Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.mft
File:                     S81y1ss4Wjozxsj-VFnGhqaElQk.mft (raw, json)
Hash identifier:          u/kgnK8KAktoYiayj0vbYjq9QoZdWYoNPCFLNZ9vC0Y=
Subject key identifier:   15:DA:20:74:C9:5D:C2:CC:57:AB:FA:3E:BD:D3:F1:9C:91:92:FB:77
Authority key identifier: 4B:CD:72:D6:CB:38:5A:3A:33:C6:C8:FE:54:59:C6:86:A6:84:95:09
Certificate issuer:       /CN=4bcd72d6cb385a3a33c6c8fe5459c686a6849509
Certificate serial:       019E1EDA2A51929C41BED9EF874724C87036
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S81y1ss4Wjozxsj-VFnGhqaElQk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.mft
Manifest number:          13E1
Signing time:             Wed 13 May 2026 01:01:14 +0000
Manifest this update:     Wed 13 May 2026 01:01:14 +0000
Manifest next update:     Thu 14 May 2026 01:01:14 +0000
Files and hashes:         1: S81y1ss4Wjozxsj-VFnGhqaElQk.crl (hash: QWoz6r0iO+0KSf3zv3Ba0TIXnMkwHdMasG0euNcdM+M=)
                          2: oZ_sRUkhzcnvo9UxHydsIIFowVA.roa (hash: M/9VTdKWiax6Tcg6atFhpgUR3/6F+N0ZZUqwIPzeqz8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S81y1ss4Wjozxsj-VFnGhqaElQk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:2a:51:92:9c:41:be:d9:ef:87:47:24:c8:70:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bcd72d6cb385a3a33c6c8fe5459c686a6849509
        Validity
            Not Before: May 13 01:01:14 2026 GMT
            Not After : May 14 01:01:14 2026 GMT
        Subject: CN=15da2074c95dc2cc57abfa3ebdd3f19c9192fb77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ad:69:a1:4f:21:a1:9d:0b:c9:b5:e6:b3:6f:
                    fd:66:d5:45:d9:d2:8e:91:7d:1c:78:0e:b6:40:86:
                    21:d6:ea:18:f9:2d:61:22:61:08:35:a2:dc:cc:f5:
                    b2:3d:a9:f7:28:0e:29:77:c1:b8:1c:1b:0a:4c:03:
                    8e:48:6d:01:e6:68:46:7c:40:16:eb:bc:98:70:be:
                    b0:04:7e:7e:36:34:27:5e:77:17:32:df:ee:51:20:
                    dc:67:88:1d:8b:0e:3c:d8:a7:ad:8f:02:96:52:1c:
                    18:4b:47:62:05:a1:d7:f2:f7:7e:b6:70:b5:09:7d:
                    be:65:6d:d1:71:f1:b8:7f:34:91:a9:03:66:ea:d4:
                    14:23:ec:38:e8:be:f7:0e:b6:77:67:84:51:96:37:
                    13:c6:d1:85:4d:d1:57:77:69:64:05:d3:01:cb:6e:
                    4a:c9:46:a6:d4:bc:f9:34:24:ca:71:95:df:56:d6:
                    71:18:df:f7:e5:ac:13:1b:5d:5f:53:1d:cc:85:47:
                    87:10:4d:82:bb:fc:f4:80:cd:d0:8a:a0:ff:4d:9c:
                    c7:1e:93:75:b7:b7:d9:9c:85:cc:60:38:0b:05:16:
                    2b:1c:ee:fa:a0:42:be:ec:a8:0b:f9:e5:48:15:d0:
                    d5:66:80:88:83:1f:43:5e:ea:8a:01:0a:ca:55:a4:
                    d9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:DA:20:74:C9:5D:C2:CC:57:AB:FA:3E:BD:D3:F1:9C:91:92:FB:77
            X509v3 Authority Key Identifier:
                keyid:4B:CD:72:D6:CB:38:5A:3A:33:C6:C8:FE:54:59:C6:86:A6:84:95:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S81y1ss4Wjozxsj-VFnGhqaElQk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:24:c4:07:34:e5:64:9a:7e:e6:ca:07:03:62:4f:ee:06:01:
         b4:ec:71:89:20:b3:4c:37:90:80:28:d3:4b:d6:86:de:15:be:
         4b:24:e0:0d:ba:0e:0a:8d:ef:43:e7:97:2d:d7:e9:e9:0c:d9:
         cb:0f:ef:2b:06:66:aa:b0:9f:97:1f:db:4d:15:59:01:3e:99:
         a7:4a:6a:92:10:0e:6d:e8:a9:64:41:fc:0b:a5:81:d2:7d:ac:
         42:9a:d7:bb:4d:d9:e3:c5:ec:26:0c:b6:8f:91:2a:4d:90:86:
         8f:2f:6d:f0:c4:5b:3c:25:9a:26:8e:cf:f7:09:b3:07:8e:46:
         c1:45:a2:a9:d5:76:dc:3e:52:10:4e:7b:3f:6a:7d:88:04:8e:
         fc:a2:7c:41:ac:69:c9:fe:b0:fc:6a:d7:dc:89:cf:1b:59:4a:
         25:0f:a3:d6:4b:81:81:69:fe:d9:78:23:9f:ca:ff:d3:a4:65:
         4a:bc:2b:7c:74:84:eb:49:2b:e3:88:ff:f6:17:4b:7e:85:b5:
         05:01:eb:9e:ce:62:25:99:91:c4:09:06:61:4f:d1:20:65:dc:
         a1:f8:56:d7:e2:94:3a:f2:2d:79:a4:16:06:c5:f2:91:c2:f2:
         04:82:3e:0d:d5:70:89:30:08:e2:85:94:92:77:60:e6:b2:d8:
         d0:34:46:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:09:47 2026 by rpki-client