Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
File:                     0QENo1diQjJM77LIHBM5psDjtAM.mft (raw, json)
Hash identifier:          Q6bR9rkFibJbb0n1o2agzT+JIKNpcy14UnpoMKDvXns=
Subject key identifier:   43:BB:85:CE:1E:00:3B:20:52:1F:1F:72:87:FE:BF:1C:50:7E:BD:63
Authority key identifier: D1:01:0D:A3:57:62:42:32:4C:EF:B2:C8:1C:13:39:A6:C0:E3:B4:03
Certificate issuer:       /CN=d1010da3576242324cefb2c81c1339a6c0e3b403
Certificate serial:       019E1EA2DE2649E44EA6F0BEFA97596C1A75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
Manifest number:          190C
Signing time:             Wed 13 May 2026 00:00:50 +0000
Manifest this update:     Wed 13 May 2026 00:00:50 +0000
Manifest next update:     Thu 14 May 2026 00:00:50 +0000
Files and hashes:         1: 0QENo1diQjJM77LIHBM5psDjtAM.crl (hash: Mllp+/geM+P47tnc03V7vppt/TQFJXC8ZL8mBMrQank=)
                          2: ObhdsLoa75B_QVzex3UCt65oqHE.roa (hash: 7Rfm5BnnQZXvsHH1k9k4V3PGLN/GXjrUrEyjZS8MwJc=)
                          3: UIll6YIedo-QY-yPa3jX6bp0h0Q.asa (hash: AZvI46Ji0DAlrLNpPAxAAMglepWrJCLYP2IYIypu/4Q=)
                          4: a-4CKpObY5cKeSuMoMgMffjvfWQ.roa (hash: SXxBaVwsAs/dLbHjv4oplsKiiaVfa0F06dRrYRWo100=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a2:de:26:49:e4:4e:a6:f0:be:fa:97:59:6c:1a:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1010da3576242324cefb2c81c1339a6c0e3b403
        Validity
            Not Before: May 13 00:00:50 2026 GMT
            Not After : May 14 00:00:50 2026 GMT
        Subject: CN=43bb85ce1e003b20521f1f7287febf1c507ebd63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0f:a8:6d:39:42:4a:21:bf:e3:f2:fb:dc:79:
                    09:21:24:af:c8:4b:95:9d:96:0d:27:b2:2e:46:77:
                    ac:77:c7:e1:78:43:c7:78:26:6c:ce:14:0e:e1:56:
                    a9:73:40:4c:ee:2e:85:90:40:50:84:36:24:c4:0c:
                    8d:d9:18:6c:de:1c:6f:1f:a4:c2:84:a0:a8:a2:b6:
                    f0:43:b5:a2:f5:05:66:77:8c:2a:8a:0f:9d:85:fe:
                    15:26:02:ac:1a:7a:7d:4d:90:03:71:5c:6a:c3:32:
                    dd:5f:a4:5e:2c:9a:65:57:c6:b6:bd:7a:3e:1f:fd:
                    3e:d9:2d:9a:1f:67:a3:14:38:ae:2b:9d:bc:05:75:
                    3c:12:6d:b6:f5:73:3e:62:8c:c0:d1:69:52:e4:1b:
                    0a:f7:cf:2f:f1:61:da:3c:cf:c3:93:ae:a7:32:a1:
                    ff:46:03:56:96:7b:65:0a:0f:d0:11:11:a3:05:04:
                    76:22:a9:d9:a2:89:36:0f:d8:d2:cf:cc:7e:4d:30:
                    ba:41:17:a4:62:95:90:40:2b:e7:16:c7:cb:f9:c9:
                    57:85:ef:ac:48:a6:7c:a4:24:8a:18:66:e8:93:b8:
                    74:fc:26:a7:59:71:e9:a5:45:f0:d2:37:4e:e5:fb:
                    01:15:1e:ea:ac:a9:57:ec:0f:20:e8:69:97:87:67:
                    a9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:BB:85:CE:1E:00:3B:20:52:1F:1F:72:87:FE:BF:1C:50:7E:BD:63
            X509v3 Authority Key Identifier:
                keyid:D1:01:0D:A3:57:62:42:32:4C:EF:B2:C8:1C:13:39:A6:C0:E3:B4:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:c7:9b:cd:72:b3:3c:35:1b:e2:ad:38:7c:e8:ce:39:39:74:
         3f:a1:3b:41:bc:51:f3:a9:81:d9:ae:1a:95:da:d0:ae:9a:3f:
         da:af:47:9c:9c:c2:dc:06:9a:32:55:d4:28:7e:78:8f:b4:30:
         d7:2b:a4:77:e8:04:ed:3f:21:aa:0e:dd:29:a8:d0:b1:8a:44:
         e4:1c:6c:e4:6b:8f:bf:b4:cd:8d:95:51:6e:19:10:f7:95:5e:
         63:36:ea:9e:f9:72:06:6b:90:18:3a:9c:9c:54:18:f8:fc:0b:
         d0:a4:ff:a7:f2:6b:2d:a6:30:9e:56:05:68:12:a9:9a:3e:34:
         b5:7a:e4:47:d4:d8:19:d7:56:85:4a:83:04:33:b1:f3:19:bd:
         67:44:9d:db:08:bc:ea:4f:ac:94:bd:25:d0:1d:82:52:5d:5f:
         d9:75:ba:06:c6:23:81:78:a8:30:3d:90:0d:5e:c2:bd:2b:d4:
         90:91:0d:5a:a6:69:39:97:88:bf:ca:c0:61:f3:c3:8c:f6:2e:
         a1:68:1c:b2:4a:0f:6d:6b:b0:36:61:ac:80:3f:1a:49:40:5a:
         5c:4a:bc:50:5c:53:79:39:2c:47:e2:04:dc:db:4c:52:f6:15:
         54:21:29:5e:29:f3:72:19:10:92:46:5c:c3:78:27:e5:29:4c:
         b0:d5:84:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:53:18 2026 by rpki-client