Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/20b876-eb24-4cdc-ba96-2421aec4e718/1/1MjvOur8QtSTmZ8v5DYZO-hREU4.mft
File:                     1MjvOur8QtSTmZ8v5DYZO-hREU4.mft (raw, json)
Hash identifier:          O/3hbItIXGQbxqTHx05iBBwrWwBNfk7ETWr6q4UffvY=
Subject key identifier:   EB:CC:D0:EC:D9:57:2A:46:BD:CB:32:62:A0:FA:72:A1:05:E8:01:29
Authority key identifier: D4:C8:EF:3A:EA:FC:42:D4:93:99:9F:2F:E4:36:19:3B:E8:51:11:4E
Certificate issuer:       /CN=d4c8ef3aeafc42d493999f2fe436193be851114e
Certificate serial:       019E1EA355AE6845F3B4D1528A6547F01B1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1MjvOur8QtSTmZ8v5DYZO-hREU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/20b876-eb24-4cdc-ba96-2421aec4e718/1/1MjvOur8QtSTmZ8v5DYZO-hREU4.mft
Manifest number:          011E
Signing time:             Wed 13 May 2026 00:01:21 +0000
Manifest this update:     Wed 13 May 2026 00:01:21 +0000
Manifest next update:     Thu 14 May 2026 00:01:21 +0000
Files and hashes:         1: 1MjvOur8QtSTmZ8v5DYZO-hREU4.crl (hash: vAoxRiEQ+i1qTpJRk09dB7qhLZ2OAfWb/FNtr+exBOA=)
                          2: kMjU5SPCHhf-fECFvz7nifCpMy4.roa (hash: nCt6rvQjRfODBx5zhXzuU3Hf/5pXaEL7+ZUSieoDSfg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/20b876-eb24-4cdc-ba96-2421aec4e718/1/1MjvOur8QtSTmZ8v5DYZO-hREU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/20b876-eb24-4cdc-ba96-2421aec4e718/1/1MjvOur8QtSTmZ8v5DYZO-hREU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1MjvOur8QtSTmZ8v5DYZO-hREU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:55:ae:68:45:f3:b4:d1:52:8a:65:47:f0:1b:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4c8ef3aeafc42d493999f2fe436193be851114e
        Validity
            Not Before: May 13 00:01:21 2026 GMT
            Not After : May 14 00:01:21 2026 GMT
        Subject: CN=ebccd0ecd9572a46bdcb3262a0fa72a105e80129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:87:e8:87:77:e6:95:2d:67:58:41:46:b8:0a:
                    e1:49:68:36:03:c7:de:f2:66:4f:87:a5:9a:17:7f:
                    e3:5c:10:c1:24:4d:36:32:e4:d1:8c:de:39:b3:17:
                    a2:cf:be:ad:d6:6a:9e:19:f3:cd:00:a3:5a:b2:4e:
                    f1:67:c5:cf:4e:73:79:85:d7:a2:03:25:7c:22:7d:
                    37:ae:ff:a8:ff:2e:89:50:bf:3c:57:1c:2a:fb:4e:
                    a5:80:cd:d7:e4:e4:13:7b:18:97:b3:2c:9e:81:a5:
                    6b:70:58:53:67:72:26:02:59:81:2c:da:b0:7f:a0:
                    ec:92:c6:10:31:6d:67:29:c0:a6:05:91:a0:19:9d:
                    cc:39:b5:f0:75:c8:f5:48:89:23:4d:55:70:43:fd:
                    65:27:de:6f:c6:9b:35:40:ed:bb:80:dd:14:da:ae:
                    9f:1f:cc:05:18:96:1a:1e:76:7a:7c:34:0e:24:d7:
                    0d:88:97:67:90:f0:2c:e6:8b:48:97:7a:13:da:bf:
                    1c:fe:2e:bc:13:24:13:e4:6a:96:1c:3a:2e:1d:a2:
                    f9:5e:a7:ad:9b:a2:e8:eb:54:08:1c:bf:66:d4:26:
                    2a:ba:cd:a7:97:ec:85:c5:d6:b0:06:56:e2:a6:a8:
                    ed:d4:88:87:14:93:22:5c:2d:5b:de:d3:bc:1a:e5:
                    9e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:CC:D0:EC:D9:57:2A:46:BD:CB:32:62:A0:FA:72:A1:05:E8:01:29
            X509v3 Authority Key Identifier:
                keyid:D4:C8:EF:3A:EA:FC:42:D4:93:99:9F:2F:E4:36:19:3B:E8:51:11:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MjvOur8QtSTmZ8v5DYZO-hREU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/20b876-eb24-4cdc-ba96-2421aec4e718/1/1MjvOur8QtSTmZ8v5DYZO-hREU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/20b876-eb24-4cdc-ba96-2421aec4e718/1/1MjvOur8QtSTmZ8v5DYZO-hREU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:18:79:26:84:01:63:5e:25:8f:bb:44:c6:a9:c5:d2:85:95:
         6a:03:52:c2:5e:f8:2b:f8:60:4f:78:a7:2a:db:ff:08:12:b4:
         fe:19:00:32:7e:b2:68:bf:fe:f1:1a:62:7b:ef:28:e7:f6:f0:
         9e:1b:a8:82:a0:09:4d:f6:b4:2e:57:8a:11:82:9a:16:b6:1f:
         8a:94:10:c3:c2:72:4b:86:cf:14:f9:5e:5d:69:3e:01:d7:09:
         07:8b:59:60:b0:70:ca:86:0b:c6:b4:14:8b:59:64:89:b3:e1:
         a5:59:6e:bc:fb:a7:72:ca:6d:9a:33:bc:46:5f:67:49:f9:08:
         86:47:87:30:f4:ae:e6:5a:ff:12:e7:01:d6:c0:25:c2:fa:ef:
         5d:96:ed:58:94:c7:12:0f:13:01:62:81:2e:c6:56:27:8a:b2:
         2d:87:46:2e:83:5e:d3:ee:02:b8:5f:30:38:3a:4a:87:4d:cc:
         63:7a:bf:8c:c2:90:d7:6f:46:0f:ff:1c:9a:b4:7f:c3:8a:4e:
         af:9a:12:09:03:fa:63:cf:c0:ee:a0:f0:85:e9:6f:58:46:f9:
         17:28:d6:5b:34:d9:d0:04:49:43:00:2b:e9:ca:53:00:11:a8:
         cf:1f:7a:c1:a0:ed:b6:6f:c4:ed:db:b0:6a:ad:c7:cb:1e:51:
         7a:29:78:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:38:06 2026 by rpki-client