Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
File:                     A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft (raw, json)
Hash identifier:          oSgH/lta+qL797Z1cCLdlEQVDhfuuiRr9izPr+gu8+k=
Subject key identifier:   95:8A:EE:3E:FB:B6:98:E5:82:DC:6E:3A:DE:AB:7B:49:4B:5A:4A:D6
Authority key identifier: 03:E8:5F:A4:BE:66:94:2E:59:09:FD:3A:1F:D4:A0:C2:6E:36:A0:D2
Certificate issuer:       /CN=03e85fa4be66942e5909fd3a1fd4a0c26e36a0d2
Certificate serial:       019E1E6CD4351794E65640CC351A1FA4F358
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
Manifest number:          1513
Signing time:             Tue 12 May 2026 23:01:49 +0000
Manifest this update:     Tue 12 May 2026 23:01:49 +0000
Manifest next update:     Wed 13 May 2026 23:01:49 +0000
Files and hashes:         1: A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl (hash: zP4O1t54jD50fRMS3oo99e9vtNf8a3SodblYTlScV5E=)
                          2: shN0invCztwI3KX6a_QGu2kjtpU.roa (hash: C5xwtk8B6GrmB6Pb2tWwcTB63K3NyU431bpj6dpQii4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:d4:35:17:94:e6:56:40:cc:35:1a:1f:a4:f3:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03e85fa4be66942e5909fd3a1fd4a0c26e36a0d2
        Validity
            Not Before: May 12 23:01:49 2026 GMT
            Not After : May 13 23:01:49 2026 GMT
        Subject: CN=958aee3efbb698e582dc6e3adeab7b494b5a4ad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d6:93:d6:cd:71:34:08:f4:b2:b4:86:83:c5:
                    be:61:4b:45:08:9a:a0:11:e0:1f:23:b2:d6:54:b1:
                    0e:0a:20:27:cd:de:d9:ba:20:46:5d:ff:9c:73:e6:
                    5c:4e:59:ef:b5:0e:c8:c9:f9:f5:43:5d:da:cf:fd:
                    d4:df:1f:65:6a:26:6d:81:1b:59:71:a9:01:d6:d4:
                    a3:2b:cf:bf:00:2d:42:17:dd:c4:3e:62:bd:58:19:
                    c7:5b:44:97:b1:bb:7b:c1:86:d7:d5:08:0a:ee:30:
                    f0:a6:b1:04:71:f1:d9:ed:4a:29:92:5c:64:26:02:
                    12:3b:c3:bd:9a:f2:49:21:39:ba:14:f0:01:c0:3b:
                    45:83:78:83:aa:6f:6b:a2:6f:b8:ca:58:d3:73:fe:
                    a3:25:b5:3e:c4:0c:12:35:47:89:3c:e5:f2:6e:f0:
                    d6:3a:73:1c:ed:a1:d0:01:5b:46:de:ee:de:30:f9:
                    11:dc:aa:59:f5:c9:40:56:4c:79:96:af:82:08:84:
                    4d:16:60:e3:0f:d0:02:fd:f8:da:42:16:35:34:ac:
                    67:e1:19:43:db:c7:ce:19:6e:36:6b:96:18:ed:15:
                    50:5c:83:82:4f:d8:10:c1:2e:75:ab:0a:09:2e:d0:
                    01:64:93:48:c1:5a:13:f0:94:23:12:66:4b:8e:7c:
                    61:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:8A:EE:3E:FB:B6:98:E5:82:DC:6E:3A:DE:AB:7B:49:4B:5A:4A:D6
            X509v3 Authority Key Identifier:
                keyid:03:E8:5F:A4:BE:66:94:2E:59:09:FD:3A:1F:D4:A0:C2:6E:36:A0:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:1c:a2:ed:83:40:d9:28:33:94:a6:e4:8a:d9:e6:c0:36:4b:
         93:c3:20:4f:26:65:4c:61:06:37:5e:47:a9:65:0c:10:56:98:
         99:24:a5:84:cb:2c:3c:6b:e8:4a:86:4d:79:97:c5:3c:57:a1:
         63:78:d9:da:4e:7c:ec:3d:65:99:2d:07:f4:a7:36:cb:be:d8:
         06:35:1e:30:68:00:e0:8c:f8:3e:0f:0e:38:73:f5:93:da:e3:
         18:95:af:2a:3b:37:44:6e:d9:c1:d3:97:4b:07:17:3a:5e:23:
         c8:35:9e:f7:42:33:d3:7f:05:77:2b:54:20:80:e6:d1:37:92:
         24:a7:8c:dd:c1:04:aa:96:ad:50:43:fa:bf:f7:ae:0f:ff:8e:
         d9:0d:00:ce:74:21:df:33:34:68:b6:a6:9f:5e:ea:ed:53:29:
         c8:dd:2c:65:1b:45:b5:fd:c2:88:bb:05:2c:6f:1f:a7:8d:90:
         49:eb:ac:79:ad:b1:4d:e1:ed:6a:e6:91:8d:f6:6f:7e:da:17:
         5f:89:ea:2a:6d:76:9e:67:3f:9e:5e:6f:e6:cf:8c:9f:8f:63:
         b1:25:6b:07:c6:ac:a1:f1:76:a7:c5:92:f5:d7:0e:d1:89:61:
         5c:46:df:a7:1a:39:10:c3:ac:de:e8:81:21:c0:ce:66:fb:ec:
         83:d5:c5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:43:54 2026 by rpki-client