Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
File:                     dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft (raw, json)
Hash identifier:          8eRQ6KzS3+o4oIh5WJtT7mqMku0H34QFu7plQnsR64o=
Subject key identifier:   25:A3:EA:A2:5A:98:AE:34:83:9F:5C:C4:9F:FE:15:CF:93:41:78:8C
Authority key identifier: 74:BF:07:F0:4C:C7:6A:90:AD:97:F9:F1:74:9F:AB:CF:05:C3:5D:62
Certificate issuer:       /CN=74bf07f04cc76a90ad97f9f1749fabcf05c35d62
Certificate serial:       019E1F111B3ACF9D9B81ABEC4AAA9C08AE87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
Manifest number:          0BFD
Signing time:             Wed 13 May 2026 02:01:15 +0000
Manifest this update:     Wed 13 May 2026 02:01:15 +0000
Manifest next update:     Thu 14 May 2026 02:01:15 +0000
Files and hashes:         1: dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl (hash: mz369rNiAfb71p0oVXaoLHHbUm6fn/PkEqI4iaI2Zzs=)
                          2: urvvaO540p5lCG-661I_LYSazhQ.roa (hash: OYiQT7PXJGef2AODl6kFsbHiALBw8riu/71BAiKYr70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 02:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:1b:3a:cf:9d:9b:81:ab:ec:4a:aa:9c:08:ae:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74bf07f04cc76a90ad97f9f1749fabcf05c35d62
        Validity
            Not Before: May 13 02:01:15 2026 GMT
            Not After : May 14 02:01:15 2026 GMT
        Subject: CN=25a3eaa25a98ae34839f5cc49ffe15cf9341788c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:02:42:53:45:2c:6b:1a:32:a0:d9:0c:1a:56:
                    d4:4b:61:46:c3:64:54:50:6d:f7:ce:62:59:6f:cc:
                    aa:49:2a:b9:e9:ba:0d:6a:f9:a6:5f:d0:28:57:ac:
                    62:41:65:e5:da:bc:04:13:a1:f5:81:e8:fe:60:1d:
                    d4:40:a9:a3:f2:4e:cd:fb:50:78:b6:97:4c:3c:a9:
                    9a:21:d3:ad:45:33:f8:77:18:b4:50:e3:fa:2f:1f:
                    94:4f:b0:61:75:6c:e3:58:bd:2b:5b:90:07:9e:19:
                    7b:54:a1:22:06:a4:34:82:8e:15:a5:00:99:ba:88:
                    41:14:44:25:0d:6f:f3:71:34:79:33:97:37:9b:98:
                    05:37:cc:19:9a:38:c2:06:57:e4:c7:0f:60:57:21:
                    66:d6:47:9c:33:d0:b0:67:cb:2a:45:b8:4c:25:56:
                    9d:6f:fc:a9:39:84:b9:44:c2:19:ee:a3:35:ee:ea:
                    72:23:d4:6a:e0:96:49:3b:ae:16:ed:a6:f7:fb:1c:
                    3c:64:26:7d:15:50:55:d0:ea:cc:5a:35:2e:a6:ae:
                    dd:6b:d4:fd:57:89:f5:2a:29:c0:f7:44:e8:94:a1:
                    ae:3b:08:86:d3:00:ea:73:41:3e:22:95:92:8d:4e:
                    e8:b6:30:ba:25:2f:57:89:06:e8:7d:00:00:99:66:
                    c1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A3:EA:A2:5A:98:AE:34:83:9F:5C:C4:9F:FE:15:CF:93:41:78:8C
            X509v3 Authority Key Identifier:
                keyid:74:BF:07:F0:4C:C7:6A:90:AD:97:F9:F1:74:9F:AB:CF:05:C3:5D:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:d8:42:c9:19:15:4a:93:ef:61:5a:d8:b4:83:f7:09:6c:74:
         d5:af:31:1e:77:dc:f0:ec:68:ce:9c:63:b8:fc:ee:1c:be:00:
         73:51:1d:9d:9c:ae:3f:7b:c1:c7:05:82:4b:f2:50:ff:54:74:
         f8:b9:8b:c9:e7:88:6e:92:0d:a3:71:00:b9:13:f1:ed:a1:03:
         3b:3c:63:03:1e:46:0e:8d:f1:4e:5e:1b:05:fb:14:a2:f7:fe:
         09:c6:58:24:d3:97:dc:e0:a8:4e:03:7d:1c:d3:8b:10:eb:6c:
         9f:70:2b:e5:02:0d:7d:d2:db:52:3a:ff:20:e7:1c:0c:28:3a:
         ba:af:95:21:bb:b2:e0:52:c1:73:1b:7f:c0:0a:85:93:b4:ae:
         4f:7d:f3:89:c8:5f:05:82:43:a9:20:0d:fc:8f:4c:ab:66:2c:
         3f:70:d6:d5:6d:79:78:23:7a:8e:31:28:26:f0:0a:2b:78:42:
         04:8f:e7:1f:82:a7:a4:e8:3a:51:0e:62:a4:ec:d2:09:e5:c5:
         83:53:af:2c:f5:f5:af:33:07:9d:6c:86:10:97:2d:6e:57:0c:
         08:90:3d:c7:69:cf:af:b8:22:c3:b9:33:e8:2a:b7:e9:e1:ef:
         af:8f:74:de:16:27:d1:eb:79:9b:40:ba:3e:7a:8c:02:c2:82:
         f3:44:e8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:31:15 2026 by rpki-client