Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
File:                     ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft (raw, json)
Hash identifier:          8EXiIrI3/vYxnsM3+j9Ed1DgTfQgY3WviU2rqV5KdTs=
Subject key identifier:   61:2C:0D:62:17:40:FE:43:D5:9C:DC:A7:F0:56:3C:DF:F4:42:77:8A
Authority key identifier: 8B:19:F3:D7:FF:EA:95:72:61:50:1E:91:66:4F:F6:82:3E:D9:36:AD
Certificate issuer:       /CN=8b19f3d7ffea957261501e91664ff6823ed936ad
Certificate serial:       019E1FB604010592B79B0BFEB066598B515F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
Manifest number:          1906
Signing time:             Wed 13 May 2026 05:01:22 +0000
Manifest this update:     Wed 13 May 2026 05:01:22 +0000
Manifest next update:     Thu 14 May 2026 05:01:22 +0000
Files and hashes:         1: LKiMBkWlsSF8nkXRXmyS63T3H-0.roa (hash: uU/CIMuftQCInpgJK21Hi0O0qaPghLirmvKHuuIzMmY=)
                          2: ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl (hash: wHRBC9S7jYZNxX+T3n6GOXqyVBlnmKi6bPtS+2rGtmI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 05:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b6:04:01:05:92:b7:9b:0b:fe:b0:66:59:8b:51:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b19f3d7ffea957261501e91664ff6823ed936ad
        Validity
            Not Before: May 13 05:01:22 2026 GMT
            Not After : May 14 05:01:22 2026 GMT
        Subject: CN=612c0d621740fe43d59cdca7f0563cdff442778a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d8:1e:c9:37:7b:68:a5:3b:80:d7:0c:76:48:
                    fa:b7:f4:ad:99:b4:8a:e2:2a:e1:b6:dd:40:bf:65:
                    d1:c5:e2:1d:f0:86:ba:9d:03:9b:5f:0a:ed:c0:42:
                    89:49:cd:6a:e7:0d:3a:8f:66:e1:62:67:21:af:01:
                    c4:be:e7:bf:83:51:59:be:82:f0:e5:02:9d:f6:2b:
                    cd:5b:05:4d:2d:59:a1:12:56:f4:52:9c:33:aa:5d:
                    b9:43:45:18:fe:5f:e4:cf:ba:5f:3d:54:e8:d9:7a:
                    08:a0:98:a5:4f:0b:14:2e:48:56:7b:1d:14:d8:bb:
                    a0:16:ab:f4:0a:6b:bb:18:22:d4:3b:8f:f2:af:53:
                    b3:c3:9c:62:01:bc:80:10:4a:e5:03:8e:b1:2e:85:
                    93:9a:ba:67:99:1a:ed:bf:57:1c:56:41:14:77:cb:
                    fe:fd:4d:13:52:8e:3c:71:26:57:17:67:5b:d6:a3:
                    66:1f:a4:a0:9f:c1:55:30:83:d9:1e:d4:f7:35:19:
                    98:8e:6c:44:75:69:e8:e6:f2:56:84:b0:aa:0a:4c:
                    37:83:99:b1:47:34:d5:41:53:c6:cd:6e:00:d6:f9:
                    c3:cb:3a:9a:56:7c:7d:8c:e9:3d:06:14:21:da:64:
                    e0:c2:d4:df:f9:10:30:26:f0:03:f6:3d:dc:0d:8f:
                    30:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:2C:0D:62:17:40:FE:43:D5:9C:DC:A7:F0:56:3C:DF:F4:42:77:8A
            X509v3 Authority Key Identifier:
                keyid:8B:19:F3:D7:FF:EA:95:72:61:50:1E:91:66:4F:F6:82:3E:D9:36:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:fa:37:02:8f:8b:6e:ad:c2:b1:b9:f9:4f:4a:a6:01:01:f4:
         32:a6:16:ea:c6:73:39:67:98:99:0c:f3:b5:8b:0e:9f:b3:b0:
         0c:19:69:a0:9a:76:7d:e2:4f:a9:d1:0a:a6:6b:7d:7a:46:04:
         51:c2:72:e9:88:a3:85:88:23:d2:ea:dc:f5:5d:fc:6d:39:bf:
         2b:c8:7f:0b:b4:94:55:ea:07:da:30:17:ca:80:74:2f:7c:e7:
         56:48:dd:15:b6:58:eb:ee:e0:7d:d9:33:8a:d6:b8:1b:52:29:
         7a:b2:b0:01:5c:24:32:92:7c:f2:51:d4:ab:f5:b1:6d:a1:c1:
         c6:c6:2d:27:ae:94:d7:f1:71:06:ae:65:b0:f4:0e:f3:a4:72:
         4d:dc:5c:8c:03:37:de:12:46:36:08:2d:9f:36:59:4b:21:20:
         49:34:4c:bd:81:37:04:88:f9:b9:06:b0:0c:c4:47:67:b2:5d:
         b4:81:03:59:83:64:82:9c:02:4e:fe:0e:69:eb:ea:30:5a:7d:
         d5:72:f1:73:cd:c3:24:97:fb:f4:a1:ba:fd:10:b3:c0:03:81:
         41:1d:ed:c5:6e:a8:be:d7:20:ce:dc:25:64:d6:75:f7:de:2f:
         20:da:61:51:40:c8:a2:df:fa:d9:19:97:60:47:46:3b:6e:f2:
         22:65:0d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:03:00 2026 by rpki-client