Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
File:                     Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft (raw, json)
Hash identifier:          eL0QUdfo27/5/Az+nJToM/pXn45rnaedJ3KtxVso4xM=
Subject key identifier:   A4:82:73:08:E5:01:E5:CE:A0:46:C6:51:E1:82:A3:6F:9C:C0:7E:D3
Authority key identifier: 15:FD:B0:88:E9:8E:4E:64:15:D9:44:14:22:12:44:83:69:00:5B:48
Certificate issuer:       /CN=15fdb088e98e4e6415d944142212448369005b48
Certificate serial:       019E1F7F87485E52AEC45E669B5AC3DEB097
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
Manifest number:          0419
Signing time:             Wed 13 May 2026 04:01:51 +0000
Manifest this update:     Wed 13 May 2026 04:01:51 +0000
Manifest next update:     Thu 14 May 2026 04:01:51 +0000
Files and hashes:         1: Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl (hash: H3pnnn9SLfOkYY3COR12tJ3k6/d/2I/cadN7N7kY4U0=)
                          2: UWFOafME42L6O6C8tCsylQ1qM5Y.roa (hash: kTp8dPuulE0KVt0WY/U+hGiw2jKgDTK8kmDYSbikY3M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7f:87:48:5e:52:ae:c4:5e:66:9b:5a:c3:de:b0:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15fdb088e98e4e6415d944142212448369005b48
        Validity
            Not Before: May 13 04:01:51 2026 GMT
            Not After : May 14 04:01:51 2026 GMT
        Subject: CN=a4827308e501e5cea046c651e182a36f9cc07ed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cd:d0:47:71:a9:60:73:8a:93:2b:7e:34:52:
                    fe:fc:bc:b3:53:d6:c0:62:75:c1:0e:d7:2f:20:a7:
                    73:7e:06:0a:f5:ea:80:c0:76:12:ee:5e:77:74:43:
                    94:f7:3f:12:00:a3:b2:09:f0:e9:ae:0e:59:2a:7a:
                    9c:ea:6c:d0:37:87:92:28:a0:44:76:57:86:05:93:
                    6f:55:62:cf:42:7a:4a:cf:77:4f:5d:6c:d8:42:17:
                    ba:b7:84:e5:6e:32:d1:40:de:c7:ec:70:0a:d4:cb:
                    eb:02:5b:1c:32:cc:dd:25:06:18:1f:40:b2:3e:d3:
                    e4:ca:42:bf:9e:7f:fe:6f:62:33:68:26:dd:77:88:
                    3a:90:07:3c:ee:35:2f:31:93:29:65:e7:7b:04:0d:
                    1e:86:1c:7f:b5:99:09:ef:d3:e3:ae:b3:af:0f:1b:
                    53:73:0a:4c:eb:82:30:0f:97:33:31:b1:99:a7:d2:
                    2e:2e:c0:e5:82:db:50:0d:fa:2f:42:65:cb:8c:cb:
                    ad:de:f5:c3:4a:9b:d8:47:84:eb:43:e6:16:1a:c8:
                    7a:10:27:b7:f4:4b:4b:f0:c5:56:45:6c:f8:1c:99:
                    61:e2:f1:cd:40:33:9b:0d:12:b2:df:0f:6d:99:fe:
                    29:52:b1:1c:af:56:8d:6c:ed:4e:cf:d9:42:08:e1:
                    4a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:82:73:08:E5:01:E5:CE:A0:46:C6:51:E1:82:A3:6F:9C:C0:7E:D3
            X509v3 Authority Key Identifier:
                keyid:15:FD:B0:88:E9:8E:4E:64:15:D9:44:14:22:12:44:83:69:00:5B:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:0f:84:f7:b9:59:b1:b3:4e:6a:06:aa:1b:16:d2:39:35:6b:
         b7:de:ab:55:1c:3e:0c:16:17:7b:ac:d8:7f:3f:53:26:a6:10:
         77:2b:19:74:81:4a:95:ac:79:2a:c0:9d:f9:a5:e4:03:5a:27:
         60:f7:c5:0f:91:ba:4f:7f:2f:4e:b9:31:10:3e:4b:40:57:03:
         3a:bd:31:32:cb:31:d6:eb:2a:93:4a:e5:74:76:5e:49:6f:d4:
         66:f3:ce:ff:71:21:3e:70:dc:5a:78:99:41:65:16:a2:0c:de:
         d5:c0:61:11:68:5d:08:09:9e:56:5a:77:11:5e:d0:99:8e:76:
         d2:d9:96:61:7b:fd:d6:99:2c:2c:23:ca:7a:64:a9:95:2d:61:
         15:5e:4b:cb:e6:69:6f:d7:5f:4e:e0:98:46:f4:a6:b4:7c:5b:
         ce:d0:24:51:b0:27:6d:94:97:98:93:a4:ff:07:f2:3a:6c:7b:
         a9:78:f6:3e:1d:12:8e:7d:ba:0a:6c:ed:76:8a:e7:d4:b7:64:
         d2:85:9d:fd:76:86:33:77:64:39:76:fc:10:5c:62:2d:df:0c:
         4b:90:a8:14:c5:1e:ac:c4:67:79:35:13:e4:8a:00:fa:83:0f:
         b1:d6:d2:9f:4f:f9:b1:fa:23:fa:bc:63:1b:3e:73:e6:11:ee:
         21:0d:4e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:31:39 2026 by rpki-client