Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.mft
File:                     t5wt4-swkYD09aWvLVb-Qlh4Rkg.mft (raw, json)
Hash identifier:          QZhrM9hBv0DtrMYhLds0jUkgzla/PvfyHDitwgF5z7c=
Subject key identifier:   AF:2C:21:8C:C6:84:AE:98:8C:BE:19:D4:2C:21:4A:A7:BD:05:A4:C3
Authority key identifier: B7:9C:2D:E3:EB:30:91:80:F4:F5:A5:AF:2D:56:FE:42:58:78:46:48
Certificate issuer:       /CN=b79c2de3eb309180f4f5a5af2d56fe4258784648
Certificate serial:       019E21DAEEFAFC8ED28A902017E423D50373
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t5wt4-swkYD09aWvLVb-Qlh4Rkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.mft
Manifest number:          0A1A
Signing time:             Wed 13 May 2026 15:00:56 +0000
Manifest this update:     Wed 13 May 2026 15:00:56 +0000
Manifest next update:     Thu 14 May 2026 15:00:56 +0000
Files and hashes:         1: O3jJqwByUIEUnhHlOFee0Yzt6gg.roa (hash: TX2mHbMp/LUKoxPthyOcmH+FA50JbLoahkLETRZ/Uwg=)
                          2: t5wt4-swkYD09aWvLVb-Qlh4Rkg.crl (hash: 00giJSbu9cUm3lUjkwWu5oLQ4qbKEx5HA7Ix6kxWNfU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t5wt4-swkYD09aWvLVb-Qlh4Rkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 14:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:21:da:ee:fa:fc:8e:d2:8a:90:20:17:e4:23:d5:03:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b79c2de3eb309180f4f5a5af2d56fe4258784648
        Validity
            Not Before: May 13 15:00:56 2026 GMT
            Not After : May 14 15:00:56 2026 GMT
        Subject: CN=af2c218cc684ae988cbe19d42c214aa7bd05a4c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c9:43:02:cd:77:76:b3:76:41:49:ea:03:15:
                    f8:7d:2d:44:3f:6a:f4:f7:e5:15:fa:f8:97:1b:52:
                    8b:35:3c:33:2a:c7:d2:e2:00:bc:81:60:50:83:9e:
                    b9:12:35:15:e0:32:b8:d0:17:83:a9:84:b5:f5:19:
                    b0:f8:dc:fc:f7:5c:41:a2:68:b0:c8:7f:67:61:f0:
                    f0:8c:53:47:41:d6:f7:7b:f3:cb:90:29:3c:ee:ae:
                    51:76:94:66:8d:2d:d4:45:39:a6:10:6a:ce:12:e8:
                    59:ea:29:9d:c1:8b:c6:fd:42:11:7c:c9:71:8f:1a:
                    88:35:df:7b:7d:4b:9e:20:9c:95:b0:e0:af:25:4a:
                    fd:a3:c4:fd:68:d6:ae:75:9b:19:4f:32:c3:f5:af:
                    68:08:5a:40:b7:10:5b:bf:8a:09:97:82:ec:d3:73:
                    63:17:03:d2:fb:fa:f9:81:41:60:bb:4d:e1:66:77:
                    9e:d6:6b:1c:db:be:86:97:98:46:56:b0:3f:95:4d:
                    2c:79:3e:f7:a5:bf:26:0c:65:62:04:a3:36:d3:b9:
                    d1:19:e8:7f:25:77:7e:79:c9:80:f2:ca:eb:18:a7:
                    35:3c:78:ad:3b:b8:1e:75:e8:20:ac:16:a5:12:20:
                    8b:6c:64:52:8c:c8:82:d0:f6:25:38:40:da:68:2c:
                    01:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:2C:21:8C:C6:84:AE:98:8C:BE:19:D4:2C:21:4A:A7:BD:05:A4:C3
            X509v3 Authority Key Identifier:
                keyid:B7:9C:2D:E3:EB:30:91:80:F4:F5:A5:AF:2D:56:FE:42:58:78:46:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5wt4-swkYD09aWvLVb-Qlh4Rkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:7b:1c:04:20:0c:c6:6f:95:04:6e:6d:45:1b:bd:e4:28:cd:
         58:31:72:d6:6f:e7:5f:69:b3:48:58:fe:bb:89:34:ee:7c:aa:
         94:aa:27:4c:0b:f4:a9:8f:bb:bd:b2:e1:be:cd:8c:8b:ee:20:
         9b:e5:8b:0c:18:c8:0d:f2:af:45:2c:cb:e5:87:6d:f1:f8:39:
         29:df:02:b7:76:1c:bd:d9:10:e2:5e:19:ef:86:e6:ea:20:0e:
         fc:19:05:01:72:96:c7:94:b3:20:a5:23:85:77:b5:eb:56:60:
         97:02:d3:5e:0a:98:ef:b2:c4:81:bd:db:f9:5a:72:50:1f:8a:
         c6:09:b8:c1:cd:92:6b:84:c3:0d:7a:0e:96:73:1f:7b:63:6d:
         22:13:3e:d2:af:38:a1:cd:85:b3:24:3f:a5:12:34:b4:c8:19:
         d0:a9:1a:1f:0a:9e:d7:dc:b4:37:26:c2:ab:ae:74:e8:0b:ef:
         05:7c:aa:9c:63:13:b4:d7:b3:70:fc:f6:96:35:50:fa:c0:9b:
         8e:4b:8a:fd:df:cc:4e:4f:ef:6f:7b:d5:4f:76:50:57:31:a7:
         48:ee:d1:d6:5f:5b:12:ed:a1:db:9f:1f:97:c1:a5:49:4b:1c:
         7b:b2:0d:bb:5a:fd:24:8c:75:cc:c6:01:1f:e9:a7:ce:65:27:
         f9:e9:e1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:40:09 2026 by rpki-client