Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
File:                     AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft (raw, json)
Hash identifier:          oqO5g+EWaxwR5Ev+CjYCMQPYgPvpSLRYiAee+I1+o4s=
Subject key identifier:   41:45:7E:84:EF:12:4D:22:47:02:6C:EE:06:B1:BC:D6:54:E5:FF:04
Authority key identifier: 02:C4:DF:5B:74:D9:9F:97:96:71:84:35:C3:AF:D2:22:0C:B5:67:51
Certificate issuer:       /CN=02c4df5b74d99f9796718435c3afd2220cb56751
Certificate serial:       019E1CB5541EAC4FDC23BD86F575C19BD8F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
Manifest number:          0681
Signing time:             Tue 12 May 2026 15:01:45 +0000
Manifest this update:     Tue 12 May 2026 15:01:45 +0000
Manifest next update:     Wed 13 May 2026 15:01:45 +0000
Files and hashes:         1: AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl (hash: //7zzrvsuIJfn54Bk3ubdyN0y9M64jBgP34iRj2/WWU=)
                          2: Eii8h6uaBr6fEXcjaJ5se8NVU0c.roa (hash: WAw9S4sN6yDFY1nBSSz2zmctfGBwQIAYJa1xn10MbIU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b5:54:1e:ac:4f:dc:23:bd:86:f5:75:c1:9b:d8:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02c4df5b74d99f9796718435c3afd2220cb56751
        Validity
            Not Before: May 12 15:01:45 2026 GMT
            Not After : May 13 15:01:45 2026 GMT
        Subject: CN=41457e84ef124d2247026cee06b1bcd654e5ff04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:04:42:3e:92:67:f6:e5:97:a1:c7:78:4d:c5:
                    61:a5:25:94:9f:9e:80:2e:72:b8:c9:51:ac:af:5c:
                    43:df:b1:2e:c9:be:c5:2a:24:d8:e0:93:72:aa:8b:
                    bc:38:e4:6b:36:59:18:81:77:bb:48:52:bf:8d:ac:
                    2f:1e:af:ee:9b:b1:08:20:c8:29:84:5a:e6:56:06:
                    bf:7f:69:f1:d4:b4:bb:89:1a:ff:ab:8c:48:55:47:
                    06:e6:2b:67:4b:b5:9c:37:f7:8e:63:75:a2:42:b8:
                    4d:59:54:4b:95:d2:c3:8d:25:58:1f:72:90:60:9d:
                    76:f7:dc:9a:60:8b:d7:9b:02:7c:ed:2d:f6:fa:53:
                    83:4b:b0:c8:8a:df:35:53:ef:6f:41:3d:10:8f:1d:
                    ae:6c:e7:b8:c8:6e:e9:f8:f5:19:8f:d4:52:51:ea:
                    6d:91:0e:2e:57:de:ac:97:35:17:91:35:74:d0:d1:
                    e3:3c:22:36:5d:59:44:54:76:38:e4:04:8f:d3:ce:
                    3e:91:1e:55:0e:77:1b:59:41:7d:aa:e5:fc:6b:16:
                    2e:bb:05:ce:47:55:5f:a6:45:5e:fa:dc:12:a7:be:
                    45:94:16:2f:7b:a4:5e:ea:32:44:36:4b:4a:fe:7e:
                    23:78:48:76:81:e5:f2:63:0a:1c:9e:3a:0c:ee:fd:
                    22:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:45:7E:84:EF:12:4D:22:47:02:6C:EE:06:B1:BC:D6:54:E5:FF:04
            X509v3 Authority Key Identifier:
                keyid:02:C4:DF:5B:74:D9:9F:97:96:71:84:35:C3:AF:D2:22:0C:B5:67:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:cb:6b:7e:a8:6f:65:ed:2d:c5:1e:e3:af:3d:ae:9a:4b:a6:
         04:e1:e4:51:0e:53:55:f4:1b:b9:0d:75:1a:fc:40:18:0f:cd:
         87:b6:7d:fc:de:49:ba:70:ea:58:1d:5a:cc:6a:cf:4f:5d:b2:
         b9:fc:90:4e:57:e7:05:51:05:da:83:e7:b6:12:5e:7b:c9:01:
         81:93:f1:36:ce:05:e7:3e:d4:5c:3d:42:bd:42:bc:9f:08:6c:
         a9:3e:52:f0:80:53:9b:c6:66:b8:04:46:9b:2a:d2:26:24:a7:
         b6:cf:ff:41:01:5c:a7:78:75:81:5e:5a:fa:54:64:39:65:b3:
         08:81:de:3f:c6:be:28:4e:aa:0b:e0:3d:ab:73:83:36:4a:b9:
         de:95:c0:57:f2:87:f2:e2:3c:81:be:94:65:1a:96:57:73:cf:
         1c:31:09:08:ec:e7:30:44:bd:78:8d:50:97:13:7b:7a:1c:8f:
         b3:da:70:70:dc:cc:9a:17:b3:75:b5:31:7f:74:e7:92:a4:e6:
         5a:d4:e9:0d:82:c2:db:44:ed:15:25:64:87:fc:a7:89:36:06:
         01:6d:d8:ae:f1:a1:c5:3d:92:57:a1:7b:68:e5:8e:19:c1:62:
         94:51:61:6c:ef:0b:3e:0d:ed:30:64:db:14:5c:dc:d4:8e:c3:
         b1:a3:95:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:14:30 2026 by rpki-client