Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft
File:                     _cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft (raw, json)
Hash identifier:          fMKZNop9bSXGfPrZMzLUqYit6fYyWjuoM1/crB+uDzk=
Subject key identifier:   58:5D:BA:01:27:7D:00:D0:2B:F0:2D:78:EF:E9:8C:E2:15:81:D2:78
Authority key identifier: FD:C5:68:65:7E:50:E6:F8:E5:C6:BF:EF:A8:9C:EF:35:0D:94:F8:2E
Certificate issuer:       /CN=fdc568657e50e6f8e5c6bfefa89cef350d94f82e
Certificate serial:       019E1CB45FDAEDFE795E8EBE7AD7CA1E8348
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft
Manifest number:          0628
Signing time:             Tue 12 May 2026 15:00:43 +0000
Manifest this update:     Tue 12 May 2026 15:00:43 +0000
Manifest next update:     Wed 13 May 2026 15:00:43 +0000
Files and hashes:         1: PK0CRUNKPydp1F9sRstNCMcVwis.roa (hash: n+n/sPwhuGlwhn4Gy6p0W0/UiHGQEt+/uBb6OJWsN1E=)
                          2: Z31MissZ7yHyJsx_dTK4RFd8-rY.asa (hash: nIwJfm6qlYIi6/sdM1uVq+e1tR35aqGsM85M/JuSXJc=)
                          3: _cVoZX5Q5vjlxr_vqJzvNQ2U-C4.crl (hash: dZ8HA4IavOMcYKJp9uNIkoCPwd7sZYnaGZ9JtI9dasY=)
                          4: i0sj2OlRMgevoHUz4ryR_Oma4I4.asa (hash: adtzyb9u4Fbn/ZPKqrDMufHnnCkRcWugW8Vy0F2nkqI=)
                          5: l3v9mZTPVTxPe5Kh1-GOSK6w8Zw.roa (hash: 51EMra3zFohpnXCIeOY4jhtjtvE+0ZKY/ys2ekben48=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b4:5f:da:ed:fe:79:5e:8e:be:7a:d7:ca:1e:83:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdc568657e50e6f8e5c6bfefa89cef350d94f82e
        Validity
            Not Before: May 12 15:00:43 2026 GMT
            Not After : May 13 15:00:43 2026 GMT
        Subject: CN=585dba01277d00d02bf02d78efe98ce21581d278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3c:17:23:6d:3e:92:2b:40:3a:1a:7e:75:47:
                    dd:9a:ff:52:00:d6:45:33:02:1e:f1:20:82:f7:ed:
                    17:e8:55:05:1b:96:14:fb:a6:b3:04:66:72:1a:10:
                    52:39:c6:2e:bb:d6:1d:1b:30:82:bf:6c:26:10:5c:
                    be:20:7c:c2:2d:9b:33:41:39:f6:88:29:38:c6:5e:
                    8c:65:52:f3:75:e3:91:6f:70:17:3d:2c:1e:3e:fe:
                    20:58:ba:e2:ef:54:82:63:8d:b2:4c:d2:3d:c5:50:
                    9b:70:09:39:8a:ad:72:fe:6e:b0:5d:78:1d:3b:ff:
                    4d:68:60:f4:82:69:60:c3:26:46:56:cb:ba:81:83:
                    31:7a:87:8f:b4:c7:f6:f0:95:68:51:e3:08:3a:43:
                    a7:c5:7d:f9:6a:59:fc:01:06:4a:23:04:00:85:10:
                    2a:ee:e4:ca:73:c0:ef:7c:1d:18:81:61:0a:f0:56:
                    32:e4:f6:3c:79:c2:ef:c5:62:ce:52:8b:30:d7:41:
                    c1:c4:68:53:cb:cd:75:97:d9:6d:14:5c:f6:1d:44:
                    12:6b:82:44:80:dc:55:51:b7:51:8d:e0:91:8e:7f:
                    15:7b:c4:d0:07:c9:52:87:e8:84:3c:17:0b:54:85:
                    65:f0:ec:81:0a:78:9f:cb:f3:9c:2a:7e:fe:61:a6:
                    d8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:5D:BA:01:27:7D:00:D0:2B:F0:2D:78:EF:E9:8C:E2:15:81:D2:78
            X509v3 Authority Key Identifier:
                keyid:FD:C5:68:65:7E:50:E6:F8:E5:C6:BF:EF:A8:9C:EF:35:0D:94:F8:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:5e:7d:fd:04:62:5d:50:03:d0:95:c0:0f:8b:7a:d9:8d:ec:
         80:e5:d6:fa:e8:98:3c:98:13:32:68:78:9a:be:61:bd:72:af:
         72:cf:b0:6d:e2:65:7d:93:60:82:93:db:92:3d:e9:63:27:d8:
         d7:f2:bd:7d:e0:f5:37:fa:f1:72:79:ac:a0:a0:cb:b2:4a:db:
         42:8d:e3:b0:b3:a2:cb:c6:b3:d6:85:63:d0:5f:d6:91:3e:a5:
         03:22:cb:d3:95:22:70:11:a5:91:24:9c:85:f7:58:80:7d:48:
         95:51:28:c6:12:ce:12:67:9e:6b:1a:10:9f:7f:d0:13:de:d1:
         85:6d:f2:98:c4:05:2f:e7:ae:89:6d:5b:11:2e:38:e6:1f:3c:
         50:6e:40:0a:b4:fc:5c:52:9f:d6:75:7b:ed:3e:0a:50:73:b9:
         34:ca:73:8a:9b:60:7a:c4:fb:5f:82:be:8e:bb:3a:db:e6:e7:
         ce:bb:81:0e:34:68:00:06:61:7f:bf:8d:f8:0c:cb:d2:47:d7:
         1d:d9:6e:fb:4d:20:c0:7e:73:e2:b1:3c:45:62:77:ab:67:f3:
         05:a9:37:0b:7b:cf:b1:e2:f0:1b:a8:21:07:b9:03:fc:29:70:
         73:a3:ad:8d:81:1d:c1:b7:d0:96:3e:e4:1a:95:5d:48:de:a5:
         bd:d5:c6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:23:04 2026 by rpki-client