Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.mft
File:                     Rb4nHWSVKTNHRlxpuX1zgOS7tG0.mft (raw, json)
Hash identifier:          /w6hMRuUZnmiMZVCgfNOPNctTtzCEfIogHjeLuObA1g=
Subject key identifier:   F4:4E:F6:15:3E:D8:25:B2:44:03:17:4F:CD:C5:3F:83:2C:98:A3:DF
Authority key identifier: 45:BE:27:1D:64:95:29:33:47:46:5C:69:B9:7D:73:80:E4:BB:B4:6D
Certificate issuer:       /CN=45be271d6495293347465c69b97d7380e4bbb46d
Certificate serial:       019E1EA34DA0FE0E10E070C7D8F39CC14631
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.mft
Manifest number:          05FA
Signing time:             Wed 13 May 2026 00:01:19 +0000
Manifest this update:     Wed 13 May 2026 00:01:19 +0000
Manifest next update:     Thu 14 May 2026 00:01:19 +0000
Files and hashes:         1: 3_pPfdiwC4KChF-Xshn4oiVhkZ0.asa (hash: AngmFfXAvvs7BeOIV/RLl023pzJd7MaM/N4lm/y2gng=)
                          2: Rb4nHWSVKTNHRlxpuX1zgOS7tG0.crl (hash: 1VmyMYtjZnaReRUjDE6BqevK9Yu2Smafme45hANHSVY=)
                          3: co3NoaTZrfbmxDfWvZVyzSF9zs4.roa (hash: W81jUWTx5An2ltxr3EmUDv1Bxve3EzM58yjJRH0amGk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:4d:a0:fe:0e:10:e0:70:c7:d8:f3:9c:c1:46:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45be271d6495293347465c69b97d7380e4bbb46d
        Validity
            Not Before: May 13 00:01:19 2026 GMT
            Not After : May 14 00:01:19 2026 GMT
        Subject: CN=f44ef6153ed825b24403174fcdc53f832c98a3df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2e:a5:fb:27:6f:e6:cb:5c:ed:64:01:a0:fa:
                    0b:7f:4f:b9:5e:e0:ca:1f:67:f5:20:ca:09:57:41:
                    6b:b2:79:d5:66:26:8c:9e:1c:c5:5d:27:6b:f4:98:
                    eb:9f:5a:1d:3d:a2:e5:4e:74:0c:87:dc:73:a7:21:
                    8f:33:63:86:39:e6:b4:57:1e:54:ee:ff:36:52:44:
                    a0:f7:d4:f4:47:59:89:f0:0d:76:6d:a3:17:58:39:
                    e4:24:c4:8a:c5:bf:1b:34:32:5b:90:78:53:89:cf:
                    24:90:36:de:0b:1a:df:43:61:e4:a2:1e:ac:ee:4d:
                    62:fc:d7:91:f8:54:22:d8:f5:c0:d0:4b:23:b6:24:
                    3e:c5:fd:a8:0f:89:fc:df:96:fe:cf:1c:33:f0:7a:
                    b6:9d:08:f3:fd:41:35:23:4a:1f:9e:3d:b6:b2:dd:
                    c8:9e:be:44:e6:67:b2:c6:7d:03:cb:0d:c7:a6:91:
                    7b:9b:3a:69:c5:fd:01:7f:9b:72:8e:66:84:de:c9:
                    62:ac:91:7a:97:6e:c6:81:f3:a6:e4:3f:e4:7c:a9:
                    f7:d3:89:20:a6:05:89:fd:80:3f:4b:23:ed:df:7d:
                    b6:08:e4:18:4f:e0:12:b4:0e:a7:7d:ba:41:63:8c:
                    a7:a2:a8:32:db:44:fb:f7:80:9c:b2:5c:dc:93:36:
                    0e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:4E:F6:15:3E:D8:25:B2:44:03:17:4F:CD:C5:3F:83:2C:98:A3:DF
            X509v3 Authority Key Identifier:
                keyid:45:BE:27:1D:64:95:29:33:47:46:5C:69:B9:7D:73:80:E4:BB:B4:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:09:8f:55:67:33:06:f3:50:e4:1d:29:cd:ea:20:c0:f6:dd:
         68:82:03:9e:86:6e:41:00:38:0e:7c:db:e3:69:2b:38:b0:82:
         ff:63:73:b4:3b:d7:1a:ef:38:5c:e9:10:28:77:a3:8f:04:39:
         e3:bd:92:79:a3:ff:88:82:f6:f7:e8:d9:27:39:dc:f3:99:23:
         eb:d9:3d:29:f3:9d:07:49:0d:f1:cc:bf:ff:fe:05:f2:1a:b1:
         d2:07:00:9d:de:2f:a3:21:e2:0d:54:30:20:ac:91:54:b2:4d:
         f4:e2:e0:6a:af:bf:59:2f:da:8b:cf:03:3c:6b:a0:3c:fc:5a:
         5a:83:3a:5b:2c:82:29:2a:95:80:c9:90:e3:56:a8:92:1f:d7:
         a5:e5:a5:be:59:76:e1:48:67:61:55:fd:57:5b:03:c1:9e:7e:
         9e:76:30:b7:d6:42:33:d2:9c:49:fc:62:bc:89:c5:93:ca:cc:
         71:10:de:4b:d5:0d:91:c6:b5:27:75:f2:b3:6e:98:72:60:d6:
         ca:f6:c2:35:56:e0:4d:30:de:ce:90:7d:82:45:0e:fa:ba:c4:
         0f:7d:bd:fd:5a:9e:80:88:62:64:34:27:e3:d7:04:e3:92:38:
         65:75:db:c0:ea:c3:9d:ac:18:85:e5:d0:9d:59:37:cd:24:65:
         35:26:1b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:36:12 2026 by rpki-client