Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
File:                     tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft (raw, json)
Hash identifier:          fAZo/1uSFyZg7kntT1pIss27HEXMvoAbqSYTbapyRRM=
Subject key identifier:   3E:CA:16:FD:AE:7B:E5:7B:EA:B6:FC:02:1F:90:B6:05:EB:33:9E:9C
Authority key identifier: B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C
Certificate issuer:       /CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c
Certificate serial:       019E209161516A4703F36DB39381CF9EF8A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
Manifest number:          1367
Signing time:             Wed 13 May 2026 09:00:58 +0000
Manifest this update:     Wed 13 May 2026 09:00:58 +0000
Manifest next update:     Thu 14 May 2026 09:00:58 +0000
Files and hashes:         1: Ts1c5R1pfarxRE69RZTUbL8j2wI.roa (hash: ZcQpB70U2YO+2we7XC8myVB/BAIh03F9aXKEn9a2hG4=)
                          2: tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl (hash: e0S5Y/W1lHfkzNnbTxRyMsHB8tgKfXcYU/mikwUnTRA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:91:61:51:6a:47:03:f3:6d:b3:93:81:cf:9e:f8:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c
        Validity
            Not Before: May 13 09:00:58 2026 GMT
            Not After : May 14 09:00:58 2026 GMT
        Subject: CN=3eca16fdae7be57beab6fc021f90b605eb339e9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8c:5e:36:73:49:d5:6e:89:0b:67:13:ef:3b:
                    13:84:2b:e2:03:a5:d7:66:63:b3:d8:e0:51:bf:5c:
                    21:8a:92:62:a1:24:e3:9b:b7:19:8b:6c:ef:49:7c:
                    d3:8e:b2:78:02:f2:db:b3:6a:31:8f:1d:03:0e:04:
                    2d:4a:ab:33:e4:ac:54:76:e5:ae:2a:4c:90:10:b9:
                    85:7c:eb:6c:40:0a:4c:5a:dd:76:f7:83:9b:38:0e:
                    a5:41:a4:04:f9:d8:27:f8:4c:e3:dd:75:aa:d4:0a:
                    39:de:6c:fa:d8:ea:c6:0d:46:49:a3:e6:9a:25:2b:
                    d9:85:ad:3d:3c:8c:89:9f:56:26:9f:9e:0f:0b:a6:
                    e9:af:af:18:95:37:b1:0e:8c:a5:d4:a3:c4:1d:30:
                    05:be:78:f8:5d:cd:14:74:cc:ea:05:45:7c:32:5b:
                    fa:d4:33:40:fd:87:6a:5b:28:ad:89:97:fc:9c:e2:
                    cc:40:bf:89:35:30:3d:e5:c9:ad:ae:c9:4e:c7:82:
                    88:65:00:30:d8:44:6a:12:22:ec:93:f8:cf:f3:62:
                    cc:fb:a4:46:cb:7e:83:2c:be:70:5b:cd:54:37:01:
                    2b:51:4d:8c:be:f7:99:d8:e8:3f:7f:ba:f7:fd:3d:
                    e4:6c:c3:db:34:73:82:73:26:1e:c5:89:2e:f6:51:
                    5e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:CA:16:FD:AE:7B:E5:7B:EA:B6:FC:02:1F:90:B6:05:EB:33:9E:9C
            X509v3 Authority Key Identifier:
                keyid:B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:9e:33:12:e3:b7:da:fa:ba:47:b5:b9:86:60:43:3a:07:5c:
         de:a1:d3:d1:90:26:93:d2:10:5f:4c:01:26:d0:09:51:23:84:
         e5:a8:1f:fe:5b:b5:06:5e:ff:59:67:23:58:a3:98:93:6b:87:
         93:4a:0d:f2:4f:be:7a:fc:39:f4:ba:d6:a8:12:fa:b1:25:e0:
         ce:b4:cb:8e:d9:66:d4:91:92:dc:cf:ef:4b:c2:a9:9d:1c:cc:
         07:dd:72:8f:e1:f2:d4:87:74:15:42:2a:21:d4:3f:f3:b4:3b:
         75:eb:e1:e4:d0:c2:b7:3b:c1:7c:c7:18:62:9d:26:9b:34:f6:
         85:75:ca:45:50:9b:86:46:fc:7d:32:12:ec:34:c9:a8:34:8d:
         65:3a:ec:d2:bf:f3:71:fd:b5:8c:1e:88:71:75:ce:39:a9:40:
         d6:d6:43:2b:db:e7:86:ff:87:79:b5:8f:16:9f:f3:5d:03:0d:
         27:36:ad:5c:75:90:da:cf:fc:83:62:73:d8:06:84:e7:b5:cd:
         e1:f0:02:ae:b0:a5:c3:a3:e2:1c:4f:ef:42:7d:83:1b:a6:90:
         e4:81:af:fc:34:18:cd:9e:e2:49:bc:b9:c2:0a:f0:b3:27:74:
         cd:a3:1a:1f:0d:ff:55:0c:89:9f:8a:39:7e:7c:b9:3d:14:2c:
         8a:7d:2b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:22:12 2026 by rpki-client