Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft
File:                     55rcKmJwJwixoO4N87TPkiiW3NY.mft (raw, json)
Hash identifier:          KOiUTS7di3Q8e+v8kGnk2eii3/fB+AI9WSuKfoN2IJo=
Subject key identifier:   47:6E:87:F1:01:0A:7B:6F:29:DF:AC:09:B6:31:53:8F:7C:50:80:BC
Authority key identifier: E7:9A:DC:2A:62:70:27:08:B1:A0:EE:0D:F3:B4:CF:92:28:96:DC:D6
Certificate issuer:       /CN=e79adc2a62702708b1a0ee0df3b4cf922896dcd6
Certificate serial:       019E1C7D71B8E3A39614283DBE1F972DD7CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/55rcKmJwJwixoO4N87TPkiiW3NY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft
Manifest number:          0654
Signing time:             Tue 12 May 2026 14:00:43 +0000
Manifest this update:     Tue 12 May 2026 14:00:43 +0000
Manifest next update:     Wed 13 May 2026 14:00:43 +0000
Files and hashes:         1: 55rcKmJwJwixoO4N87TPkiiW3NY.crl (hash: 5AfuR/F0IpaPLfko3Mb5UTGtnV2vH0+v7uRv6u2kuAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/55rcKmJwJwixoO4N87TPkiiW3NY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:7d:71:b8:e3:a3:96:14:28:3d:be:1f:97:2d:d7:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e79adc2a62702708b1a0ee0df3b4cf922896dcd6
        Validity
            Not Before: May 12 14:00:43 2026 GMT
            Not After : May 13 14:00:43 2026 GMT
        Subject: CN=476e87f1010a7b6f29dfac09b631538f7c5080bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:92:96:7b:80:cd:0e:28:39:ce:ad:1b:c2:01:
                    c8:56:9e:b8:72:de:35:c3:13:27:5e:a1:7f:9f:cd:
                    c4:1f:73:39:b7:ec:0c:4c:b7:51:36:b0:0c:9b:59:
                    92:b1:05:75:bb:80:7b:a2:f0:5a:d9:44:da:12:0a:
                    41:b6:90:19:9a:8f:24:15:d4:ff:0b:59:93:44:8a:
                    25:77:4e:69:05:95:d2:97:ac:61:4d:f4:14:cf:4d:
                    dc:c4:72:4e:09:4d:12:7e:30:6d:98:53:cf:77:7d:
                    36:9c:7f:58:bb:3b:f9:66:77:a2:8d:67:cd:60:33:
                    00:4c:15:ab:b5:5d:97:31:d7:80:38:28:5c:c7:28:
                    86:dc:cb:14:27:1e:eb:eb:b2:18:97:cd:ee:52:fa:
                    69:42:42:e7:4a:e4:db:23:33:95:26:99:6d:b6:38:
                    72:8f:95:a5:6a:60:54:31:50:79:15:7d:ee:44:f9:
                    c0:01:c6:31:f5:04:c4:00:15:d8:9d:99:18:59:79:
                    7d:0d:3f:cb:53:cf:22:6f:ea:30:83:e5:b1:cc:66:
                    72:95:c7:4c:c7:cb:b5:bf:55:00:c2:68:ed:eb:39:
                    66:f2:3d:2d:f7:4c:4e:8a:d0:7e:43:58:d8:a6:59:
                    ba:96:9c:4d:48:07:ef:ea:ca:ea:b8:ad:d5:e2:70:
                    2f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:6E:87:F1:01:0A:7B:6F:29:DF:AC:09:B6:31:53:8F:7C:50:80:BC
            X509v3 Authority Key Identifier:
                keyid:E7:9A:DC:2A:62:70:27:08:B1:A0:EE:0D:F3:B4:CF:92:28:96:DC:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55rcKmJwJwixoO4N87TPkiiW3NY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:5b:a9:bf:bd:4d:ed:c7:d0:0a:79:f3:57:f4:e4:ca:25:5f:
         55:2c:c6:fc:ba:54:76:a3:68:4f:f0:64:f4:f3:3d:12:01:5d:
         60:4c:1d:2e:1f:38:ca:de:90:12:5e:fa:a6:b5:2f:14:94:2b:
         13:84:24:33:83:5c:ed:a8:27:34:d6:18:fa:b2:57:9c:9d:1a:
         73:10:55:a1:e2:f6:bb:84:be:5b:64:d8:2d:6b:9b:27:9f:ef:
         02:e4:1a:d7:3c:da:7c:81:ba:ca:3c:24:26:7a:ed:c9:cf:72:
         7b:f2:1e:95:9f:27:12:3e:0b:54:18:05:4d:74:69:ce:12:09:
         23:f5:57:33:58:dc:40:bc:c8:80:d5:81:55:30:c2:fb:58:f5:
         cb:d0:26:6f:0c:87:9e:df:25:5c:2a:6d:6a:d3:c3:67:10:cb:
         13:12:9e:40:32:0f:02:08:1e:12:32:b2:34:d2:97:8b:fd:18:
         90:2d:f4:ce:5a:af:11:59:72:b5:03:7e:ee:c0:fc:f9:d6:fd:
         d9:2f:11:d1:0e:53:19:56:bb:99:fc:5a:10:3d:2a:55:42:1a:
         50:8c:64:d2:ff:2f:09:22:11:40:d9:a8:e4:ba:0b:94:35:ec:
         c7:08:e7:8a:77:d1:e6:f6:04:04:79:b8:9b:2c:1f:39:d6:90:
         9b:aa:c9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:34:49 2026 by rpki-client