Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft
File:                     jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft (raw, json)
Hash identifier:          F0tF/CXEkBLps7eUon1Jp46gYFWC9BHl+1WHNFDAlEE=
Subject key identifier:   E3:8A:6A:13:AA:E2:60:5A:64:11:97:23:F7:DF:71:6A:69:A3:3E:79
Authority key identifier: 8D:68:F7:92:8C:10:FC:2B:54:B5:B5:89:44:8F:E7:7D:40:42:18:CA
Certificate issuer:       /CN=8d68f7928c10fc2b54b5b589448fe77d404218ca
Certificate serial:       019E20C88C15A2C9779437B80F09B768C4D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jWj3kowQ_CtUtbWJRI_nfUBCGMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft
Manifest number:          1464
Signing time:             Wed 13 May 2026 10:01:14 +0000
Manifest this update:     Wed 13 May 2026 10:01:14 +0000
Manifest next update:     Thu 14 May 2026 10:01:14 +0000
Files and hashes:         1: OEpwskwsLrz2yf1kQY123zPLnE4.roa (hash: r+MJQWljp0uomcKdAOLj7x+bZJ8VoSCvYTEYvyJMs5s=)
                          2: jWj3kowQ_CtUtbWJRI_nfUBCGMo.crl (hash: a+60bHw5tfXswmqFKIZYOsocFBRJihng387opYizk9o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jWj3kowQ_CtUtbWJRI_nfUBCGMo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:c8:8c:15:a2:c9:77:94:37:b8:0f:09:b7:68:c4:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d68f7928c10fc2b54b5b589448fe77d404218ca
        Validity
            Not Before: May 13 10:01:14 2026 GMT
            Not After : May 14 10:01:14 2026 GMT
        Subject: CN=e38a6a13aae2605a64119723f7df716a69a33e79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:c5:d4:de:5c:47:ea:88:f9:5a:ba:7c:98:79:
                    a4:94:b5:df:0f:a6:d1:94:19:47:52:74:84:48:74:
                    8f:d2:50:27:d9:05:f2:4d:27:86:39:86:bc:a5:0c:
                    48:37:a3:75:31:ee:8f:7f:c3:fe:c6:ec:3f:57:cd:
                    fd:14:b8:0d:22:55:9a:fa:a9:24:cc:20:2e:d1:e2:
                    d5:9f:16:82:73:9f:de:2d:86:93:b1:ec:e2:84:0c:
                    a3:ef:d7:f1:d0:ad:3c:a8:7f:a5:3d:d8:2d:02:d7:
                    a8:9c:72:ab:e8:b6:96:ec:33:70:cd:a0:01:6b:59:
                    e3:5b:5c:71:7e:1b:29:01:6d:05:a9:14:6a:53:de:
                    75:fe:58:87:1c:0d:03:c2:34:bb:a5:dd:ae:e3:3a:
                    85:4c:c8:31:0c:18:ac:23:1e:3d:75:77:1c:0f:20:
                    f2:75:c5:56:63:45:97:e8:aa:1a:39:e7:55:cc:b8:
                    38:05:58:b7:cd:cf:7f:50:4c:09:ef:be:67:1b:31:
                    50:3b:76:e1:c4:f9:5a:c3:5d:6e:4e:de:63:00:79:
                    08:ce:37:00:67:c1:0e:f2:d2:f4:49:ce:3e:27:f5:
                    c6:78:77:69:d7:8d:cd:bf:2f:26:b9:3c:99:38:23:
                    d1:ca:69:f2:71:18:27:f3:07:65:53:79:b9:4f:ed:
                    51:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:8A:6A:13:AA:E2:60:5A:64:11:97:23:F7:DF:71:6A:69:A3:3E:79
            X509v3 Authority Key Identifier:
                keyid:8D:68:F7:92:8C:10:FC:2B:54:B5:B5:89:44:8F:E7:7D:40:42:18:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWj3kowQ_CtUtbWJRI_nfUBCGMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:be:1a:25:cb:ee:87:2c:19:a7:4d:4f:29:a2:4d:c5:cf:06:
         5c:ed:b3:52:8f:de:b6:42:7f:c7:f7:e2:d5:9d:5c:17:d9:74:
         f8:28:fa:0d:03:b8:ee:6e:5c:c5:f9:c3:7c:1e:ef:6f:b7:bb:
         3c:0e:4b:80:56:73:92:f1:2a:74:76:d3:9e:6e:d4:7e:c4:af:
         33:85:af:dd:64:75:4a:91:ed:bb:a9:f7:56:44:15:3e:37:41:
         3e:c8:cf:1d:d3:ae:4f:a1:58:d4:39:70:5f:75:24:85:a5:1d:
         91:81:51:c2:27:f2:be:b3:75:75:89:59:f3:47:a4:27:9f:16:
         79:0a:33:1f:d9:a4:34:71:d3:2c:d9:07:50:2d:82:48:92:e8:
         0a:38:b6:3d:35:13:9a:0c:3c:32:8a:3f:f9:74:24:84:70:bc:
         cb:63:5f:72:2a:f9:02:78:8a:90:fb:e1:8e:07:0a:92:ac:02:
         9a:13:d4:6e:c4:a3:60:86:56:d9:88:00:39:85:c7:f7:a7:3e:
         30:f3:28:b3:15:82:44:6a:e1:39:af:9f:b5:50:62:de:94:de:
         62:4b:43:3f:66:59:ae:5c:7f:97:75:ff:38:33:4f:e8:0b:4b:
         a0:39:98:89:f2:37:bc:ea:43:5f:ff:34:75:20:a4:3b:cc:ae:
         2c:fe:cf:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:12:13 2026 by rpki-client