Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
File:                     0GLPgHpWt3Gl9CzBia8tYx61quw.mft (raw, json)
Hash identifier:          rEZbSPoKcrUhAWmeYf/NMqWHEKFtPTo5AeVjM/LffOg=
Subject key identifier:   58:11:C6:B4:99:4F:18:13:B3:A8:91:03:EC:6D:29:7E:E6:FF:31:CA
Authority key identifier: D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC
Certificate issuer:       /CN=d062cf807a56b771a5f42cc189af2d631eb5aaec
Certificate serial:       019E1CEB9AD2F25A1A18FE469C80CFBB6968
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
Manifest number:          04D6
Signing time:             Tue 12 May 2026 16:01:03 +0000
Manifest this update:     Tue 12 May 2026 16:01:03 +0000
Manifest next update:     Wed 13 May 2026 16:01:03 +0000
Files and hashes:         1: 0GLPgHpWt3Gl9CzBia8tYx61quw.crl (hash: /Uo+kqUfgcBZyTkVqAqVOhkMKPA8KW1y5klsJkwFyHQ=)
                          2: FwyHYSFHDsnHe13-teMRd2Fwsok.roa (hash: HzeLlPvVaerPbRc2Uu0sKiJSiZNPtG93MnAwRwanKNY=)
                          3: NrghsoBul7tbolTWF8ZamRT2aQc.roa (hash: hJwEiMp115u5I16JHTrfollMknUTcgmFLYKBs/fIj04=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:9a:d2:f2:5a:1a:18:fe:46:9c:80:cf:bb:69:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d062cf807a56b771a5f42cc189af2d631eb5aaec
        Validity
            Not Before: May 12 16:01:03 2026 GMT
            Not After : May 13 16:01:03 2026 GMT
        Subject: CN=5811c6b4994f1813b3a89103ec6d297ee6ff31ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c3:1d:3d:33:28:74:26:a5:f2:1c:07:b2:57:
                    ff:56:a5:71:96:ed:78:28:74:34:26:2f:c9:4a:c5:
                    2c:04:fb:7f:b5:44:05:09:0c:b0:7f:29:ce:9b:1a:
                    32:38:fe:64:dc:75:f5:b7:4d:4b:d1:ae:42:e2:5c:
                    44:f2:94:ae:3a:f3:2f:67:ab:25:a3:42:ef:00:27:
                    b6:1b:fa:ce:47:16:99:f6:c9:98:85:99:1e:92:ae:
                    10:c5:0f:e6:d9:78:ac:5e:62:d1:5b:d3:be:f4:f1:
                    a0:83:55:5d:68:ac:d4:6a:67:89:d6:7e:c0:0e:c4:
                    e4:83:43:7c:87:58:03:d2:7e:20:81:db:8e:3d:72:
                    4a:cf:b5:56:d8:65:11:84:b9:0f:8e:a9:4a:f9:e6:
                    51:16:d3:92:63:89:86:01:2d:2a:ae:6a:56:ac:e0:
                    57:96:53:f5:d3:2c:56:1e:08:f4:04:c3:68:dd:07:
                    a4:04:73:3f:4a:81:60:90:78:f6:32:a6:2a:5c:c4:
                    b7:93:a9:30:da:e3:45:4b:58:37:ea:de:40:c0:41:
                    00:42:51:0d:a8:22:43:24:f2:e5:75:f0:bc:c2:6b:
                    fb:28:8c:60:fd:93:c2:37:6a:42:f5:8a:5a:15:b0:
                    09:f2:41:65:7e:a7:85:f0:5d:cf:ee:7d:ec:6e:6a:
                    5c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:11:C6:B4:99:4F:18:13:B3:A8:91:03:EC:6D:29:7E:E6:FF:31:CA
            X509v3 Authority Key Identifier:
                keyid:D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:fd:e1:cb:4c:f6:df:0a:fe:ad:f9:2e:4b:34:77:12:d8:83:
         8d:d5:71:56:21:c8:41:ee:65:24:19:ab:0a:5b:70:f5:9d:1e:
         20:98:e0:8e:a2:ae:11:50:1f:25:42:d8:ab:5a:f1:98:30:18:
         24:85:7c:2d:f2:4b:ef:9b:97:01:50:28:2d:c0:19:79:06:db:
         41:0c:ba:4f:b0:b5:7e:55:9b:67:e7:91:70:be:aa:a6:b0:b1:
         ef:57:d9:f1:97:18:cb:bc:b3:0e:0b:fb:51:81:d2:d2:aa:2c:
         b2:d7:ff:cd:fb:c0:35:84:73:d4:7a:d6:59:33:37:f9:69:ff:
         8f:f3:97:20:71:cc:00:c7:4f:66:a3:62:96:73:87:3e:14:80:
         57:58:82:9b:eb:1b:1d:90:f2:93:17:e8:4f:de:3d:8e:d1:9a:
         ab:7f:2a:1f:ac:e6:03:aa:6e:6e:c4:1c:23:9f:cb:15:9f:ec:
         01:98:00:6d:8e:cd:ae:c7:bb:c3:fe:b5:8f:87:d2:ed:34:b3:
         59:58:af:98:bf:97:89:22:7c:0d:5d:57:5c:29:95:34:cd:3e:
         69:9f:41:3c:c5:23:e0:4d:77:2b:27:6d:46:36:0f:37:6c:1a:
         d8:1a:a6:67:67:f0:92:78:46:8d:d1:58:e8:de:04:e9:14:77:
         d1:28:f9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:14 2026 by rpki-client