Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
File:                     rmrw1fOCidNMIbpnxMOXh6QqZp4.mft (raw, json)
Hash identifier:          03ApxzJGqik0CW1Nz1KHiJyZmffP8w4iRhSm+8tB7rY=
Subject key identifier:   F7:57:9E:98:71:1E:DC:82:43:0E:F0:4C:29:BE:E8:7B:FC:FB:C3:BB
Authority key identifier: AE:6A:F0:D5:F3:82:89:D3:4C:21:BA:67:C4:C3:97:87:A4:2A:66:9E
Certificate issuer:       /CN=ae6af0d5f38289d34c21ba67c4c39787a42a669e
Certificate serial:       019E1EA2F4CF271139FC3907ACC67404255E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
Manifest number:          1903
Signing time:             Wed 13 May 2026 00:00:56 +0000
Manifest this update:     Wed 13 May 2026 00:00:56 +0000
Manifest next update:     Thu 14 May 2026 00:00:56 +0000
Files and hashes:         1: 7jEzRpfkM_lhZ7uAKRZvwSRQGNU.roa (hash: pz42e1Hyvu2YQLi28FAYwohQh8FXz6tczqllHjBA0EQ=)
                          2: XggtKq3xpWGXCHEG7oJDyVrafuA.roa (hash: Dw7wzvUkHqS4QhsFOClTO2lSejFZXMTyIw7n7pmXh3Q=)
                          3: rmrw1fOCidNMIbpnxMOXh6QqZp4.crl (hash: jODbKp1oOlmfCDiq0aEJq1G2aIL8lS/JnIH2pM67FSo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a2:f4:cf:27:11:39:fc:39:07:ac:c6:74:04:25:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae6af0d5f38289d34c21ba67c4c39787a42a669e
        Validity
            Not Before: May 13 00:00:56 2026 GMT
            Not After : May 14 00:00:56 2026 GMT
        Subject: CN=f7579e98711edc82430ef04c29bee87bfcfbc3bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:55:a4:eb:70:09:ae:4e:41:a0:02:6c:2c:79:
                    7f:1b:0f:41:ea:82:ac:47:78:f0:b0:4f:e5:d9:8c:
                    ab:19:5a:ec:db:19:f7:96:52:78:71:6a:94:9a:79:
                    2f:46:78:3b:fa:7d:2a:bb:d9:9b:c2:1f:b8:85:9c:
                    91:80:da:9e:e0:ef:8b:d5:3a:f7:d2:33:80:e2:0a:
                    b4:32:b8:38:45:4e:ee:85:71:bb:69:bc:90:94:ee:
                    1b:a3:1b:07:82:1f:7b:d8:95:a1:eb:1a:d9:44:a8:
                    1c:01:a4:76:47:78:ca:aa:b6:e8:d3:8b:3d:46:fa:
                    a1:e6:96:23:ad:99:fa:89:03:36:ed:c7:05:4e:9c:
                    a5:17:4f:d7:ec:c0:65:83:48:2b:06:c8:ae:31:e6:
                    36:d0:71:68:69:a5:e3:2f:84:e2:5a:3c:2a:e7:d8:
                    6b:5b:61:f2:9c:ee:f6:1f:17:8b:45:b6:e2:1a:be:
                    00:e2:7f:ac:f1:d7:ce:17:2d:b7:bd:ba:58:59:19:
                    c8:d7:8f:a8:89:ac:a3:09:e3:43:02:40:80:9d:5c:
                    37:2b:0c:f2:12:19:a8:ec:9e:8f:74:f5:53:a5:fd:
                    78:ad:f3:96:89:f0:48:7e:2f:d9:b3:b6:fe:af:9d:
                    12:06:70:8e:30:61:89:10:bf:24:59:83:76:47:82:
                    85:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:57:9E:98:71:1E:DC:82:43:0E:F0:4C:29:BE:E8:7B:FC:FB:C3:BB
            X509v3 Authority Key Identifier:
                keyid:AE:6A:F0:D5:F3:82:89:D3:4C:21:BA:67:C4:C3:97:87:A4:2A:66:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:79:27:69:f0:a3:d2:eb:dd:51:d0:82:5c:a3:8c:a1:10:c5:
         0d:df:12:e1:ce:1d:35:7e:56:43:a9:f6:05:d1:43:50:dc:95:
         cc:68:f7:82:4f:de:cb:81:76:6e:51:58:49:7c:12:ce:5a:d9:
         32:2f:1a:89:6f:c7:1b:f2:33:86:e2:8d:6d:bb:27:36:c8:5f:
         7d:72:81:42:3b:e3:0c:90:d6:cf:65:e2:00:3e:5b:02:ac:de:
         fb:e6:51:c0:c4:e7:08:5d:2c:e0:6c:a5:e7:c2:7f:bb:0a:a4:
         50:a5:0a:2d:8a:be:e7:67:c4:f8:ee:78:cd:fe:a2:3d:56:a4:
         b4:37:55:fb:0c:40:9b:29:56:b3:34:c2:a0:b0:a9:a6:a5:2c:
         2e:a8:cc:b2:35:c7:61:99:89:4f:06:b4:c5:d4:52:78:f7:a7:
         71:09:e8:83:77:a2:5d:6a:5d:c9:c4:a1:18:c7:87:4c:35:e2:
         de:20:f4:c3:bf:aa:3f:76:3c:22:1c:06:64:1d:c8:db:11:1c:
         1f:d5:a0:49:6c:fa:82:47:85:1c:a3:5d:bb:9f:ab:7d:54:76:
         ea:39:ff:54:0c:ce:38:ad:2d:bc:3b:7b:03:8e:f6:19:6d:9e:
         b1:a5:c3:7f:49:18:1c:95:fe:5f:f0:42:b5:0d:63:a1:d8:40:
         da:2b:97:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:35:34 2026 by rpki-client