Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
File:                     cW9tEfDOYyMBgac_haZmFw9zib0.mft (raw, json)
Hash identifier:          7IPOx2suJ9tCG/O/am2FMSI7D5tQel9tEF0TppREAis=
Subject key identifier:   E2:93:FF:44:CE:76:7E:33:5A:AC:EA:58:06:9E:6B:4C:CE:A7:23:8C
Authority key identifier: 71:6F:6D:11:F0:CE:63:23:01:81:A7:3F:85:A6:66:17:0F:73:89:BD
Certificate issuer:       /CN=716f6d11f0ce63230181a73f85a666170f7389bd
Certificate serial:       019E1D90A347C674417E098EDE20826F116F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
Manifest number:          0E28
Signing time:             Tue 12 May 2026 19:01:18 +0000
Manifest this update:     Tue 12 May 2026 19:01:18 +0000
Manifest next update:     Wed 13 May 2026 19:01:18 +0000
Files and hashes:         1: 6f1i3xvOw5Akrk8EPZTaku38e58.roa (hash: yAZKqI7wHi0H5V8PrGtfeSpp18rf8v5uoZXgPYXu5QA=)
                          2: cW9tEfDOYyMBgac_haZmFw9zib0.crl (hash: TpLiakfh6VNVuWwp0kJ6Hh2MYDk3G6uIbHq4juwKHfQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:a3:47:c6:74:41:7e:09:8e:de:20:82:6f:11:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=716f6d11f0ce63230181a73f85a666170f7389bd
        Validity
            Not Before: May 12 19:01:18 2026 GMT
            Not After : May 13 19:01:18 2026 GMT
        Subject: CN=e293ff44ce767e335aacea58069e6b4ccea7238c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7d:51:8b:d5:ee:78:ad:5f:ab:2e:f2:37:df:
                    bc:3e:d0:e5:03:e2:f8:2a:09:68:65:86:75:d6:5f:
                    b6:3c:f1:a5:e3:cb:e5:37:02:b3:97:3c:69:ce:9f:
                    55:ef:05:67:98:6e:dc:9e:4a:99:dd:a7:83:40:55:
                    91:d7:53:3d:47:51:8b:e3:cc:10:fd:7c:c2:1c:91:
                    b5:a9:62:35:60:d8:a7:fc:8b:99:50:81:26:47:f8:
                    24:c7:3a:eb:93:58:df:5b:07:04:14:7b:2b:db:c4:
                    c9:19:02:60:46:3e:f6:45:1e:7b:5d:5d:09:3a:ca:
                    5e:75:b2:14:7e:55:2d:93:88:26:7c:84:c4:05:6b:
                    b8:f3:59:a3:9a:9b:5b:3f:55:84:d8:6f:73:96:fe:
                    14:0a:f8:36:e6:0b:f6:d7:5f:c7:a3:41:e8:db:92:
                    bf:f1:68:e0:03:b8:2b:ef:34:5c:19:8d:05:8a:bc:
                    df:eb:85:22:c8:3e:63:d3:27:29:3e:37:5d:18:9a:
                    ac:67:d4:1e:6c:5f:73:26:c8:9f:da:fb:e8:2f:47:
                    86:25:6e:c2:29:ee:6e:e1:88:20:cf:bd:4d:75:4e:
                    be:88:87:29:fb:21:6b:06:29:40:74:63:97:7a:45:
                    63:b3:cd:0c:64:33:73:bd:1e:46:39:2e:f9:0e:4c:
                    31:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:93:FF:44:CE:76:7E:33:5A:AC:EA:58:06:9E:6B:4C:CE:A7:23:8C
            X509v3 Authority Key Identifier:
                keyid:71:6F:6D:11:F0:CE:63:23:01:81:A7:3F:85:A6:66:17:0F:73:89:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:f1:6c:d2:c8:2c:fb:1e:50:2e:2d:99:62:f5:67:9e:f8:c9:
         af:b0:1e:29:bb:9a:c1:e6:c9:19:b8:b0:51:98:fa:61:92:90:
         07:09:aa:45:41:07:1b:91:61:6b:52:49:3b:97:bf:8f:e5:b7:
         61:d3:5e:fc:c8:f5:bd:ce:7c:ee:7d:ac:8c:6f:12:15:3c:e8:
         a6:5d:5a:ff:58:23:d4:f8:a9:e7:d4:0a:66:c1:01:ae:5f:de:
         9b:da:af:bd:8c:ae:b9:be:9b:f9:b6:25:2a:bd:74:b9:3a:ac:
         99:52:05:ed:0c:f3:5f:1e:17:e8:6c:9f:73:98:a0:93:82:42:
         98:7b:e3:af:09:f3:4b:61:0c:df:3f:d9:52:72:0b:3f:de:c5:
         c6:45:31:9f:97:2b:68:4d:55:06:49:25:f4:e2:03:39:a2:fc:
         c0:08:8c:4c:8b:8d:b9:55:da:80:c2:ae:51:24:aa:7f:67:c0:
         65:94:19:6a:6f:34:08:11:b4:51:ea:f2:4c:95:1d:13:70:3c:
         b1:ab:df:d1:db:e2:55:40:52:29:f6:be:7a:b0:6f:28:79:fa:
         e1:57:91:6c:79:0a:a4:cf:df:97:10:19:ac:a7:b5:38:43:44:
         14:ba:8f:81:71:89:7a:fb:6f:88:11:8f:79:cc:fe:94:b4:53:
         43:61:87:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:06:31 2026 by rpki-client