Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
File:                     ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft (raw, json)
Hash identifier:          PjlKySOBSNCbsvHbSb1ABC6PJxW+VImyeHuSR2KQqlo=
Subject key identifier:   D6:BF:02:3C:2C:29:FB:52:E4:36:E2:AA:43:87:36:4A:59:20:3D:65
Authority key identifier: 45:E3:A0:C1:F1:D8:1E:E0:69:64:3B:40:C3:23:99:9B:B5:58:46:31
Certificate issuer:       /CN=45e3a0c1f1d81ee069643b40c323999bb5584631
Certificate serial:       019E1F479542C40E31F7819D6BAF2A548113
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
Manifest number:          0BA8
Signing time:             Wed 13 May 2026 03:00:45 +0000
Manifest this update:     Wed 13 May 2026 03:00:45 +0000
Manifest next update:     Thu 14 May 2026 03:00:45 +0000
Files and hashes:         1: 5frQX9750HL3NN8-MyZHPLOJTsI.roa (hash: pxj83AtJMZvXD4c0K+PkZXGVzhxJMxFhP3iPQm4dFuQ=)
                          2: ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl (hash: PWvAWANhly3+IdPs2uiAMljZvB2OAumqCypsU2JO9fQ=)
                          3: yzlJwvPmp_FWuAYFJVX7D34LL5o.roa (hash: oyzk/Lk1+iN0NJFMafNwk7yqhxfs0bRUTnktsAxu4x8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 03:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:47:95:42:c4:0e:31:f7:81:9d:6b:af:2a:54:81:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45e3a0c1f1d81ee069643b40c323999bb5584631
        Validity
            Not Before: May 13 03:00:45 2026 GMT
            Not After : May 14 03:00:45 2026 GMT
        Subject: CN=d6bf023c2c29fb52e436e2aa4387364a59203d65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5d:a6:cc:74:a2:99:19:0d:1a:8f:2d:32:24:
                    36:5e:67:f0:81:47:e1:e0:48:2e:bc:0f:b8:6d:fd:
                    f8:5a:88:88:21:c7:27:ba:54:87:ea:28:b5:07:fc:
                    df:9c:ef:39:8e:4f:63:c8:3b:23:dc:12:11:98:02:
                    44:4f:a2:69:b7:3b:ab:cb:7e:fa:3d:d1:0e:72:87:
                    da:36:37:04:14:53:ae:7f:e1:1a:16:d5:df:7e:ad:
                    fb:f2:e1:93:6d:76:be:e6:be:17:41:42:a9:ec:8c:
                    cd:f9:41:da:82:2f:ea:f6:e2:6d:1a:05:ee:0a:40:
                    72:02:15:6e:71:f4:4c:8e:0e:f8:74:e7:92:57:6b:
                    0a:09:0b:34:10:d0:4e:0a:f2:e3:80:b3:a1:72:5c:
                    9f:1d:99:73:c9:6d:ba:6b:7d:de:4c:aa:e8:b4:c4:
                    2f:35:3a:eb:91:ec:c0:15:81:7d:72:64:6f:ba:1f:
                    86:c7:88:6f:fa:d5:f6:43:ca:76:56:86:e0:04:ac:
                    b2:8b:e2:b7:72:9b:92:fe:5b:77:e2:bb:b9:79:85:
                    89:85:38:f1:a1:95:5d:cb:be:24:c5:7f:31:4a:3b:
                    a3:01:81:df:16:3b:de:17:a9:db:9a:99:ff:0c:26:
                    d4:0d:5f:78:ab:97:26:ba:c5:31:33:39:ec:ac:30:
                    e6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:BF:02:3C:2C:29:FB:52:E4:36:E2:AA:43:87:36:4A:59:20:3D:65
            X509v3 Authority Key Identifier:
                keyid:45:E3:A0:C1:F1:D8:1E:E0:69:64:3B:40:C3:23:99:9B:B5:58:46:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:af:e4:fe:b4:ee:01:69:8b:8c:04:40:02:fa:7d:00:06:4d:
         ed:f8:0c:b3:71:f5:44:87:8c:44:a3:0d:0a:18:10:6a:52:f6:
         2d:6e:f8:86:8b:8d:fb:20:cb:d8:01:04:67:f5:28:ad:7b:47:
         dd:9e:6b:d7:eb:15:77:ba:23:3c:9e:49:73:31:a4:d5:c0:03:
         d3:ec:d5:26:cf:f6:4d:0d:c0:e1:d9:e2:05:cd:21:fd:72:90:
         e6:24:56:bc:07:a3:4f:b4:23:e6:1a:0b:24:1e:f5:bb:2a:40:
         b8:ae:3b:8c:fd:88:27:65:72:b0:36:4b:89:cb:4b:61:f6:51:
         d1:eb:ee:39:b1:c1:0c:21:a3:8b:2e:e3:9a:de:64:fb:ba:a8:
         57:ca:c6:74:66:e3:89:2f:46:34:e4:39:fa:93:ce:73:e1:a9:
         f3:b5:c8:6a:87:d5:18:9e:08:32:9c:f8:dd:42:22:03:6b:76:
         ae:99:cb:52:48:0e:d9:bf:48:d1:ce:bb:29:a6:a5:5f:1e:27:
         6c:eb:03:7c:92:9b:2a:62:2c:8f:79:12:58:a5:27:53:9a:57:
         fb:c6:92:88:13:d6:06:db:c3:4b:04:f7:63:25:66:62:2b:35:
         e4:70:cb:01:92:4d:fe:8a:a2:43:d1:cf:38:00:a4:bd:67:2e:
         65:04:36:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:43:45 2026 by rpki-client