Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
File:                     we7iyrhrXuQPwncMqMtcUMYrdVs.mft (raw, json)
Hash identifier:          oasRFWcd+vN2mARtkbLyjhds9FPZW2L4XIgIaJBRs2Y=
Subject key identifier:   72:18:01:7C:5F:4D:A5:68:39:8F:BD:FB:8E:7A:CA:9A:B7:25:19:A8
Authority key identifier: C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B
Certificate issuer:       /CN=c1eee2cab86b5ee40fc2770ca8cb5c50c62b755b
Certificate serial:       019E1F47E3571BE4398818E4EA00E77C8F24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
Manifest number:          1581
Signing time:             Wed 13 May 2026 03:01:05 +0000
Manifest this update:     Wed 13 May 2026 03:01:05 +0000
Manifest next update:     Thu 14 May 2026 03:01:05 +0000
Files and hashes:         1: HadOHOP9GZgkMpWJH9CTmgirjks.roa (hash: iMPB2p7JTsdMOVem1W2GUgD445+oUnE8KP8HJy7laSM=)
                          2: we7iyrhrXuQPwncMqMtcUMYrdVs.crl (hash: hJvPRPCeSn2PbnRm8v4gJm9iuH8jBxh1S2M3bmws3jM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:47:e3:57:1b:e4:39:88:18:e4:ea:00:e7:7c:8f:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1eee2cab86b5ee40fc2770ca8cb5c50c62b755b
        Validity
            Not Before: May 13 03:01:05 2026 GMT
            Not After : May 14 03:01:05 2026 GMT
        Subject: CN=7218017c5f4da568398fbdfb8e7aca9ab72519a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:dc:4d:41:d7:87:91:de:02:76:84:34:32:2e:
                    0c:1d:a1:c8:30:0c:fd:b2:4b:c2:de:04:fa:ff:c4:
                    cd:77:e8:5a:0e:32:0c:a5:06:1f:fd:6b:52:a1:c5:
                    fc:2c:40:3d:86:ee:01:1c:dd:2d:22:df:ea:36:b0:
                    92:be:fe:f9:d0:4f:ac:1b:9d:ee:a8:30:48:a0:fe:
                    19:be:95:5a:64:2d:8e:a6:60:3f:80:c3:32:13:14:
                    e0:0e:4e:16:7a:87:c9:7e:59:65:6a:c2:e2:dd:62:
                    06:ad:fb:24:31:90:c0:1d:ca:86:09:54:64:9c:d9:
                    f2:e5:07:86:50:3f:c1:1e:5b:1b:af:1e:69:f3:31:
                    e9:30:9e:b8:7e:7f:2a:45:ad:54:d0:1c:3f:b0:2e:
                    e8:89:9b:62:ef:79:d0:a1:50:e1:ca:b2:9b:ba:16:
                    aa:98:d5:e4:74:e9:7e:14:cc:cc:66:eb:93:0b:dc:
                    20:46:bb:d3:bb:83:59:dc:56:71:32:53:ee:ac:87:
                    1f:9e:89:08:ba:6b:c5:b4:c1:ee:19:9d:de:75:05:
                    e6:09:74:48:e6:80:17:61:9e:6b:1a:bb:7c:1d:d8:
                    5e:a0:05:cd:a9:f7:bf:17:b0:85:68:7f:f3:79:76:
                    9b:29:3f:df:4a:a5:c9:60:b3:36:76:58:fe:a5:e4:
                    1d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:18:01:7C:5F:4D:A5:68:39:8F:BD:FB:8E:7A:CA:9A:B7:25:19:A8
            X509v3 Authority Key Identifier:
                keyid:C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:65:70:b4:b2:9b:a0:6f:33:ed:cf:10:ae:a5:fe:1b:e9:13:
         0a:f9:9a:01:50:59:5e:52:0f:15:a3:a1:e5:6b:33:b2:9e:a5:
         c3:55:44:cc:56:2d:4f:dd:dd:77:e2:0d:57:87:d4:84:87:6b:
         60:e4:ab:91:15:db:3c:6a:90:c4:da:a1:a4:19:34:86:67:78:
         bf:76:13:19:7a:97:e4:2c:bf:eb:a2:7a:e8:70:3b:fa:60:08:
         60:19:9a:3f:4a:69:97:bd:df:76:d4:ca:b8:ed:ec:27:3f:95:
         2c:ae:19:c6:16:ef:bb:8f:36:a2:1e:c3:fe:ac:d5:4b:1c:8d:
         df:56:78:a0:31:df:e1:7f:bc:cf:7c:88:62:29:8e:b7:16:1b:
         a8:39:ff:dc:45:bc:07:70:04:18:0b:6e:a9:7d:ff:b4:b1:ec:
         9a:d0:b7:2e:a4:62:bf:61:1a:37:1f:15:b4:68:2e:9b:f5:32:
         a3:fc:3b:8f:c4:96:d3:38:d5:66:23:a3:d6:6f:45:af:cf:c9:
         1b:7a:e9:67:32:d4:60:87:bf:e2:86:e8:b9:57:0e:bc:5b:44:
         b0:21:50:1a:41:df:a1:3e:a1:05:e0:6d:3f:1c:15:06:35:22:
         9f:62:0a:39:b8:d1:42:97:8e:4e:de:7c:5b:bf:8d:f8:cb:60:
         7e:44:2f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:18:34 2026 by rpki-client