Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
File:                     D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft (raw, json)
Hash identifier:          Tpey63WHCCDcwIn68HGAlhxQllZd3ZCe8X4exJ2i28Y=
Subject key identifier:   C8:F8:86:6A:81:53:84:C3:B0:37:BD:58:A9:A4:4B:55:E2:9C:C3:97
Authority key identifier: 0F:82:7A:5A:24:E7:71:CC:14:FA:69:BB:74:B3:E7:60:16:7B:02:6B
Certificate issuer:       /CN=0f827a5a24e771cc14fa69bb74b3e760167b026b
Certificate serial:       019E1CB465C22ACF48EC51AF77A2B4788313
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
Manifest number:          0B5B
Signing time:             Tue 12 May 2026 15:00:45 +0000
Manifest this update:     Tue 12 May 2026 15:00:45 +0000
Manifest next update:     Wed 13 May 2026 15:00:45 +0000
Files and hashes:         1: D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl (hash: 7e2HprL84uE0o/QKvzjjUds0vm6kKetd3IY+mCiOJp4=)
                          2: RZQiwmw-LTuvBT8bKGu9sePwQKA.roa (hash: 30MASV+eS5v/knDU6PvbB3wtKl60C43+n0OVN/QWwQs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b4:65:c2:2a:cf:48:ec:51:af:77:a2:b4:78:83:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f827a5a24e771cc14fa69bb74b3e760167b026b
        Validity
            Not Before: May 12 15:00:45 2026 GMT
            Not After : May 13 15:00:45 2026 GMT
        Subject: CN=c8f8866a815384c3b037bd58a9a44b55e29cc397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:26:f9:22:aa:e0:7c:02:e8:71:53:7d:02:1c:
                    e2:96:6a:47:c0:9c:51:d0:89:a2:90:08:d8:0c:25:
                    4a:fd:1e:a8:78:36:1e:fc:53:77:30:fd:a7:61:fe:
                    08:41:58:69:bc:88:34:02:b9:24:69:7c:45:58:a2:
                    17:2c:cd:30:d6:88:c6:85:21:f2:64:0f:8f:34:f3:
                    88:fb:f5:b7:b3:ae:73:38:46:cf:0e:a5:b6:d0:fb:
                    a7:09:d3:e1:a8:af:2d:53:73:4a:c9:86:b9:5d:c0:
                    4e:d0:14:be:25:aa:d5:f5:40:1f:00:26:ca:df:c0:
                    48:9a:bd:d0:ae:4d:b4:1b:ff:21:d3:c5:36:da:82:
                    d3:76:8f:40:ab:ba:1f:4c:65:c6:c3:c6:22:98:58:
                    3e:02:b0:24:3e:76:c4:f1:8e:05:21:cf:cb:93:9c:
                    54:46:50:c8:10:63:b3:50:bd:48:8d:c3:92:61:33:
                    a3:e2:ba:b7:a7:70:71:b2:ca:66:75:c6:2a:23:df:
                    29:14:0d:cb:4c:cb:df:86:2a:f6:56:43:9f:c6:48:
                    e4:33:6f:76:40:ab:89:14:53:e7:62:4a:08:9e:24:
                    b5:4c:80:86:4c:dc:65:aa:c0:4e:2d:40:a6:2f:6a:
                    10:45:c0:5f:85:d4:d8:74:7f:5e:ff:3e:65:13:86:
                    e6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F8:86:6A:81:53:84:C3:B0:37:BD:58:A9:A4:4B:55:E2:9C:C3:97
            X509v3 Authority Key Identifier:
                keyid:0F:82:7A:5A:24:E7:71:CC:14:FA:69:BB:74:B3:E7:60:16:7B:02:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:f0:f9:07:47:eb:2d:d9:f5:be:eb:74:86:50:95:55:f6:70:
         17:8d:29:e3:86:ea:29:0b:db:04:9d:8c:1d:02:85:db:70:2c:
         81:39:96:38:2b:b2:8f:f8:be:e8:17:b7:4d:c0:98:dd:d6:1d:
         93:a3:0f:50:af:3f:ad:11:a4:84:3a:20:90:7a:0f:44:1a:e2:
         55:c2:67:52:8c:f3:f0:62:5f:70:cd:bf:40:b4:c2:88:06:b6:
         fb:f4:bf:8c:97:cc:1c:21:cc:d1:d0:3f:99:b5:62:62:d9:d6:
         0d:04:a0:25:30:2b:f0:05:06:b3:5f:65:0d:7a:18:78:12:5c:
         e5:6b:7c:61:0d:8e:35:1a:12:e2:36:17:85:2b:84:c1:e0:ff:
         d9:a2:37:29:f7:5e:72:fd:13:04:ae:81:87:d2:e6:f0:fa:3f:
         59:52:94:65:c2:db:bd:52:99:53:16:be:3e:00:01:91:64:3b:
         ad:c9:35:06:9c:c2:19:c0:fb:a3:0d:15:fa:ae:b1:05:89:91:
         89:70:bc:03:62:9f:89:a5:4a:66:3a:28:3b:b4:2f:39:15:4c:
         ea:8b:f5:ed:5b:96:36:44:8f:ea:0a:20:31:4e:da:7b:de:2e:
         ab:42:cf:44:bc:c3:c7:be:c9:0e:7f:40:fb:13:1f:fc:ec:98:
         f9:08:53:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:30:11 2026 by rpki-client