Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft
File:                     1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft (raw, json)
Hash identifier:          ga5t+yiBFQexqJNMVG8w/gTh0zz4w9KPFnawMSUfReA=
Subject key identifier:   C1:2A:6B:76:DB:D2:62:6A:95:13:B2:74:63:7B:87:A2:EC:57:80:E0
Authority key identifier: FB:02:BA:C7:B7:9A:31:09:E9:BE:3D:FE:4F:06:D5:85:BB:9F:90:51
Certificate issuer:       /CN=fb02bac7b79a3109e9be3dfe4f06d585bb9f9051
Certificate serial:       019E1DFE1861AD37DFFEE7B3EC935078E719
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-wK6x7eaMQnpvj3-TwbVhbufkFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft
Manifest number:          155E
Signing time:             Tue 12 May 2026 21:00:51 +0000
Manifest this update:     Tue 12 May 2026 21:00:51 +0000
Manifest next update:     Wed 13 May 2026 21:00:51 +0000
Files and hashes:         1: 1-wK6x7eaMQnpvj3-TwbVhbufkFE.crl (hash: 5Goby6XsDI3vwXMCZaHYbOzYFjvolfg/eOdsjqk7Siw=)
                          2: ZbHKUZ4-YfRQqqQSe1r9U7B43No.roa (hash: OWTRsb1+RVyVdipSZx/PdEhXtkE4BTOxk7X0sSkLurA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-wK6x7eaMQnpvj3-TwbVhbufkFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:18:61:ad:37:df:fe:e7:b3:ec:93:50:78:e7:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb02bac7b79a3109e9be3dfe4f06d585bb9f9051
        Validity
            Not Before: May 12 21:00:51 2026 GMT
            Not After : May 13 21:00:51 2026 GMT
        Subject: CN=c12a6b76dbd2626a9513b274637b87a2ec5780e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:38:30:99:ec:8f:04:48:f2:12:77:d0:78:7d:
                    94:c4:7c:f3:a7:a3:8f:d7:f5:e7:75:3f:96:4c:95:
                    64:e5:cc:81:be:9a:c7:14:2b:61:6f:d0:42:aa:83:
                    23:c9:9f:16:a0:28:bf:22:92:60:05:b0:0c:f4:96:
                    12:c5:06:1d:11:47:19:da:c1:fa:5f:76:ae:75:58:
                    ad:34:df:11:7f:89:a3:f0:5e:26:5c:54:95:cc:f5:
                    75:e4:43:b8:d9:17:bb:f5:2f:67:ea:d1:95:ba:c7:
                    64:9e:7b:d5:b7:34:26:1d:71:be:4b:88:bb:96:2f:
                    61:81:f4:98:0e:b7:28:ac:1f:dc:f0:98:74:21:65:
                    9e:e1:16:17:39:b0:fb:9f:e9:35:32:80:6c:1a:af:
                    40:aa:01:c3:16:87:d3:48:c4:38:05:6e:36:17:84:
                    fb:c0:f1:c5:e4:88:da:e0:12:44:e1:60:39:4b:ef:
                    d9:96:1b:48:a9:88:ce:3d:ab:53:15:05:7b:c5:bd:
                    c3:22:33:ba:30:5d:63:05:0a:21:94:e3:26:56:54:
                    4b:7b:80:4d:ae:06:a1:b9:f6:e0:4a:59:96:12:a2:
                    51:b4:1a:9d:b8:a2:1a:a3:70:39:6b:81:e9:cc:3f:
                    74:9e:56:b7:ca:60:8a:2b:40:b6:3f:57:89:99:d3:
                    94:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:2A:6B:76:DB:D2:62:6A:95:13:B2:74:63:7B:87:A2:EC:57:80:E0
            X509v3 Authority Key Identifier:
                keyid:FB:02:BA:C7:B7:9A:31:09:E9:BE:3D:FE:4F:06:D5:85:BB:9F:90:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wK6x7eaMQnpvj3-TwbVhbufkFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:59:62:e9:1e:9c:75:4b:4a:43:ba:2e:d6:3e:7c:21:e9:0d:
         5e:7c:81:6e:dd:4f:80:af:b9:5a:f5:0a:2d:ec:c0:62:40:ea:
         02:c6:f5:b2:27:2f:6e:b3:00:1d:4b:58:38:e9:b8:8e:7d:d9:
         18:01:da:57:6b:2e:9d:77:17:8e:01:93:fb:4d:70:7d:34:90:
         b3:ba:57:01:01:d5:59:b9:8d:74:f6:11:c0:7d:14:92:b6:35:
         7e:2e:9b:aa:77:a0:96:e4:9f:d6:56:7f:18:9f:c5:f5:5d:f3:
         dd:03:db:96:e0:c8:fa:1f:bd:9d:f0:f4:39:53:1d:f2:49:bb:
         61:3a:e8:87:aa:8c:d6:9e:16:22:c4:d3:7b:0a:80:1a:bb:dc:
         c8:c8:49:93:a2:92:9a:c2:bb:2d:83:06:51:aa:f1:16:6c:1d:
         ca:62:6b:24:c2:9a:7b:2c:37:c3:54:ea:10:a3:66:23:85:db:
         e4:86:49:91:de:0d:a1:fa:bb:bb:52:b3:bc:7d:61:50:98:f2:
         85:af:06:ce:3e:43:08:d4:40:75:b0:9c:83:e3:80:36:c0:c3:
         65:0a:1f:a1:61:0e:83:3f:2d:52:a5:46:3f:8e:55:96:13:3d:
         db:82:2e:b1:c6:9a:ae:51:5c:45:1a:9a:fd:cc:f1:a2:48:8b:
         95:73:40:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:03:01 2026 by rpki-client