Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
File:                     KD3ro7EwXJpI03S6Rzab8fgn7gg.mft (raw, json)
Hash identifier:          DNNJZ4Yl7L2ANACJt0bYNHB/z767n39dnIoES/CB3to=
Subject key identifier:   26:D9:7A:C3:6C:58:D9:D8:6F:50:EA:79:43:5F:9B:32:9F:E5:2E:FE
Authority key identifier: 28:3D:EB:A3:B1:30:5C:9A:48:D3:74:BA:47:36:9B:F1:F8:27:EE:08
Certificate issuer:       /CN=283deba3b1305c9a48d374ba47369bf1f827ee08
Certificate serial:       019E1D911D8A3D149CDABCCD01F67F8CBBB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
Manifest number:          0C54
Signing time:             Tue 12 May 2026 19:01:49 +0000
Manifest this update:     Tue 12 May 2026 19:01:49 +0000
Manifest next update:     Wed 13 May 2026 19:01:49 +0000
Files and hashes:         1: KD3ro7EwXJpI03S6Rzab8fgn7gg.crl (hash: oCdKm+sMhSyqHoUDDfo1AkmplzEpEk1ICSwG3obXS+E=)
                          2: OQ2Ehq2LNnkoW69ybvSmF7Wii1o.roa (hash: R70NXYY+s+0zLQXH0/qTZ8MSPj794apmQlMiNuT9CX0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:91:1d:8a:3d:14:9c:da:bc:cd:01:f6:7f:8c:bb:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=283deba3b1305c9a48d374ba47369bf1f827ee08
        Validity
            Not Before: May 12 19:01:49 2026 GMT
            Not After : May 13 19:01:49 2026 GMT
        Subject: CN=26d97ac36c58d9d86f50ea79435f9b329fe52efe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bf:fb:c1:51:e9:87:08:f3:6b:29:11:c5:b8:
                    2e:a3:51:07:de:86:5d:33:91:16:3b:7e:62:7e:d6:
                    42:f8:0d:7c:7a:a0:9c:d1:9a:bd:13:94:e7:95:d3:
                    15:c3:09:c6:33:99:0c:14:33:e8:b4:17:b2:71:a6:
                    aa:d8:52:5b:ab:45:52:89:02:9c:e6:aa:f4:5c:40:
                    1e:03:06:88:2b:d0:f4:4d:87:b2:b4:36:d6:48:f1:
                    aa:0e:37:3d:f0:9b:fe:e8:e5:64:c6:71:0a:24:81:
                    e0:9c:0d:55:21:ec:f6:a7:aa:86:9a:a4:7f:4b:69:
                    75:37:2e:35:5b:17:50:be:60:48:eb:a8:51:1a:68:
                    46:f1:bd:8e:a9:eb:59:d2:a8:fb:32:e7:e4:fe:7d:
                    6d:97:33:16:cc:63:ba:66:82:bb:33:ac:92:5b:94:
                    98:db:d1:04:a2:76:6d:fc:f9:b8:7f:13:0a:0b:33:
                    29:7d:40:92:05:74:4b:74:73:c4:f5:a3:86:d8:e9:
                    86:c8:1e:b5:ab:4a:d1:97:26:1a:cf:cc:29:fb:1b:
                    d2:83:32:bb:c7:39:8d:8e:be:e9:ab:4b:04:5b:b8:
                    6e:42:31:15:30:97:b0:7f:3c:71:1a:28:c1:e7:41:
                    13:96:93:73:f1:8f:d7:d6:40:08:89:5e:43:84:be:
                    9c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:D9:7A:C3:6C:58:D9:D8:6F:50:EA:79:43:5F:9B:32:9F:E5:2E:FE
            X509v3 Authority Key Identifier:
                keyid:28:3D:EB:A3:B1:30:5C:9A:48:D3:74:BA:47:36:9B:F1:F8:27:EE:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:57:66:b2:73:f7:d3:d2:04:aa:3b:72:49:12:7b:d8:76:32:
         39:21:51:14:27:6d:a8:2f:b7:8a:c9:0e:f1:e4:28:5c:72:b1:
         5a:52:06:3e:3f:79:7e:ae:94:0b:ca:9c:b4:72:77:90:d5:d6:
         1e:17:86:ad:f1:83:99:fb:71:e6:1a:49:99:b5:5d:e2:ca:e8:
         83:ad:16:8c:0f:97:10:4e:40:23:19:12:22:9c:0b:9f:e1:97:
         22:ba:73:c8:e0:1e:e0:69:3d:b1:cd:45:c9:3a:9a:d1:9c:4a:
         02:29:71:ce:93:a0:02:4d:c3:3f:5d:c2:46:85:0b:4b:9a:3a:
         14:b4:37:8b:fc:5d:f3:bc:e3:91:2b:fd:33:ce:50:cc:ae:2f:
         ba:ed:8c:53:10:3b:e6:ac:4b:c2:10:ec:ca:a4:44:0a:1e:f2:
         ff:6d:ce:38:76:cb:bd:51:fc:04:97:6a:6c:45:6b:43:73:38:
         fd:9c:14:1b:49:7b:a3:d2:5d:63:3c:97:c7:04:cb:10:72:35:
         77:9d:83:2c:51:ed:d0:d5:21:65:88:7a:ee:06:20:5a:1f:28:
         3f:1c:9a:8d:08:13:98:5e:ea:a8:f5:66:d9:65:91:12:32:a5:
         a2:a7:c1:2f:1b:8f:4d:7a:d1:d5:e3:15:92:42:7d:9f:78:00:
         f7:0a:0e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:28:44 2026 by rpki-client