Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft
File:                     484GnfxbYIh21kJKMueDqYqS7_I.mft (raw, json)
Hash identifier:          RtTAfxBXVCnj1NVQPc+fdDbEWOVuVy6ZxQE2Ki/uagg=
Subject key identifier:   2D:4F:6B:F8:5A:C1:F4:D5:D6:E5:3D:7D:63:04:AD:94:3C:1A:12:C6
Authority key identifier: E3:CE:06:9D:FC:5B:60:88:76:D6:42:4A:32:E7:83:A9:8A:92:EF:F2
Certificate issuer:       /CN=e3ce069dfc5b608876d6424a32e783a98a92eff2
Certificate serial:       019E20911C44F98CD02D1734BD6715681ACF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft
Manifest number:          0F9A
Signing time:             Wed 13 May 2026 09:00:41 +0000
Manifest this update:     Wed 13 May 2026 09:00:41 +0000
Manifest next update:     Thu 14 May 2026 09:00:41 +0000
Files and hashes:         1: 484GnfxbYIh21kJKMueDqYqS7_I.crl (hash: OaFBZ3Q8pmkVfkOxcs0bbWgxH8MOjrVv3CZS0tzJ0y4=)
                          2: Sb27fx8W2Bv1m1pEAWpcbW-vK10.roa (hash: ClUudBc4gF5lYIHf+aYM1gznaI2Os4gu/iEuZ8iqJzE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 09:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:91:1c:44:f9:8c:d0:2d:17:34:bd:67:15:68:1a:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3ce069dfc5b608876d6424a32e783a98a92eff2
        Validity
            Not Before: May 13 09:00:41 2026 GMT
            Not After : May 14 09:00:41 2026 GMT
        Subject: CN=2d4f6bf85ac1f4d5d6e53d7d6304ad943c1a12c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:69:1b:f3:83:8f:be:eb:28:f3:21:c7:79:eb:
                    71:6e:90:cf:b7:ff:8e:a0:06:91:22:89:ea:3e:5e:
                    45:90:b7:c1:b7:6d:2c:4b:a8:e1:53:a9:99:08:3b:
                    84:01:20:96:05:6a:2a:8c:da:d4:0e:0a:34:1b:97:
                    b0:80:3e:e4:1f:20:cd:e7:82:b4:55:fb:2d:c4:28:
                    ce:43:49:05:da:00:cf:d7:10:f7:ce:ed:19:55:26:
                    b0:7a:1d:b7:4a:a6:cf:96:6a:63:aa:c6:0a:b7:a4:
                    de:29:b4:6c:ce:22:e2:d5:36:c8:55:b9:b6:b7:60:
                    af:fc:dc:13:9a:62:b9:6a:de:f4:0c:9f:27:f7:c9:
                    54:ba:31:dc:16:5c:ce:32:aa:59:ac:6c:e2:1f:e8:
                    4b:02:f9:05:06:55:c5:8e:fe:91:76:68:b8:ee:2c:
                    75:07:89:7c:88:4c:ff:ff:7c:d2:cb:4d:50:f5:05:
                    dd:6d:ae:4e:d9:af:e7:42:c3:ce:15:2d:c5:a1:ce:
                    fd:d8:b2:95:54:10:c4:23:8b:2c:87:5d:55:1c:9e:
                    64:80:39:a5:2d:5f:52:c3:88:c3:bb:bd:7a:2c:90:
                    c3:f0:51:f8:23:27:89:4e:e2:8a:84:d0:ed:e4:c6:
                    62:26:32:21:b6:7e:21:73:aa:71:0c:8c:95:22:53:
                    e1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:4F:6B:F8:5A:C1:F4:D5:D6:E5:3D:7D:63:04:AD:94:3C:1A:12:C6
            X509v3 Authority Key Identifier:
                keyid:E3:CE:06:9D:FC:5B:60:88:76:D6:42:4A:32:E7:83:A9:8A:92:EF:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:b8:ca:75:8f:a1:70:f6:7c:a8:8e:94:0d:99:2e:59:8c:a0:
         3b:3e:62:de:ca:ec:8e:31:b3:a5:8e:57:aa:d7:16:4e:88:6c:
         72:aa:5d:1b:14:9d:8b:99:b3:01:d3:bd:4c:24:7b:5f:f2:51:
         f2:17:eb:c2:4d:f3:ff:7a:46:74:f6:86:4f:7c:f5:a8:af:4f:
         e4:d5:78:02:38:4a:11:24:c8:ea:d5:10:d4:eb:09:df:61:45:
         31:2a:9f:ae:c3:b2:05:a7:e5:13:b8:d2:0c:7d:bf:e1:15:57:
         65:23:27:2b:6f:6e:54:31:a9:14:5c:ab:6a:b8:2e:ce:3d:6d:
         9d:5a:ff:94:90:d1:33:9b:b1:21:e0:3d:af:75:4c:f6:d1:66:
         5a:f5:05:e4:7c:82:25:ab:91:b1:99:67:dd:78:f9:73:08:6f:
         ea:30:8b:36:59:33:fc:39:d4:2b:dc:1b:d5:04:a3:a2:2d:d1:
         e9:3b:73:81:dd:4c:6e:8e:fb:47:1e:f6:e7:eb:9e:92:be:b1:
         e8:42:22:df:b0:22:a3:dc:a7:47:d3:4e:ec:11:8d:41:db:3b:
         a6:a3:6d:21:f3:f0:de:ea:14:b9:5d:1b:de:e9:68:c6:5f:49:
         f7:ce:04:9b:e3:51:0d:49:59:52:07:2a:68:b4:fd:52:d0:a5:
         cd:51:03:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:04:13 2026 by rpki-client