Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
File:                     tWGrEAAXphJTFvzGEzhKr73mAYk.mft (raw, json)
Hash identifier:          KkKdMr03vCfk7Sd6phoJ9C9HyzBHKXVrD1Jm7aZ3ZFU=
Subject key identifier:   4B:E1:7C:53:AF:06:1F:3E:FF:1F:A1:9A:56:8F:48:89:F3:A0:84:12
Authority key identifier: B5:61:AB:10:00:17:A6:12:53:16:FC:C6:13:38:4A:AF:BD:E6:01:89
Certificate issuer:       /CN=b561ab100017a6125316fcc613384aafbde60189
Certificate serial:       019E1FECD0C714BF694C9E7193CAACAF2CD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
Manifest number:          0983
Signing time:             Wed 13 May 2026 06:01:13 +0000
Manifest this update:     Wed 13 May 2026 06:01:13 +0000
Manifest next update:     Thu 14 May 2026 06:01:13 +0000
Files and hashes:         1: tWGrEAAXphJTFvzGEzhKr73mAYk.crl (hash: U6R0Oc90EwOvh5YsCvScb0PFKXco4uKGQw8Ojptx5ZQ=)
                          2: vlOzrXADwVbr-4L_grlu0PIS3Rk.roa (hash: 3PRB7VQuDMBjsXiJij2GAncqz8RGuTBHCw9ZZ/+ej1Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ec:d0:c7:14:bf:69:4c:9e:71:93:ca:ac:af:2c:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b561ab100017a6125316fcc613384aafbde60189
        Validity
            Not Before: May 13 06:01:13 2026 GMT
            Not After : May 14 06:01:13 2026 GMT
        Subject: CN=4be17c53af061f3eff1fa19a568f4889f3a08412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:76:59:30:20:b0:e8:b3:58:da:c1:3c:e9:8b:
                    f5:89:31:3a:c1:8e:d4:10:bb:76:16:eb:4a:fa:15:
                    0a:f1:92:df:3b:ad:97:01:30:c7:c9:9d:68:97:90:
                    c4:00:05:4d:5d:cf:17:56:4b:9b:7b:28:23:b8:71:
                    e4:fa:e9:f5:ee:d6:7c:dc:ea:bb:ca:ab:e7:0a:b5:
                    c5:02:a5:b4:05:f2:be:16:99:05:59:59:e2:89:80:
                    a9:53:f6:0a:dd:99:ce:93:8d:e0:a4:9f:14:27:94:
                    f6:0d:6b:c1:64:36:7e:b9:2f:60:4f:1b:3d:64:c5:
                    d7:6c:e0:6d:06:7e:6b:c5:0b:da:ce:b3:c5:0e:fc:
                    51:a1:6b:c1:cc:2d:98:79:bc:68:61:ac:a2:a2:b1:
                    e7:b8:ec:fb:26:9a:5d:1c:62:5a:65:bc:00:b1:26:
                    39:23:30:f2:07:c6:b3:41:89:59:ef:7c:20:a6:35:
                    16:9d:0e:75:1b:e9:f6:1f:cb:f2:a8:63:ad:f9:8d:
                    33:20:3e:20:e4:b8:ea:03:b2:48:f4:0c:99:e0:0e:
                    d6:a4:22:e9:0c:de:90:ff:bd:b5:46:ca:f6:e6:79:
                    43:67:30:b4:cc:a7:18:78:e6:67:45:08:c4:29:01:
                    bc:e8:e3:8f:4a:0c:a7:82:d7:1e:fb:85:2b:cc:fc:
                    d0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E1:7C:53:AF:06:1F:3E:FF:1F:A1:9A:56:8F:48:89:F3:A0:84:12
            X509v3 Authority Key Identifier:
                keyid:B5:61:AB:10:00:17:A6:12:53:16:FC:C6:13:38:4A:AF:BD:E6:01:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:50:ca:5b:ad:b1:45:30:fd:cb:44:49:8f:55:76:c2:d2:32:
         b6:69:fe:11:fb:a1:0e:b6:2c:f1:7c:b8:05:11:13:01:12:e9:
         be:f8:67:4b:e9:d2:67:de:cd:d6:a9:03:d9:a2:10:d8:d7:a5:
         f8:1d:63:f7:70:dd:2b:e9:2e:c7:00:96:9a:b5:44:52:05:c0:
         c7:5d:f2:5d:a1:07:88:9a:29:c6:da:84:ed:15:f7:a4:ed:3e:
         a1:69:46:cb:ca:7a:82:0c:1a:68:29:2f:49:0e:ad:fb:00:32:
         1c:f1:d9:b1:80:75:07:6a:24:57:6c:24:82:38:6c:b1:18:6a:
         98:1b:07:51:da:f7:51:24:fb:17:71:cc:85:a7:34:37:64:23:
         79:82:da:11:90:13:24:aa:d5:b3:85:78:d3:bc:11:9b:85:e8:
         b1:da:7c:06:27:1b:9f:48:e6:43:03:f9:6c:c8:9a:ed:32:6e:
         04:c8:27:d6:a2:80:03:17:8a:be:54:d2:00:49:50:0d:94:96:
         8b:28:62:71:3f:e7:3a:f4:d3:c7:32:c2:b7:d0:61:7e:f4:d8:
         a0:8f:b9:f5:60:c4:36:22:37:96:c3:03:4a:5f:85:02:22:ed:
         a4:95:80:96:eb:ae:80:60:eb:67:9a:7d:ff:0d:f5:99:61:77:
         c9:db:d8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:18:08 2026 by rpki-client