Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft
File:                     SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft (raw, json)
Hash identifier:          WmjbHHdxWYCYxi0AoB8bQCTLJ9DkZ+7DYkcWx/MqcXo=
Subject key identifier:   B6:2E:75:2A:E3:A9:59:86:01:A8:97:20:B8:8F:86:F7:38:AF:2F:1F
Authority key identifier: 48:50:18:B5:C2:FE:F1:24:8A:B6:EC:0D:07:E9:71:EC:BC:F7:39:CA
Certificate issuer:       /CN=485018b5c2fef1248ab6ec0d07e971ecbcf739ca
Certificate serial:       019E1EA3866310A1FCC2E5B45515ADA2E7F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft
Manifest number:          02EC
Signing time:             Wed 13 May 2026 00:01:33 +0000
Manifest this update:     Wed 13 May 2026 00:01:33 +0000
Manifest next update:     Thu 14 May 2026 00:01:33 +0000
Files and hashes:         1: Rn4SiK5tt6rA-g6mRu3ZOnBd6z8.roa (hash: 1RB9vRKs49M3yF98f580LlP8MNfzjcsdxXS3Wijgsnc=)
                          2: SFAYtcL-8SSKtuwNB-lx7Lz3Oco.crl (hash: jUEpna4CKcomMz1WBNCRuscYVkedFJJ7L/Yq7jfOd/Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:86:63:10:a1:fc:c2:e5:b4:55:15:ad:a2:e7:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=485018b5c2fef1248ab6ec0d07e971ecbcf739ca
        Validity
            Not Before: May 13 00:01:33 2026 GMT
            Not After : May 14 00:01:33 2026 GMT
        Subject: CN=b62e752ae3a9598601a89720b88f86f738af2f1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a3:17:68:39:ba:4c:4a:81:67:ce:e6:71:4f:
                    fa:60:70:c9:4f:d5:d3:c9:c3:16:f1:c7:9e:df:25:
                    4f:cf:9e:46:62:f2:bd:8e:ed:63:75:10:a1:89:3c:
                    26:1c:b1:80:3a:ec:ac:a4:5f:ec:cd:62:59:6e:56:
                    64:60:58:eb:e7:29:50:6e:7d:ab:a9:60:b9:7c:14:
                    8b:c9:00:53:e1:b7:ff:09:e3:3a:cd:ed:ca:07:39:
                    4c:93:25:98:09:34:a4:ab:11:40:43:1c:cd:82:cd:
                    48:64:61:77:19:6d:be:a7:ed:31:5f:17:fc:52:82:
                    76:2a:09:52:e5:3e:b7:b4:a6:fa:b4:ba:67:0f:75:
                    d4:53:0c:80:1e:2d:af:65:4c:db:51:bc:69:96:48:
                    5e:6a:df:10:ef:67:d3:b2:8e:e3:e8:99:12:bf:16:
                    26:eb:0f:79:02:5d:14:a2:bc:89:52:00:e6:50:76:
                    d9:b7:a8:77:e0:95:69:45:08:9f:69:74:0e:8f:55:
                    06:4e:d7:8d:0f:2f:1c:76:3b:7a:b0:39:fb:54:b9:
                    99:5f:6b:f2:ed:c9:69:61:51:55:4e:21:2b:87:65:
                    1a:be:ac:0e:50:5f:54:31:2f:56:1f:fc:f5:77:a3:
                    18:c8:df:6f:23:7e:8b:5c:40:69:90:96:a8:e5:db:
                    50:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:2E:75:2A:E3:A9:59:86:01:A8:97:20:B8:8F:86:F7:38:AF:2F:1F
            X509v3 Authority Key Identifier:
                keyid:48:50:18:B5:C2:FE:F1:24:8A:B6:EC:0D:07:E9:71:EC:BC:F7:39:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:5b:80:04:50:48:af:fd:51:09:b0:e1:ba:73:4a:12:2b:47:
         d7:a2:2b:37:0b:76:8b:65:71:10:9e:b7:17:d9:04:e2:bd:d7:
         88:ec:31:3e:95:b0:d4:e0:80:6e:d7:d9:1e:d5:af:d9:13:b4:
         00:c3:73:4d:02:97:20:84:a2:42:69:cd:dd:55:16:a8:8f:3d:
         d1:59:0c:7b:7c:0c:f2:5f:d7:90:40:da:3c:00:c8:33:a3:8f:
         aa:80:55:87:61:6b:d6:bd:2f:a7:bf:18:06:dd:ba:4e:08:cc:
         eb:d2:f4:26:9e:e8:30:62:5d:3a:68:35:41:75:d0:70:12:7c:
         91:3f:c5:ef:7e:2e:91:d2:4c:15:b3:0e:b6:3f:99:00:6f:5a:
         b4:01:66:75:80:af:43:5b:24:27:16:59:7d:42:fa:de:e4:e9:
         1e:55:99:9c:62:0e:26:6d:c4:4f:d9:4e:06:ea:64:36:87:81:
         70:27:80:73:3d:99:c3:b5:bb:9c:f8:55:de:b7:a6:0d:03:74:
         20:06:1b:b7:6f:a7:66:b7:77:cf:53:6d:04:99:c9:06:f5:0f:
         5d:72:fb:ba:2f:a3:09:06:cf:07:5f:b7:c7:e2:4c:4b:0f:89:
         fa:e7:84:b3:cd:07:82:10:6f:11:36:52:36:73:2c:2e:6a:d6:
         37:d1:0d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:07:06 2026 by rpki-client