Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft
File:                     1AYg6l2vilSq6hfyy57N8114UwY.mft (raw, json)
Hash identifier:          KXwBlVVQdMU7FZ53ruuznl3XVPMhiqd6Scct4spJeYY=
Subject key identifier:   76:86:FD:C4:11:3C:9A:7F:4D:0F:93:8A:EE:C5:40:B9:5E:40:56:A4
Authority key identifier: D4:06:20:EA:5D:AF:8A:54:AA:EA:17:F2:CB:9E:CD:F3:5D:78:53:06
Certificate issuer:       /CN=d40620ea5daf8a54aaea17f2cb9ecdf35d785306
Certificate serial:       019E20FF76E3E2D1049335D782F2C641537B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1AYg6l2vilSq6hfyy57N8114UwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft
Manifest number:          13E0
Signing time:             Wed 13 May 2026 11:01:13 +0000
Manifest this update:     Wed 13 May 2026 11:01:13 +0000
Manifest next update:     Thu 14 May 2026 11:01:13 +0000
Files and hashes:         1: 1AYg6l2vilSq6hfyy57N8114UwY.crl (hash: u0IoJQ/JerY2gP3ebBpJBFASgADWotE+rFeSK0ZOsG8=)
                          2: 3HiDrZA7PYUoDOVj2lWK_MTDMy4.roa (hash: VEj0HSUKE42dKjFD2uYohf7XQqVFoN8s8ftve/Xm9PQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1AYg6l2vilSq6hfyy57N8114UwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:ff:76:e3:e2:d1:04:93:35:d7:82:f2:c6:41:53:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d40620ea5daf8a54aaea17f2cb9ecdf35d785306
        Validity
            Not Before: May 13 11:01:13 2026 GMT
            Not After : May 14 11:01:13 2026 GMT
        Subject: CN=7686fdc4113c9a7f4d0f938aeec540b95e4056a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8a:7d:36:db:30:88:10:72:5a:32:0d:6b:d5:
                    74:87:49:d3:9f:d7:9b:ce:53:e4:9d:e5:c6:d8:92:
                    59:ad:cb:14:f2:1a:a2:3c:14:f0:53:e5:fc:08:da:
                    25:c0:87:30:c9:f8:91:09:9e:be:b3:e6:59:68:95:
                    cb:2f:af:10:31:c0:16:18:d5:cc:2c:ec:a8:e9:21:
                    47:8c:e3:04:97:7e:f4:ee:0f:33:a9:2d:59:c3:ff:
                    53:46:97:8b:e6:1a:91:f5:3d:ff:49:19:25:52:b7:
                    e8:c0:a1:4d:1a:f5:9e:57:b7:7b:bf:66:98:dd:ab:
                    5a:b2:7e:06:2c:8d:b1:6f:11:6c:8d:09:f5:c0:67:
                    ca:c3:30:39:d1:14:71:97:7d:77:68:84:e7:c6:c6:
                    cc:12:9c:1a:dd:79:f7:de:9f:95:c2:58:1c:0c:dd:
                    51:7a:67:71:e1:b9:df:52:1b:67:9c:16:22:a6:12:
                    1e:39:0d:80:54:45:4e:cd:70:1a:09:fd:e5:68:71:
                    93:68:50:a5:88:c9:e2:66:d3:ed:02:66:99:91:78:
                    08:50:d2:eb:a7:d1:13:f6:40:64:78:de:7c:76:ec:
                    d0:a5:61:18:ea:dd:2d:79:87:e9:21:93:ad:5a:7d:
                    36:3b:d8:af:3a:3d:ed:02:68:ec:f8:0d:18:78:d9:
                    23:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:86:FD:C4:11:3C:9A:7F:4D:0F:93:8A:EE:C5:40:B9:5E:40:56:A4
            X509v3 Authority Key Identifier:
                keyid:D4:06:20:EA:5D:AF:8A:54:AA:EA:17:F2:CB:9E:CD:F3:5D:78:53:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AYg6l2vilSq6hfyy57N8114UwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:f5:4d:52:be:49:2d:40:69:e4:5b:80:77:5a:c3:b7:39:8e:
         28:39:71:88:0a:de:63:f7:bf:cf:11:9a:ab:52:6a:7d:c9:7c:
         54:d7:98:20:c5:85:5a:64:fc:1c:3a:0e:d8:9e:3b:03:65:05:
         ad:92:be:87:5c:21:72:df:90:d9:6f:58:45:79:aa:33:91:fd:
         eb:a7:f7:30:53:31:f3:05:92:09:f8:25:6e:4c:65:e0:4f:4b:
         52:d5:cb:fd:36:07:ca:9b:ff:15:88:03:f6:50:ef:21:12:19:
         c3:a5:79:56:74:1d:7c:89:c0:ee:31:7c:6a:3f:40:28:4d:cc:
         58:98:25:38:f4:a6:4b:03:58:3f:fb:68:62:e8:ff:e4:7e:8a:
         06:ef:4f:16:8c:8a:33:d3:51:b8:23:b9:e7:69:86:07:56:3e:
         98:23:21:36:38:2f:56:cb:e7:fa:1f:f6:80:1d:2a:27:be:07:
         69:52:c9:d2:63:af:1b:fd:33:11:9f:5b:ab:0c:51:45:a6:f3:
         90:68:18:57:0c:92:e3:13:d9:70:26:a9:5b:62:8d:6c:bd:00:
         c3:02:20:9a:c8:81:44:d3:5e:ef:25:63:ed:27:e7:7b:dc:63:
         4f:b8:be:6b:80:c0:2b:c7:d6:84:c9:fc:74:3c:e2:d8:84:3a:
         d4:f8:6c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:31:36 2026 by rpki-client