Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft
File:                     T5AEs7-KHhe9YGbgUYltO-vWaXM.mft (raw, json)
Hash identifier:          qei3sMujeldjKA08oPfwoJyfzfn1DpfsCCpILbEITWM=
Subject key identifier:   39:DF:EC:9F:20:83:00:E1:CA:C9:EC:C1:8C:FF:5F:93:F9:70:C8:40
Authority key identifier: 4F:90:04:B3:BF:8A:1E:17:BD:60:66:E0:51:89:6D:3B:EB:D6:69:73
Certificate issuer:       /CN=4f9004b3bf8a1e17bd6066e051896d3bebd66973
Certificate serial:       019E1F4815FF9C6AF6566BC6C42355BFE22C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T5AEs7-KHhe9YGbgUYltO-vWaXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft
Manifest number:          047A
Signing time:             Wed 13 May 2026 03:01:18 +0000
Manifest this update:     Wed 13 May 2026 03:01:18 +0000
Manifest next update:     Thu 14 May 2026 03:01:18 +0000
Files and hashes:         1: T5AEs7-KHhe9YGbgUYltO-vWaXM.crl (hash: b9widsJx+uGOkrn3w4M9xKah3HrgJh1f39coII2ZDC0=)
                          2: rcLAbqWbscU0-zedseFFQJGt_wI.roa (hash: ksy9iE6IRNGp1O9iSJlmzmpx+QDptXJv7zwnwiulq0Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T5AEs7-KHhe9YGbgUYltO-vWaXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 03:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:48:15:ff:9c:6a:f6:56:6b:c6:c4:23:55:bf:e2:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9004b3bf8a1e17bd6066e051896d3bebd66973
        Validity
            Not Before: May 13 03:01:18 2026 GMT
            Not After : May 14 03:01:18 2026 GMT
        Subject: CN=39dfec9f208300e1cac9ecc18cff5f93f970c840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:37:e2:d6:b9:42:9b:93:44:14:ac:1e:e5:14:
                    89:03:2e:59:aa:6a:37:cf:83:6f:bf:ed:ef:cc:aa:
                    68:00:99:d0:d8:15:68:b8:ef:6d:5b:b0:1a:de:cb:
                    7c:e3:1e:76:4f:24:7e:2f:9b:03:3c:f1:db:6b:46:
                    e7:e5:4b:7a:b6:f6:9f:d1:86:57:0f:41:08:40:25:
                    d3:31:70:be:6a:11:75:92:ac:ce:8e:71:c6:ea:b4:
                    32:62:80:86:9c:5b:57:b8:15:1f:0c:77:f3:52:2a:
                    aa:47:ef:af:60:96:fa:e8:2c:b8:2e:ce:9e:f9:80:
                    99:fa:25:0f:25:e7:c2:c4:f5:27:a9:04:27:68:fc:
                    ba:b5:6d:e0:55:af:71:6c:a2:b8:f8:fd:7f:aa:75:
                    9f:75:e6:b9:03:71:22:d7:ba:7b:24:60:ba:6b:b8:
                    1f:29:bd:87:7e:57:69:65:8e:47:0a:f7:0a:e3:38:
                    58:6d:1f:bd:88:fb:4d:9e:93:af:f6:94:b1:b1:04:
                    9e:24:d6:59:3c:ba:99:36:a2:1c:46:8b:fd:68:03:
                    31:c4:35:ff:15:c0:2c:5c:39:46:e2:47:b0:c6:fb:
                    1f:b6:c9:a2:cd:6d:e8:39:8a:fc:43:04:9b:d2:3e:
                    bf:e1:93:77:77:be:db:4f:de:05:3a:ed:9b:69:b5:
                    92:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:DF:EC:9F:20:83:00:E1:CA:C9:EC:C1:8C:FF:5F:93:F9:70:C8:40
            X509v3 Authority Key Identifier:
                keyid:4F:90:04:B3:BF:8A:1E:17:BD:60:66:E0:51:89:6D:3B:EB:D6:69:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5AEs7-KHhe9YGbgUYltO-vWaXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:e3:08:b9:73:7d:c0:e5:8d:b9:36:75:fe:ea:97:40:8c:d6:
         60:8a:e8:0c:87:8f:0b:c4:01:ad:7d:68:c8:42:ff:19:fa:4c:
         d0:d6:aa:08:73:0a:9e:02:e9:04:67:01:1d:83:5f:f0:7b:5f:
         03:75:2c:9b:85:39:da:7c:a1:12:0d:ee:e3:0e:7c:87:40:4c:
         4b:0e:86:e8:0e:4f:6c:5f:12:94:6c:b6:72:e9:d3:e1:72:cd:
         39:b7:28:81:be:a3:b3:11:74:d9:73:eb:6d:a8:e8:0e:77:96:
         2b:8e:58:3a:62:40:6c:1b:39:c3:54:cf:ac:95:d7:a7:00:14:
         4a:94:79:d0:fe:3e:7e:1c:38:c1:67:f0:39:46:7f:7c:25:04:
         57:55:76:b2:f1:4b:c2:eb:ef:8d:81:b0:9e:6d:ce:8f:c8:6b:
         00:8d:6a:5d:41:18:56:8e:2a:d5:98:93:3b:3d:af:81:7c:6d:
         73:1e:3b:c4:fe:ab:d9:dc:51:b4:33:e0:47:6e:f1:c1:0c:fe:
         5b:34:c6:a9:5f:cc:c5:86:c0:4b:82:ec:1e:8c:5d:d9:03:4e:
         33:95:1c:3c:ac:7b:69:ec:c6:fc:f7:46:70:c7:fa:1d:a3:bb:
         b9:28:74:1d:12:db:13:a0:58:b3:e3:3f:96:c6:08:b1:d3:18:
         1f:5a:bb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:26:44 2026 by rpki-client