Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft
File:                     fz4LJ7jk15j5K53hV_HaWkPNSeU.mft (raw, json)
Hash identifier:          VXMrXm8FXWsIz/nRaQKmbwclCV38qmKjQYgf2xb6eDA=
Subject key identifier:   85:52:06:4C:C3:B2:0D:64:B3:3C:1A:64:E9:D8:B9:69:64:9E:85:5A
Authority key identifier: 7F:3E:0B:27:B8:E4:D7:98:F9:2B:9D:E1:57:F1:DA:5A:43:CD:49:E5
Certificate issuer:       /CN=7f3e0b27b8e4d798f92b9de157f1da5a43cd49e5
Certificate serial:       019E1E350230172536AB4C544B918E1AEFBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft
Manifest number:          1343
Signing time:             Tue 12 May 2026 22:00:50 +0000
Manifest this update:     Tue 12 May 2026 22:00:50 +0000
Manifest next update:     Wed 13 May 2026 22:00:50 +0000
Files and hashes:         1: MpwIY7Ebi8bx833CV_5moln-CB0.roa (hash: IcPeEwSEZRPBHIQ02cGM6FjSpHotFVeRsIkfWF3fy2s=)
                          2: dwAqRvLPaFJvT81jjmY8z6OAffc.roa (hash: U+GbR8Ko/UO/PdAN8+pRGxNFE5XM37ujAKQFqPLbxQ4=)
                          3: fz4LJ7jk15j5K53hV_HaWkPNSeU.crl (hash: MFLim3goCaRDvObwbrVygrvyuZfCQwXFIAIAv+62D6g=)
                          4: mstzb26BC_IbEF1cblkahySAWUo.roa (hash: ovsvskCBj0pzy7ZuC+YBMlAXo2c5eeshaQejsMGZzOU=)
                          5: y8Dvt69ipHk19Pv-nfYfzC1AAtk.roa (hash: hK90cOpXZcr7Ami6NbNqe49Tz8xd4CBkB2ANlYx8mv0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:02:30:17:25:36:ab:4c:54:4b:91:8e:1a:ef:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f3e0b27b8e4d798f92b9de157f1da5a43cd49e5
        Validity
            Not Before: May 12 22:00:50 2026 GMT
            Not After : May 13 22:00:50 2026 GMT
        Subject: CN=8552064cc3b20d64b33c1a64e9d8b969649e855a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:11:93:bd:23:5e:b2:93:9b:4d:d1:5a:ef:9b:
                    c7:ce:5a:ba:0c:58:8e:db:45:b8:da:2f:a6:87:4b:
                    34:ed:8f:08:a0:f3:10:b8:c6:54:09:bc:a9:fd:ad:
                    23:ba:5c:3c:2c:d9:4c:aa:60:32:63:75:97:7d:e3:
                    4f:6e:29:1d:11:9a:f9:d9:8e:1c:9c:b0:bb:28:ed:
                    ae:e0:f2:33:9c:d4:50:ce:a2:2e:0e:55:67:d6:61:
                    43:f0:e9:e7:7f:fe:c0:a4:47:fd:1d:4f:be:00:17:
                    ae:b0:4d:36:fc:94:5e:35:d2:dc:be:19:f5:a9:e3:
                    86:9a:fa:8a:b4:db:b9:97:87:47:10:ec:f4:fc:ea:
                    1c:28:5b:e4:69:da:da:cf:04:1d:f1:8c:cd:be:cb:
                    93:ee:85:2c:51:df:7d:0c:3c:31:c7:3e:d3:49:87:
                    e2:ea:7f:81:5a:53:6e:7c:bb:da:f9:f8:cf:23:06:
                    87:b6:a8:7a:93:54:5b:47:ff:98:dd:a4:4b:ca:56:
                    57:0d:ae:08:83:9a:84:de:e5:8f:14:92:e1:f5:44:
                    44:71:0b:ca:0d:20:93:46:9f:40:37:53:7c:1e:20:
                    6f:da:5d:24:e7:68:12:eb:97:c2:11:b8:a3:3e:3b:
                    04:d7:57:ef:6a:7e:d1:9f:56:7e:33:d5:51:ab:52:
                    9e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:52:06:4C:C3:B2:0D:64:B3:3C:1A:64:E9:D8:B9:69:64:9E:85:5A
            X509v3 Authority Key Identifier:
                keyid:7F:3E:0B:27:B8:E4:D7:98:F9:2B:9D:E1:57:F1:DA:5A:43:CD:49:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:47:d1:25:66:e9:ad:2b:69:b6:72:19:4d:b1:51:05:4b:7f:
         f7:7d:ea:79:8f:f3:dd:75:fc:50:92:dc:1c:18:51:fc:88:c0:
         5d:88:d9:51:23:16:95:eb:ee:24:1a:52:36:68:b8:a2:ef:b6:
         14:a4:2c:30:f3:92:d8:50:73:b0:0f:52:bb:cc:f3:fd:fa:60:
         43:69:c7:9b:08:02:3f:a8:61:50:00:10:06:98:e9:5e:99:4c:
         22:0a:38:7d:14:06:a8:af:31:f5:ca:19:ff:58:63:1b:df:cd:
         a8:ec:5b:72:4b:98:16:50:82:47:77:8d:f0:4d:83:16:34:cc:
         70:82:ee:53:14:22:36:75:30:d6:eb:94:45:10:f0:bd:5a:1a:
         3e:03:75:e5:b7:57:e3:40:93:61:e8:fc:68:cf:77:4d:ed:5d:
         14:b0:71:30:2f:21:7c:cf:2e:21:c0:2c:c3:b4:0d:ea:6b:77:
         9a:c8:49:89:32:4e:c8:38:64:ea:ca:60:d8:83:f7:ef:b0:cf:
         74:6f:af:1a:da:6d:d0:08:1e:75:06:9c:db:c1:73:07:bc:a3:
         56:37:d6:d0:2e:5d:5e:a5:9c:91:88:b8:af:98:fa:8a:14:bb:
         b2:f5:e2:a2:da:37:d8:6c:b8:13:bd:35:44:d7:41:d3:08:4e:
         1e:2c:1b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:21:15 2026 by rpki-client