Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft
File:                     11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft (raw, json)
Hash identifier:          NBG7CSX32wdEl1baAzV23SJ3JGGPYpMknKyccjzVyc0=
Subject key identifier:   FF:61:1F:60:3C:5E:A3:68:0F:DF:CF:86:C8:46:A4:00:85:E1:29:4E
Authority key identifier: D7:56:71:CD:C1:4A:37:FB:CB:9F:01:50:CC:F9:18:DB:15:C2:32:6F
Certificate issuer:       /CN=d75671cdc14a37fbcb9f0150ccf918db15c2326f
Certificate serial:       019E1E34EB2AD080AEB0DB16ACA6E3FA12F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/11ZxzcFKN_vLnwFQzPkY2xXCMm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft
Manifest number:          1902
Signing time:             Tue 12 May 2026 22:00:44 +0000
Manifest this update:     Tue 12 May 2026 22:00:44 +0000
Manifest next update:     Wed 13 May 2026 22:00:44 +0000
Files and hashes:         1: 11ZxzcFKN_vLnwFQzPkY2xXCMm8.crl (hash: FLomzAz3qaqnsJGRNgcuO7+1YpwmQWbruJAjow3NzfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/11ZxzcFKN_vLnwFQzPkY2xXCMm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:34:eb:2a:d0:80:ae:b0:db:16:ac:a6:e3:fa:12:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d75671cdc14a37fbcb9f0150ccf918db15c2326f
        Validity
            Not Before: May 12 22:00:44 2026 GMT
            Not After : May 13 22:00:44 2026 GMT
        Subject: CN=ff611f603c5ea3680fdfcf86c846a40085e1294e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f6:bd:8a:22:3f:99:cc:b7:8d:53:fb:cb:19:
                    b7:13:56:17:71:86:15:1f:08:b4:61:b2:aa:42:5b:
                    6a:9e:75:8e:98:82:1b:50:ef:c3:ba:1b:54:66:e9:
                    0f:b3:fb:8a:fa:40:53:72:3b:4e:83:88:80:9e:08:
                    6a:2c:d9:9a:92:6a:ba:fc:db:b6:aa:92:f3:fa:86:
                    f2:23:6c:48:f0:cc:19:17:21:8e:59:e6:b8:f8:3b:
                    3c:e6:28:38:14:b7:fe:94:6a:ee:5e:ac:e9:5d:56:
                    ee:4c:b3:94:1c:b2:dc:e0:57:12:af:03:d3:a3:b0:
                    a0:54:ac:fa:46:f5:15:22:29:cc:90:83:f2:b3:1d:
                    91:6b:c9:f0:c6:37:d6:a7:16:ba:7f:c5:cd:d8:23:
                    73:04:b3:61:4f:02:19:89:83:9c:43:c6:d0:4f:d6:
                    8f:38:27:97:e8:76:fd:b1:1e:29:16:8e:4c:ec:cc:
                    b4:32:2b:01:b8:26:dc:f4:ac:ba:26:c0:44:af:75:
                    c3:e2:7c:41:56:6d:4b:94:2c:20:72:23:e8:43:74:
                    3b:da:35:02:f1:af:d8:a1:df:99:ee:0d:18:cf:e9:
                    41:7d:60:0c:cd:f0:c8:f4:43:3d:90:16:9a:f9:38:
                    b0:57:80:66:a9:00:15:ee:80:53:4f:6a:4e:3c:a8:
                    77:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:61:1F:60:3C:5E:A3:68:0F:DF:CF:86:C8:46:A4:00:85:E1:29:4E
            X509v3 Authority Key Identifier:
                keyid:D7:56:71:CD:C1:4A:37:FB:CB:9F:01:50:CC:F9:18:DB:15:C2:32:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11ZxzcFKN_vLnwFQzPkY2xXCMm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:de:7c:20:a7:3c:75:c4:a8:4e:0d:f5:fc:dc:dd:4d:0c:dc:
         4f:c0:54:d3:95:69:b9:19:63:ab:78:6d:70:f1:09:59:bf:ee:
         c1:ea:88:74:ea:f3:94:9d:e2:d2:40:cf:15:19:4a:22:15:7e:
         cd:50:66:6a:05:a4:65:43:62:2e:fc:76:e6:f3:ff:93:19:0c:
         d9:07:a2:a1:3e:f5:ce:73:2d:86:5c:82:0b:11:cd:96:0d:65:
         df:d1:fc:5d:7b:ff:b3:cf:91:2c:83:0f:15:c8:34:be:f0:05:
         b9:a9:b9:70:88:91:fe:76:2e:4d:48:b1:28:59:6c:68:36:a9:
         c8:10:ea:07:a9:fb:9c:77:8b:8e:67:9a:65:87:00:49:6e:28:
         a5:f0:01:16:c9:5c:1d:24:04:8b:2d:e5:84:2a:98:36:27:5b:
         3f:e3:1d:4d:83:ae:a8:54:a8:2d:d5:46:33:12:c3:8e:bf:04:
         6e:b5:ff:19:0d:c7:55:3e:95:f7:1d:45:50:8d:e6:37:40:1d:
         e8:48:a3:8a:3f:a5:e6:cf:98:a5:fd:2b:a7:b0:92:c0:2c:2b:
         a3:b6:78:47:e3:b4:47:e8:33:e9:ba:d0:01:41:02:85:ea:de:
         e2:db:a6:cb:17:b1:49:6f:2e:be:55:dd:ba:0a:80:d7:25:2c:
         58:57:7c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:00:59 2026 by rpki-client