA:28:BF:8D:66:0F:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:be:24:99:c4:d8:16:66:4a:20:e0:45:41:2d:9f:ad:33:09:
         d0:0b:47:7b:2f:9b:37:a7:96:d5:c3:21:f6:98:92:07:50:58:
         6c:fb:6e:6d:01:f6:55:86:34:ea:32:14:ce:76:4d:af:9a:93:
         17:31:81:76:ba:63:5f:25:46:1c:a8:d7:66:80:4e:f4:7d:4a:
         63:14:94:87:39:7e:a1:3d:8f:a9:93:cb:b5:34:e9:05:d2:a2:
         3a:37:2e:df:64:bc:9a:a5:57:a4:a1:ed:b2:3f:a8:37:0b:25:
         db:60:ef:fb:45:3f:19:42:d4:84:8e:4f:9b:2a:22:bd:3d:e9:
         e7:ec:aa:5e:26:56:69:d2:64:06:b7:eb:55:a1:a4:58:fd:9b:
         97:3e:d2:45:a3:a5:e8:27:59:a7:fd:ff:79:b5:c9:57:9f:f5:
         39:4d:50:fb:25:0d:67:b8:44:34:7f:16:8f:46:f5:d0:75:68:
         60:bb:1c:44:cb:1e:d2:3f:f3:24:b6:77:9e:c6:d8:2a:5d:76:
         59:90:5b:c7:96:98:d0:a9:15:15:86:38:28:c1:f8:68:df:87:
         3d:36:e5:fe:c1:32:90:4c:f5:9f:63:a0:67:57:bd:d7:da:8d:
         75:67:6f:76:93:53:a6:cb:aa:14:ee:45:e5:d5:31:07:02:d9:
         cc:81:53:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:17:41 2026 by rpki-client