Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft
File:                     9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft (raw, json)
Hash identifier:          jCd6+dWOgewLMeBYvpUNqixURRiSagkunTX06TXzmXM=
Subject key identifier:   68:0B:67:88:06:73:96:0E:D5:41:7C:49:94:5A:59:57:69:82:7A:61
Authority key identifier: F6:41:34:86:88:6B:56:23:1D:EC:57:3F:AD:4F:8A:B3:2C:BF:92:A4
Certificate issuer:       /CN=f6413486886b56231dec573fad4f8ab32cbf92a4
Certificate serial:       019E1C0F8E07C22FC4AEF0A8FECB1D358E5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft
Manifest number:          145A
Signing time:             Tue 12 May 2026 12:00:41 +0000
Manifest this update:     Tue 12 May 2026 12:00:41 +0000
Manifest next update:     Wed 13 May 2026 12:00:41 +0000
Files and hashes:         1: 9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl (hash: hV2JcUi8/3fmEj8WkQ59XnrMgTk0lL94/VYT8bv4kH4=)
                          2: F5y9ZOsLF94osiTAvUu_ZpYquTw.roa (hash: XwqPFonWgi2NEgeq0iK4xwmr9JNoIB6OncnPE0wX2yA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 12:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:0f:8e:07:c2:2f:c4:ae:f0:a8:fe:cb:1d:35:8e:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6413486886b56231dec573fad4f8ab32cbf92a4
        Validity
            Not Before: May 12 12:00:41 2026 GMT
            Not After : May 13 12:00:41 2026 GMT
        Subject: CN=680b67880673960ed5417c49945a595769827a61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:31:22:a3:6f:96:10:f6:3d:05:1e:8d:b5:92:
                    dd:f3:25:ba:57:b9:5a:23:b0:5b:46:2d:0a:73:e7:
                    62:ed:a8:a1:c4:eb:67:a1:78:10:03:be:51:d1:6c:
                    5c:06:39:5f:d7:4c:4c:73:1a:66:74:6f:33:71:e9:
                    14:0d:ea:02:cb:a2:c1:02:fe:ce:0c:b1:a7:5f:63:
                    13:6c:67:a1:d4:b2:d3:26:14:fa:6a:ec:6c:71:d8:
                    84:53:5e:6d:47:fc:2c:12:09:eb:78:88:16:67:25:
                    75:a6:2c:06:b5:cd:cf:0b:39:a9:8e:91:c7:45:c6:
                    7b:9c:4f:e4:32:cf:39:df:fd:48:b6:1f:0d:9b:7c:
                    77:8f:97:2e:f8:92:3f:0c:3b:36:34:60:a5:4a:c0:
                    21:c6:68:4b:ee:4a:ce:eb:f8:18:fe:44:e7:ba:5b:
                    f8:45:14:17:17:cb:58:72:28:cf:b2:d6:12:af:06:
                    f7:5b:2a:cc:46:61:db:05:4b:93:47:c5:dc:8b:42:
                    31:8b:97:f0:b8:b4:3b:88:a5:6d:6e:ba:83:d7:31:
                    7d:4a:f5:aa:94:69:92:57:83:01:73:73:e9:d2:2b:
                    f9:23:bf:e7:37:27:23:87:cf:45:d9:6c:d4:31:1d:
                    94:cf:27:ed:f0:9b:8b:1c:82:ac:c8:86:cf:d1:4a:
                    74:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:0B:67:88:06:73:96:0E:D5:41:7C:49:94:5A:59:57:69:82:7A:61
            X509v3 Authority Key Identifier:
                keyid:F6:41:34:86:88:6B:56:23:1D:EC:57:3F:AD:4F:8A:B3:2C:BF:92:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:7e:96:dc:38:58:7b:7f:f1:b6:6c:5d:78:6e:12:98:67:7e:
         81:50:58:96:dd:b0:b2:08:f9:0e:1b:03:da:22:2c:62:db:37:
         2c:b1:b5:9e:37:52:cc:cd:41:ad:63:a3:3a:f6:10:1c:e0:e3:
         ce:a2:9a:8e:c2:c3:8e:95:05:97:f4:fe:19:16:1b:b3:25:d7:
         57:27:67:3b:c2:26:5e:e8:df:4a:45:4f:b2:d5:99:c0:f7:75:
         2b:36:39:96:bb:d5:5f:ad:5a:7e:33:b5:c1:93:db:bc:d3:56:
         66:d1:4e:e5:d1:3b:ae:f5:ee:6b:28:a0:2d:48:bf:c8:b7:a3:
         14:4d:92:0d:bc:2c:a5:c3:51:ec:b8:ae:93:6b:1e:ec:9b:2d:
         49:dc:42:4c:d6:4b:ec:b1:ae:d9:bc:90:c0:95:e2:98:6e:e6:
         ee:61:b9:d7:94:23:f3:d4:00:b7:43:9b:73:3f:be:e5:c7:87:
         4a:fa:87:85:c8:0a:15:89:36:8f:fc:6c:7a:a7:b5:9d:02:cf:
         e3:29:a8:00:de:b6:f2:3d:95:2a:b1:ea:7e:bf:34:02:0a:88:
         e1:66:46:99:7c:6c:cc:0b:7e:65:e5:d9:f7:2a:28:81:ed:31:
         94:35:2f:cd:8a:d2:15:36:57:39:25:46:38:6d:09:71:3b:b8:
         72:18:7b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:36:57 2026 by rpki-client