Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
File:                     e-ykASv3tQVuLgoWHrRhiHbJESo.mft (raw, json)
Hash identifier:          I6EI89LeaRZ8kkuKfM5BKPx/HSRmM4kCFarQZp2To6A=
Subject key identifier:   65:D2:E2:87:71:0D:88:0D:C8:60:B9:33:90:EB:80:C6:DB:2F:E3:B6
Authority key identifier: 7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A
Certificate issuer:       /CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
Certificate serial:       019E1D90CDA22A36AC6B55E86B650A7CE6C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
Manifest number:          1908
Signing time:             Tue 12 May 2026 19:01:29 +0000
Manifest this update:     Tue 12 May 2026 19:01:29 +0000
Manifest next update:     Wed 13 May 2026 19:01:29 +0000
Files and hashes:         1: TrY6aUvOznEWPgwFCDr7RM2O3ms.roa (hash: DDvKuMgIkfq65IcNVG0b6/9Oq5NsQ98eHZFJJ6S6qiM=)
                          2: YddULzzqlHaijBKc45wV-2A9NRg.roa (hash: DJJK0mLKzBAwLMCbEIMtOEBhlQs/ecomUOMz09kFmzw=)
                          3: e-ykASv3tQVuLgoWHrRhiHbJESo.crl (hash: v34+0jttRiTQQZjO8dkvZm5LQOSenUnrXqK/IN5gazs=)
                          4: g4nCWXK_03YbprQHpph4RAU5af4.roa (hash: bja30FhVlRyFoYSsgn4yCXyL+dT+/OEpibcb3uOS2oE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:cd:a2:2a:36:ac:6b:55:e8:6b:65:0a:7c:e6:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
        Validity
            Not Before: May 12 19:01:29 2026 GMT
            Not After : May 13 19:01:29 2026 GMT
        Subject: CN=65d2e287710d880dc860b93390eb80c6db2fe3b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:cf:a9:13:3d:7c:13:bb:37:70:65:b4:1b:3f:
                    05:5e:64:6f:db:ed:67:84:0c:c8:7c:87:a9:7a:34:
                    9e:7c:81:d0:47:30:f2:c3:ac:f5:51:f8:e1:8d:07:
                    cc:a3:66:25:b0:68:02:bb:3f:f9:d9:8e:1f:5b:d2:
                    00:a4:a8:92:e6:39:ba:75:77:1f:a0:7d:1e:8f:dc:
                    cf:58:ac:39:46:82:fc:60:91:a9:a8:49:2e:f1:1e:
                    39:61:03:69:04:3d:50:10:7f:78:f2:6c:27:d1:88:
                    a2:18:23:a5:9b:ee:c9:b0:06:d5:5e:90:ea:67:6e:
                    8a:48:c4:13:be:f0:65:2e:ca:4e:c0:a9:7e:9d:df:
                    4b:74:62:49:e7:48:6c:c2:04:85:80:d9:f8:97:bd:
                    60:f7:85:3b:87:fb:fc:50:a8:46:82:7d:27:62:d1:
                    72:59:54:43:76:b8:38:48:9b:b7:09:9e:9f:59:b9:
                    1f:e6:9f:40:dd:2d:89:89:16:85:20:88:d1:70:26:
                    46:f1:6d:8e:95:48:d6:77:88:16:67:5c:64:c2:52:
                    0c:c3:72:a3:85:b8:34:8c:ed:ad:e6:a6:a1:83:50:
                    84:be:72:ca:87:cf:27:2b:89:20:4c:2d:68:a1:c4:
                    d9:73:21:df:0f:64:94:a4:78:22:37:97:3f:f8:ef:
                    0d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D2:E2:87:71:0D:88:0D:C8:60:B9:33:90:EB:80:C6:DB:2F:E3:B6
            X509v3 Authority Key Identifier:
                keyid:7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:b5:25:b6:9f:35:70:0b:2a:ad:b3:f0:d4:af:10:62:9a:c6:
         bc:41:82:d6:e4:18:a1:90:c4:c5:23:e1:a2:dd:ea:55:85:8d:
         b4:c1:32:37:d3:72:15:10:c9:b7:54:88:da:c7:8e:4d:8c:d0:
         a9:23:11:81:87:49:69:db:13:05:0d:e4:0e:ad:54:78:e9:34:
         4b:38:f0:8a:09:63:ce:6e:28:7c:5c:96:01:7d:9c:de:5c:71:
         0a:5a:f8:72:cc:0a:64:c0:e0:35:8c:b6:ff:40:44:07:79:61:
         a2:50:a8:c6:f6:92:6e:74:e3:6b:01:12:d4:aa:69:25:0b:af:
         ed:9a:07:78:b9:bb:ea:ab:6e:a0:bc:0f:e0:49:0c:95:dc:23:
         6d:f9:bd:7f:3f:b2:64:7b:41:44:bc:e6:ac:29:92:b3:f8:23:
         8c:39:eb:35:89:9c:28:ab:c6:ea:08:77:27:b0:8e:6c:3a:39:
         d6:e5:ef:cd:d0:41:39:14:80:39:bb:18:e4:7e:89:95:a9:7c:
         53:c3:94:dc:a2:06:a5:32:64:2a:02:3f:1c:26:a5:ce:06:95:
         eb:2b:4b:68:6f:26:08:fa:fc:d1:be:19:ed:f5:cf:d0:84:00:
         aa:af:40:41:e9:a8:02:91:05:2e:4c:5f:d2:8a:93:5c:bc:7a:
         71:72:09:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:31:38 2026 by rpki-client