Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
File:                     a08STJHKoMyRw7m7T4rbBjJiJKE.mft (raw, json)
Hash identifier:          TdIZGCrifN+Za5fUY+gw4OoP56Ub9sYBh+a+ymAYgtA=
Subject key identifier:   22:50:04:4A:8B:71:32:C8:FA:66:E0:73:30:F8:23:18:9D:A0:DF:56
Authority key identifier: 6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1
Certificate issuer:       /CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
Certificate serial:       019E1FED287561871C5F9BD4D851273B07B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
Manifest number:          0E60
Signing time:             Wed 13 May 2026 06:01:36 +0000
Manifest this update:     Wed 13 May 2026 06:01:36 +0000
Manifest next update:     Thu 14 May 2026 06:01:36 +0000
Files and hashes:         1: QgMG-u89Y-TWbT4Gt6ZsQgsTYNI.roa (hash: sETsQ4q/+Tu+FYDJynqCF64iSLCcXXD4r9m9lwpRbx8=)
                          2: a08STJHKoMyRw7m7T4rbBjJiJKE.crl (hash: ia5NilEHoYCYxLA7tbQqPsYWfUI6ysm+Pmx28/XUuCA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ed:28:75:61:87:1c:5f:9b:d4:d8:51:27:3b:07:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
        Validity
            Not Before: May 13 06:01:36 2026 GMT
            Not After : May 14 06:01:36 2026 GMT
        Subject: CN=2250044a8b7132c8fa66e07330f823189da0df56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:78:c0:2a:99:97:b6:3c:d9:28:42:34:95:c4:
                    cf:d8:43:62:63:9f:e0:23:45:39:02:80:8b:cd:9e:
                    b3:d9:1b:ae:6d:07:a9:ac:fe:42:d3:9c:ff:00:f8:
                    00:09:88:05:b8:88:57:7a:7d:32:a2:c6:9b:88:85:
                    27:13:6c:cd:77:6a:5c:c0:78:84:67:5e:68:0c:6e:
                    9c:a8:d3:12:88:fc:ee:fe:8b:a1:0d:fe:7c:2e:18:
                    ed:1e:aa:3b:61:a4:61:9c:c5:ef:44:c0:65:a8:52:
                    f6:18:02:46:f5:9f:e0:cc:49:04:b0:50:3f:ff:cb:
                    68:7d:92:cd:66:96:a8:fa:28:2f:41:57:c9:43:ba:
                    d8:2c:3a:55:11:33:b6:9a:17:27:ec:3d:80:f7:5e:
                    1c:5e:99:fe:01:30:91:66:ee:09:b9:ec:80:7a:a5:
                    58:27:ec:5c:2d:ca:ca:dd:e8:58:dc:f0:74:55:3d:
                    86:4a:c7:bb:58:b6:d0:2b:72:76:b1:65:a2:82:c6:
                    3a:1d:f0:8b:c6:f7:0f:77:1b:5c:57:6a:31:b7:76:
                    9f:ce:dd:9c:79:42:f6:09:a1:7f:57:4e:0c:b5:ff:
                    86:c0:68:88:e7:c6:13:fb:ad:e8:f8:0b:2f:df:83:
                    f1:3e:e5:da:eb:35:f2:52:86:d5:ed:7b:28:df:49:
                    20:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:50:04:4A:8B:71:32:C8:FA:66:E0:73:30:F8:23:18:9D:A0:DF:56
            X509v3 Authority Key Identifier:
                keyid:6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:a0:53:e3:38:cf:08:09:3f:fa:71:fd:48:9d:16:2d:90:23:
         13:01:ef:2c:d9:ce:43:a5:8f:3a:28:e7:9a:d2:2a:47:f2:64:
         f5:b6:a3:6d:17:d3:01:56:a8:87:9a:b7:a8:10:84:74:70:da:
         33:6a:5c:fd:92:4e:23:07:4f:69:69:e4:9f:0c:32:ec:31:fe:
         07:63:eb:85:b6:95:c6:82:6a:92:48:7e:2d:9c:bd:f3:cf:3a:
         5e:01:87:49:99:8d:ae:7e:e5:7a:72:93:36:7a:d3:13:cb:17:
         61:62:c6:5b:7a:f4:d0:06:76:75:7c:2d:40:0a:90:8a:0c:30:
         80:ce:04:ff:79:a4:b1:fd:18:b3:71:41:7f:24:07:e0:ba:6f:
         ac:72:96:8b:01:68:2d:29:b1:30:38:7d:ce:f3:33:3b:b6:64:
         06:f9:cc:f3:d4:d1:9a:fa:42:94:26:7e:38:f5:46:c5:5a:6b:
         60:4f:9e:16:7c:6a:3e:b1:d4:c6:a0:1b:28:8f:f4:eb:1d:01:
         73:e8:a2:3e:60:1b:d4:94:f0:76:99:67:d7:43:71:5f:62:9d:
         dd:e9:33:a3:27:88:3b:6a:32:cd:70:c2:65:0e:3a:06:7d:9f:
         2f:1a:1e:e8:17:06:05:ab:21:97:5c:c2:82:0e:0d:6e:94:4d:
         a5:42:30:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:14:24 2026 by rpki-client