Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
File:                     O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft (raw, json)
Hash identifier:          8tdsFAA+t7VV/vGi6QJHRuhAQnTnFzgBhxIE8oQHOMY=
Subject key identifier:   8E:FB:0A:41:27:F8:CC:A3:7E:6D:DE:56:59:B9:91:03:39:76:51:61
Authority key identifier: 3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96
Certificate issuer:       /CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96
Certificate serial:       019E1DC7194DB8B9700B60660B8C282C2FB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
Manifest number:          0511
Signing time:             Tue 12 May 2026 20:00:47 +0000
Manifest this update:     Tue 12 May 2026 20:00:47 +0000
Manifest next update:     Wed 13 May 2026 20:00:47 +0000
Files and hashes:         1: O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl (hash: HlPjckmuoKYnJ4WY3iF9I/waS0vUNSqYqfgElvv5AVE=)
                          2: nmV4wo1OsK526xeTri2upmPsAys.roa (hash: IeXn8vSCp/SPxs1+dmemndjYyp23bbOiRhUmde7q2pY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:19:4d:b8:b9:70:0b:60:66:0b:8c:28:2c:2f:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96
        Validity
            Not Before: May 12 20:00:47 2026 GMT
            Not After : May 13 20:00:47 2026 GMT
        Subject: CN=8efb0a4127f8cca37e6dde5659b9910339765161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:89:fa:be:cb:b2:bf:a4:61:1e:03:4d:8b:c3:
                    ad:e9:71:ff:53:5f:d0:e9:35:1a:f5:34:a9:4f:b7:
                    ed:4b:be:81:7c:df:c8:af:1e:1a:e3:38:d6:6c:a8:
                    74:c3:43:dc:d6:21:42:e0:67:f7:d0:52:8b:dc:81:
                    75:26:ee:84:4b:c8:4d:27:96:b6:4d:a5:ab:a7:ce:
                    5c:b8:6b:9e:cf:e0:23:63:9c:80:6a:c8:8a:31:5e:
                    aa:e5:a7:2b:bb:d6:29:5b:15:2b:2a:ec:02:4c:6a:
                    fe:fd:97:fd:83:f6:50:11:0b:65:6f:6b:1d:71:7a:
                    ee:e3:9b:68:15:7d:cb:02:4a:08:86:83:a0:24:91:
                    ab:6b:a7:f5:b1:0a:92:e3:51:fc:74:9c:90:95:a7:
                    cd:94:0a:3d:76:c1:73:88:cd:9e:f8:5b:8d:f0:ed:
                    be:75:39:a3:25:f5:1a:07:0b:c0:37:a8:6c:e6:eb:
                    09:7a:a6:08:66:2b:b7:5d:41:3e:44:5a:4c:01:c6:
                    39:2e:01:66:02:22:b1:92:c8:4b:2c:da:52:96:3f:
                    c7:ca:8a:f6:ed:24:00:55:e0:5a:03:5e:49:93:52:
                    96:4b:da:cb:84:fc:32:9a:56:7e:9f:67:3c:57:21:
                    a5:ad:21:e1:c5:19:0c:fb:96:d7:61:1c:20:b3:19:
                    de:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:FB:0A:41:27:F8:CC:A3:7E:6D:DE:56:59:B9:91:03:39:76:51:61
            X509v3 Authority Key Identifier:
                keyid:3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:c3:12:56:88:19:c5:ed:23:86:c2:0e:47:a4:96:76:1f:7a:
         e0:74:ad:95:e1:28:96:3d:02:77:62:24:d0:b7:dd:ea:9a:a8:
         89:96:fd:db:a7:96:4d:ce:6d:f4:a5:a1:a9:31:29:7d:13:4a:
         ca:8e:cc:ff:ac:52:2d:04:da:3e:e5:35:ae:3e:a8:34:81:7f:
         e8:51:bf:d8:7e:8a:dc:ff:63:cd:7e:80:48:1f:90:4a:3b:dc:
         ee:5b:8b:3a:7a:0e:19:8e:52:68:17:1c:59:d7:ea:45:9d:6a:
         90:e8:a6:53:3b:3f:8d:36:16:b9:64:02:9d:e1:f2:d8:7a:1b:
         bd:c6:4c:99:88:65:8f:5c:4b:ed:92:85:71:33:b9:d6:63:e3:
         0b:25:99:46:e1:1a:2c:1a:7f:4f:30:c7:f8:94:43:e7:27:07:
         de:75:73:e9:93:b0:34:f5:bd:30:c5:fa:64:95:52:34:d9:31:
         59:74:71:f3:1b:98:50:25:ef:fc:02:ad:30:70:be:c0:4f:b2:
         e3:58:05:50:f1:39:27:b8:f2:c8:e5:fa:2c:24:de:4c:28:de:
         04:4e:f7:8e:4a:04:1f:60:d6:1b:e2:fe:bd:a6:62:00:5c:a8:
         26:86:af:19:44:60:ae:6b:9f:d6:06:6f:ae:6e:fa:46:7f:85:
         5a:04:f9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:20:50 2026 by rpki-client