Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
File:                     tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft (raw, json)
Hash identifier:          PY98Sz0263DBDppAVjwkEzhCc0nWFMwM7wdld83WQJ4=
Subject key identifier:   A1:A4:52:6F:E6:DF:13:57:DF:60:9A:E9:A4:97:27:76:1A:0B:F7:3A
Authority key identifier: B4:43:B3:48:6D:E7:82:6F:D6:B0:E2:AE:C0:26:59:7B:62:07:B3:73
Certificate issuer:       /CN=b443b3486de7826fd6b0e2aec026597b6207b373
Certificate serial:       019E1FEC9F6182DE0A5C5ADD51B707FF3D9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
Manifest number:          096B
Signing time:             Wed 13 May 2026 06:01:01 +0000
Manifest this update:     Wed 13 May 2026 06:01:01 +0000
Manifest next update:     Thu 14 May 2026 06:01:01 +0000
Files and hashes:         1: sy5oGQjck-d2g9h80CULm1W8bto.roa (hash: emX5coGh9f+3oxTyFscmv5YiBYISS6FAufBHJnJSvLA=)
                          2: tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl (hash: DMCFx919Me2hC0I26sid3dgDYiJio4LYmbGYY1ryAeQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ec:9f:61:82:de:0a:5c:5a:dd:51:b7:07:ff:3d:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b443b3486de7826fd6b0e2aec026597b6207b373
        Validity
            Not Before: May 13 06:01:01 2026 GMT
            Not After : May 14 06:01:01 2026 GMT
        Subject: CN=a1a4526fe6df1357df609ae9a49727761a0bf73a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f4:93:52:3d:a5:86:e6:c9:e2:08:8c:eb:55:
                    f2:a9:33:73:34:64:6a:75:39:47:32:19:db:40:97:
                    73:1c:e9:04:33:8d:44:17:64:ec:0c:92:e4:df:5a:
                    63:84:99:13:de:a2:0a:d1:46:88:c0:69:f4:f9:c0:
                    70:fc:70:88:a2:98:a8:d7:0a:bf:43:18:fc:28:9f:
                    04:25:b0:c0:58:70:99:a5:63:65:04:ed:cf:db:f1:
                    b4:85:50:31:90:fe:47:90:0b:9f:a0:4b:78:8f:e1:
                    49:7d:58:8f:a5:91:68:2b:37:b8:8c:ed:51:c7:88:
                    da:ac:c6:1f:b9:5e:8a:d5:83:00:70:16:1e:8d:67:
                    7a:ee:ed:4b:a9:6b:d9:08:6b:4f:9c:a8:ca:61:55:
                    a9:ff:c2:79:37:9e:d9:1d:83:01:24:43:8e:9e:70:
                    96:79:cb:6a:50:dd:4e:39:3d:25:fa:56:2f:bc:f5:
                    a2:c6:a0:4b:a2:a9:d5:2d:66:5c:22:e4:48:af:b2:
                    51:0b:53:6b:f6:e7:4f:3e:62:c8:e2:33:37:a3:dc:
                    4e:ec:fa:e9:b6:e0:1d:2b:99:2b:a9:50:00:36:5e:
                    59:cc:cb:07:43:b3:dd:20:0a:5d:b7:b6:73:c8:35:
                    19:d3:9d:45:80:d8:23:5d:9d:06:b5:8c:9c:22:0f:
                    08:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A4:52:6F:E6:DF:13:57:DF:60:9A:E9:A4:97:27:76:1A:0B:F7:3A
            X509v3 Authority Key Identifier:
                keyid:B4:43:B3:48:6D:E7:82:6F:D6:B0:E2:AE:C0:26:59:7B:62:07:B3:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:38:3c:8b:fb:f2:a2:16:2a:72:f4:4e:7e:29:b7:16:9c:bf:
         79:48:69:db:8d:66:79:28:f0:54:3c:f8:8f:0c:63:47:fb:55:
         39:2d:05:1c:73:30:e2:9b:f2:ad:98:dd:bf:f1:7a:93:6d:ff:
         2d:d7:2d:3c:cc:78:9c:26:ec:48:17:9e:dc:89:85:5e:74:1f:
         7e:dc:5c:a5:a0:53:b5:8f:52:6d:db:0e:81:02:5a:01:1d:40:
         9c:29:26:be:18:5e:1b:b2:03:aa:8e:af:2c:b0:67:14:78:a5:
         e3:3b:0e:aa:3d:3a:45:04:d7:32:5e:89:93:53:63:c8:0c:93:
         86:ba:cc:24:52:ea:5b:7b:35:49:17:ed:f4:7b:c8:9a:3e:4b:
         d4:af:3f:e1:6c:74:55:d1:d6:18:85:a1:64:a3:70:e2:46:c3:
         fc:ea:3d:31:5f:9b:c8:3a:45:31:f8:51:e5:95:d7:0c:03:a7:
         85:15:ee:00:97:51:00:43:e0:5a:be:b1:b1:69:bf:ad:8d:98:
         0a:25:92:30:90:d9:ab:bc:2c:9f:06:b3:b5:76:41:c8:13:dd:
         3a:02:4e:12:07:ae:ad:8a:f2:35:9b:c1:d2:43:34:7c:e5:5d:
         b9:e4:d3:31:f2:4d:29:86:8a:43:1f:21:37:17:18:94:5d:8d:
         69:3d:f5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:02:58 2026 by rpki-client