Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft
File:                     1-msoRBterQGEZTXq8gv9B1LgdkU.mft (raw, json)
Hash identifier:          yTdg2Wwo+D+Gb4ec7LMU9Dzj4RD82qgk/KUWjVFc6mU=
Subject key identifier:   14:84:A4:5D:8D:F0:74:24:2B:71:6A:54:24:5D:29:6F:1F:AA:07:93
Authority key identifier: FA:6B:28:44:1B:5E:AD:01:84:65:35:EA:F2:0B:FD:07:52:E0:76:45
Certificate issuer:       /CN=fa6b28441b5ead01846535eaf20bfd0752e07645
Certificate serial:       019E1D91035C4BC3A2F98BF0FCA869793425
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-msoRBterQGEZTXq8gv9B1LgdkU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft
Manifest number:          024C
Signing time:             Tue 12 May 2026 19:01:43 +0000
Manifest this update:     Tue 12 May 2026 19:01:43 +0000
Manifest next update:     Wed 13 May 2026 19:01:43 +0000
Files and hashes:         1: 1-msoRBterQGEZTXq8gv9B1LgdkU.crl (hash: hQrz4KZNBaFvbdTgFL66ElYCUW2wW4BFIzQaiDgQz4M=)
                          2: 2798bsS-ftRBFC8OmYwDYZazwYQ.roa (hash: YEsqHt1g8/MDYthWrn0j31l+d4G+HJ7yjiXjTwZ5WJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-msoRBterQGEZTXq8gv9B1LgdkU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:91:03:5c:4b:c3:a2:f9:8b:f0:fc:a8:69:79:34:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa6b28441b5ead01846535eaf20bfd0752e07645
        Validity
            Not Before: May 12 19:01:43 2026 GMT
            Not After : May 13 19:01:43 2026 GMT
        Subject: CN=1484a45d8df074242b716a54245d296f1faa0793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:07:bb:30:62:b9:9d:bb:ea:7d:64:18:15:0b:
                    f0:b1:e5:7c:41:66:60:ed:a9:e3:48:27:52:77:18:
                    21:f5:75:c6:8c:56:91:d7:f7:9e:09:89:09:37:7c:
                    3c:55:0b:3d:6f:69:49:20:af:b2:66:77:ff:41:35:
                    c9:8d:c7:2b:74:12:f8:ad:cc:80:91:c9:be:3b:91:
                    07:3b:9b:e3:56:b1:50:a4:a3:85:06:ab:fa:10:f1:
                    44:6c:d5:3c:1c:7c:54:b9:63:78:b9:db:72:58:57:
                    7c:bc:cd:e5:17:cb:cf:26:a5:31:a1:41:02:94:11:
                    eb:26:2c:2f:58:d8:bf:ec:4b:f5:f1:59:f0:bb:90:
                    80:26:3a:2d:d3:6c:62:4f:d3:cd:97:f5:ff:26:91:
                    3b:c3:cc:ed:93:9b:dc:d1:99:b4:73:f8:53:c3:58:
                    7a:92:90:d9:34:46:de:39:b8:76:6a:0c:65:b2:ed:
                    44:a5:b7:22:06:be:4d:50:9a:29:ff:34:59:86:40:
                    06:b4:13:76:3c:37:a0:bc:99:66:67:7f:0b:df:6a:
                    4d:ce:3c:a3:2c:0d:fa:c6:f7:2a:62:28:60:6a:46:
                    ff:34:40:95:de:6f:63:31:0a:3f:27:f3:cd:d3:6d:
                    a6:55:9d:bd:41:43:5f:9d:09:78:94:f8:74:3f:11:
                    58:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:84:A4:5D:8D:F0:74:24:2B:71:6A:54:24:5D:29:6F:1F:AA:07:93
            X509v3 Authority Key Identifier:
                keyid:FA:6B:28:44:1B:5E:AD:01:84:65:35:EA:F2:0B:FD:07:52:E0:76:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-msoRBterQGEZTXq8gv9B1LgdkU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:02:3e:71:39:c4:60:8d:4d:3c:38:e4:de:65:fc:c3:97:1e:
         81:43:41:d1:ef:33:e1:96:ac:f0:0c:52:e5:10:0b:bf:52:09:
         d8:97:53:21:23:42:fd:b8:c5:2a:0f:fc:1b:26:fc:93:c6:4e:
         ef:79:34:9f:36:07:6a:7e:c3:a8:5c:9d:13:5c:7e:04:ec:63:
         a7:b7:23:3a:0f:a8:b3:6e:c0:b5:f0:f7:bf:e5:67:dc:f6:67:
         72:ea:5f:20:3c:b0:65:d5:d7:28:10:dd:c0:e1:66:7d:2a:55:
         c0:35:c6:ab:bd:c1:ae:cc:ba:34:89:7c:7e:de:54:d5:10:d0:
         a3:29:98:9a:f6:34:05:e9:e4:80:6e:f1:27:09:60:82:ee:85:
         fc:11:2a:89:50:2e:df:fa:87:2a:35:db:34:2d:70:aa:16:23:
         32:61:49:dd:f1:7e:a5:15:f7:74:c3:48:29:24:05:53:a7:2a:
         4c:0c:3c:9e:e6:ed:13:f1:23:49:04:e2:90:60:8a:4c:0e:8e:
         cd:71:97:be:ce:33:20:2c:c3:f7:65:66:c0:d0:43:43:1f:bc:
         8c:0d:72:f4:31:ff:09:8a:69:ea:62:19:5a:f0:6e:92:1e:29:
         f5:09:fc:05:1a:6f:de:06:22:56:02:0a:3a:42:6b:92:2f:5c:
         c5:c2:f5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:28:02 2026 by rpki-client