Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft
File:                     1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft (raw, json)
Hash identifier:          6sz/2xGUmA9nwrXGZGeeJ91OpL4vBZ2Nz/fQ1OO1sZM=
Subject key identifier:   97:33:45:99:42:37:F2:B6:27:1F:A8:A4:A4:B8:13:AC:27:5C:DD:F4
Authority key identifier: D7:F6:F4:82:7C:58:CB:28:F9:96:A9:AA:EB:34:8F:1F:D2:6A:0C:A5
Certificate issuer:       /CN=d7f6f4827c58cb28f996a9aaeb348f1fd26a0ca5
Certificate serial:       019E1CB5230F075A1DA61B5E47D346D94B9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft
Manifest number:          1907
Signing time:             Tue 12 May 2026 15:01:33 +0000
Manifest this update:     Tue 12 May 2026 15:01:33 +0000
Manifest next update:     Wed 13 May 2026 15:01:33 +0000
Files and hashes:         1: 1_b0gnxYyyj5lqmq6zSPH9JqDKU.crl (hash: tG35fxyjdLVJg804XdhOdcGkmal7M0DD9UjBYlQa3HI=)
                          2: L_TvjuvkS8Ae6hr2C351DvSCXtw.roa (hash: iKhq8WVW3Ih/b09mpbpUlZEB5fDDBgm0pJSp3ErD2hs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b5:23:0f:07:5a:1d:a6:1b:5e:47:d3:46:d9:4b:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7f6f4827c58cb28f996a9aaeb348f1fd26a0ca5
        Validity
            Not Before: May 12 15:01:33 2026 GMT
            Not After : May 13 15:01:33 2026 GMT
        Subject: CN=973345994237f2b6271fa8a4a4b813ac275cddf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f4:4d:7c:09:49:b5:15:8f:62:41:c4:d0:56:
                    05:ff:44:4f:64:58:13:af:01:ed:93:95:7a:7d:0c:
                    9b:62:25:87:50:e8:13:7c:9d:1c:31:c9:d1:4a:91:
                    a5:03:8b:f3:c7:d3:26:0b:6f:da:54:91:64:60:e1:
                    44:0a:22:9f:f0:65:a6:66:40:e0:88:56:4a:77:0b:
                    34:e6:aa:f3:41:9a:4d:32:79:e4:e3:03:e3:be:da:
                    44:0c:47:d3:46:bb:df:6c:d0:2b:63:b1:d4:6f:91:
                    20:e2:02:3e:69:35:25:c2:aa:8a:a4:73:2a:d9:d8:
                    62:ee:84:fd:63:6c:ec:88:e0:25:0b:79:12:0a:63:
                    92:36:5a:85:88:fb:4b:7a:0c:b3:b1:aa:3b:3e:6b:
                    68:bd:ef:83:c3:be:0e:b8:55:67:1b:fa:0d:4b:5c:
                    c2:0d:de:75:d4:bc:0d:4d:ad:88:09:8d:3d:65:2a:
                    40:0e:cc:3d:99:f4:a8:24:ca:52:bf:15:17:ab:12:
                    40:b1:36:88:de:44:ba:69:d3:f3:36:e0:b6:6f:88:
                    f6:f7:eb:a5:c2:a6:95:94:05:7a:41:5b:89:bd:4d:
                    6c:12:0a:25:95:d8:e7:32:31:b8:28:82:22:de:5c:
                    d5:19:90:a6:62:b4:03:1e:64:52:af:e6:77:87:4f:
                    e4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:33:45:99:42:37:F2:B6:27:1F:A8:A4:A4:B8:13:AC:27:5C:DD:F4
            X509v3 Authority Key Identifier:
                keyid:D7:F6:F4:82:7C:58:CB:28:F9:96:A9:AA:EB:34:8F:1F:D2:6A:0C:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:55:30:ee:7b:c4:b3:0f:e2:ae:07:9f:61:0c:bd:06:5a:f8:
         54:33:71:50:59:1a:ad:1c:9b:6d:e6:e2:e4:93:57:ab:61:dd:
         19:ca:99:2d:e2:4d:53:f9:a5:8b:0d:26:a6:a7:10:a0:29:6d:
         52:68:45:62:42:93:bb:7d:79:0c:5e:51:e3:a4:a4:20:9e:53:
         8b:5d:47:ab:32:63:ad:d0:c0:35:f1:c9:1d:a0:35:cd:d8:bc:
         f2:a6:cc:dc:6a:5f:4e:86:fe:9c:40:3f:b7:5a:2c:da:98:02:
         b8:f8:e1:91:a7:35:4d:ae:41:a9:c1:31:69:4b:11:45:71:6c:
         12:3e:b7:b1:24:36:77:ad:4f:a7:45:fc:aa:bf:7b:39:05:4f:
         d7:85:7c:09:fb:9b:d1:af:57:3b:94:82:cd:f5:19:b0:ca:52:
         a2:61:d9:b1:d1:47:ca:f2:1a:16:66:74:34:26:96:9a:d5:9b:
         18:91:c2:18:8c:59:0b:a8:42:94:9c:ef:43:38:7b:6a:1e:a7:
         24:d2:5a:de:95:fe:ac:9f:a5:6e:77:bc:04:4b:3b:4f:62:e2:
         6b:b8:3d:34:21:cb:b3:b6:9c:b3:af:31:da:0b:e7:ef:d1:91:
         6d:20:a4:44:9e:57:b2:55:16:ea:43:29:0c:f9:45:89:3b:f4:
         d0:46:1c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:14:49 2026 by rpki-client