Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
File:                     rMMoWMzalYbG2WceMQ1RwoJoxFk.mft (raw, json)
Hash identifier:          fpTXwN3FpZy3NLLM9BVvDdvQju3K87iknozG2oEQkys=
Subject key identifier:   C1:E4:E7:AF:9A:86:2D:17:A8:58:19:2F:2A:B4:68:27:31:9C:E8:E1
Authority key identifier: AC:C3:28:58:CC:DA:95:86:C6:D9:67:1E:31:0D:51:C2:82:68:C4:59
Certificate issuer:       /CN=acc32858ccda9586c6d9671e310d51c28268c459
Certificate serial:       019E1E6CBCAB1332E06346915C45514176B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
Manifest number:          18A3
Signing time:             Tue 12 May 2026 23:01:42 +0000
Manifest this update:     Tue 12 May 2026 23:01:42 +0000
Manifest next update:     Wed 13 May 2026 23:01:42 +0000
Files and hashes:         1: NZ4KU7XjOTlJfpxZEeYBOqiocLc.roa (hash: 1hvoqCoD4N6W+G9hGoZfjVl3mm68AnZJdnlCiI2tn30=)
                          2: rMMoWMzalYbG2WceMQ1RwoJoxFk.crl (hash: cdWw4FfXQX0Psa3GBRLZEFnRGkPhLqOBGmwCKZOgm2M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:bc:ab:13:32:e0:63:46:91:5c:45:51:41:76:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acc32858ccda9586c6d9671e310d51c28268c459
        Validity
            Not Before: May 12 23:01:42 2026 GMT
            Not After : May 13 23:01:42 2026 GMT
        Subject: CN=c1e4e7af9a862d17a858192f2ab46827319ce8e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2b:fc:a6:55:29:35:df:d8:45:20:ef:49:5c:
                    15:91:5d:71:24:0f:64:cd:66:f4:6f:82:e0:b2:57:
                    56:3b:de:b8:15:12:d9:dd:e7:00:58:d1:bd:7b:d5:
                    bf:a7:4b:24:1f:b4:8d:b8:d8:f3:ef:10:15:ca:13:
                    88:8d:48:a1:1b:7e:e1:e1:d2:15:74:f9:4b:8f:c0:
                    83:6d:fe:fa:b1:00:46:15:91:0e:9e:f6:09:63:ad:
                    0a:66:6f:c1:ea:81:03:87:74:82:1e:e5:f6:f2:2a:
                    aa:4c:b1:69:c2:9c:88:be:cf:7a:eb:61:30:80:ff:
                    b0:7a:cc:ef:ff:c4:e9:aa:2c:f2:a3:94:9b:31:95:
                    4a:5b:38:fe:8c:f0:3b:d7:ee:be:cc:56:d3:02:ca:
                    ed:7c:73:b9:60:4e:d7:11:3b:a3:8f:ee:9e:27:53:
                    66:5c:ec:11:fd:5e:84:54:64:28:ab:83:50:e7:c5:
                    ab:d4:b9:f9:2f:00:43:44:3b:f2:a7:1c:9d:98:d9:
                    97:d4:cb:d0:b7:36:a5:66:b4:72:4d:db:4f:80:e2:
                    68:73:6c:36:a7:75:2a:38:30:b4:be:f5:b0:6b:3d:
                    d8:76:4f:98:e8:9e:07:c9:29:e6:68:f7:a7:3f:5d:
                    ea:d7:7e:8e:fb:a5:3b:8e:68:cf:a1:48:5e:b0:0f:
                    2b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E4:E7:AF:9A:86:2D:17:A8:58:19:2F:2A:B4:68:27:31:9C:E8:E1
            X509v3 Authority Key Identifier:
                keyid:AC:C3:28:58:CC:DA:95:86:C6:D9:67:1E:31:0D:51:C2:82:68:C4:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:99:6e:96:db:69:8a:98:9d:a2:d7:76:72:db:99:02:9b:ff:
         37:24:e6:2a:13:10:e1:07:e8:4d:0a:63:bc:07:ac:ab:63:92:
         57:5c:5a:b9:e2:64:40:df:cd:50:c5:74:1d:ad:53:38:ec:f3:
         ed:94:63:ba:c1:13:84:ff:4f:64:b9:2d:78:ae:13:9b:83:c9:
         79:e6:b3:62:e9:c6:5e:ff:96:d9:c0:5f:53:f9:da:86:52:b3:
         05:fd:d4:3b:a0:30:2a:5f:6c:6d:8e:d6:c8:8a:bc:e8:74:bb:
         a6:01:3e:63:4a:23:4b:78:39:9e:1c:31:d2:80:76:46:78:3f:
         e7:db:2e:ea:fa:12:ec:b2:d4:a8:7b:32:e9:4c:ef:e3:a4:b4:
         5b:91:18:1f:cf:da:bf:0d:96:9d:54:a4:4d:cc:50:c8:90:aa:
         5f:a5:a5:37:6d:3b:46:9b:c6:ee:0d:27:7f:e8:57:8c:7f:79:
         62:bd:c8:a5:15:91:6d:84:ee:21:67:cd:1d:c4:58:33:d4:a6:
         a9:37:f7:6c:da:92:fa:d9:5b:9c:92:e9:92:ca:9a:b0:ef:ec:
         13:07:15:4f:7b:09:4f:9c:99:81:15:e3:5f:0b:bd:6f:a8:bb:
         6b:89:65:21:f6:b5:82:fe:3f:a9:27:bc:9c:7b:1a:ce:c6:00:
         1e:0e:54:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:53:25 2026 by rpki-client