Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
File:                     0ccPHzPFgdt4oUm8htc5zcfOJqc.mft (raw, json)
Hash identifier:          dthpoT+Z/pt32FqSnivyyMka1oDTAc/RaVsiOTh9KJ0=
Subject key identifier:   B4:C8:DD:D3:E8:B3:A0:CE:4A:32:54:79:66:ED:FE:70:98:BE:AD:6B
Authority key identifier: D1:C7:0F:1F:33:C5:81:DB:78:A1:49:BC:86:D7:39:CD:C7:CE:26:A7
Certificate issuer:       /CN=d1c70f1f33c581db78a149bc86d739cdc7ce26a7
Certificate serial:       019E1CB5107E4B96474A652C80831073BD8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
Manifest number:          079C
Signing time:             Tue 12 May 2026 15:01:28 +0000
Manifest this update:     Tue 12 May 2026 15:01:28 +0000
Manifest next update:     Wed 13 May 2026 15:01:28 +0000
Files and hashes:         1: 0ccPHzPFgdt4oUm8htc5zcfOJqc.crl (hash: lfveH3PflR1gtSEnbXB1hXii5ZFwY320zXc1mMZ/14Y=)
                          2: 6-x6MjhIWmKkKN8PSvag3_NMayM.roa (hash: DJxqLKJWXBtl7f6AjOofGTskuyYrFGFq1UI9pHAp0p0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b5:10:7e:4b:96:47:4a:65:2c:80:83:10:73:bd:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1c70f1f33c581db78a149bc86d739cdc7ce26a7
        Validity
            Not Before: May 12 15:01:28 2026 GMT
            Not After : May 13 15:01:28 2026 GMT
        Subject: CN=b4c8ddd3e8b3a0ce4a32547966edfe7098bead6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:69:ee:5f:70:94:f0:62:c9:e5:5b:c8:62:69:
                    91:4d:7b:b0:97:58:f0:46:29:d8:1e:fa:dd:99:ac:
                    b4:22:d1:ed:cf:fd:dc:1b:62:c2:3a:43:c1:8b:da:
                    7b:22:72:df:70:6e:96:8b:6e:6f:ad:a0:4e:a2:16:
                    33:d7:83:07:57:5f:3e:40:89:cc:9c:02:1c:44:04:
                    e5:67:a5:86:1b:28:df:99:6d:59:07:4a:92:e8:24:
                    0e:70:7a:f7:5c:6e:7e:48:c2:93:96:7a:0a:e8:67:
                    bb:a4:cb:c8:a9:0f:d6:2f:96:97:5c:af:b6:a1:ce:
                    b1:9c:ed:e4:96:e2:b6:6c:f6:13:01:01:b3:6e:b9:
                    5b:62:85:8c:5c:f2:d4:be:5c:de:8e:b6:24:41:45:
                    c1:62:2d:8f:20:4b:8d:29:38:ab:2f:4b:ef:4c:6d:
                    5d:74:51:54:a9:21:c2:fd:32:fa:a0:26:71:28:1d:
                    21:f0:d7:e6:c2:87:c3:71:e6:8d:7d:3a:a8:70:69:
                    44:3b:d5:8e:2e:3d:88:31:f8:ca:06:4a:f9:3f:c2:
                    45:83:2e:89:77:84:29:c7:df:1b:32:28:b4:79:aa:
                    16:fb:c0:76:0a:7d:5c:93:c4:0e:15:6b:23:4b:de:
                    b6:f4:04:91:79:6e:09:83:e3:f8:a4:16:03:96:0d:
                    26:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C8:DD:D3:E8:B3:A0:CE:4A:32:54:79:66:ED:FE:70:98:BE:AD:6B
            X509v3 Authority Key Identifier:
                keyid:D1:C7:0F:1F:33:C5:81:DB:78:A1:49:BC:86:D7:39:CD:C7:CE:26:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:d9:7f:01:34:0d:db:41:87:9a:ee:30:8f:1e:1f:f1:5f:bb:
         ed:5c:53:fa:9a:b4:4c:cf:7b:20:1e:fd:c7:98:53:d4:a0:45:
         c0:be:71:6f:d3:9d:df:da:5f:b1:1b:71:23:9f:85:2e:18:0c:
         20:c2:64:77:65:0a:d5:5f:1d:ac:e6:6c:27:a0:60:7b:7b:c3:
         14:82:2c:30:7b:37:f9:d6:05:fb:07:bd:95:47:d8:a0:42:5e:
         8c:9c:b2:c2:97:14:03:73:9c:95:84:24:19:51:16:c6:af:be:
         13:6a:57:10:8d:6c:72:e3:de:24:04:e1:e4:55:9b:78:a1:53:
         56:7b:53:a7:f4:ca:db:54:9d:31:b7:18:1b:4d:72:16:b3:80:
         63:90:c1:40:91:b3:e3:a5:a5:a1:90:97:38:ee:fe:4f:50:b7:
         fe:ea:29:07:73:1e:03:ae:14:98:f2:a8:0a:d0:17:a4:25:d6:
         e2:ea:ec:d3:fd:72:8e:be:63:c5:2c:6c:5a:37:ba:d3:cf:81:
         8c:bd:8c:e1:ab:30:21:3c:8b:ff:f3:24:ec:23:0d:86:a2:da:
         b8:6d:b1:2a:34:b2:35:87:2d:3d:48:bb:41:0f:a1:c2:61:5c:
         ec:8c:3a:42:5f:48:34:55:86:4e:8e:1d:f7:4c:3a:e4:7c:31:
         2f:85:46:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:56:37 2026 by rpki-client