Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
File:                     4OvbaaM-jzrzY64UT4U1OOgDG2M.mft (raw, json)
Hash identifier:          mhjUB00vB1n7399+T75JscKXF6lOEOXaGW8iA63ySdk=
Subject key identifier:   28:B5:B9:8E:AA:02:6D:ED:18:59:2A:0C:C9:4B:EE:C4:4E:17:51:85
Authority key identifier: E0:EB:DB:69:A3:3E:8F:3A:F3:63:AE:14:4F:85:35:38:E8:03:1B:63
Certificate issuer:       /CN=e0ebdb69a33e8f3af363ae144f853538e8031b63
Certificate serial:       019E1EA31DE74EE940941BDB3866183B4244
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
Manifest number:          0BDE
Signing time:             Wed 13 May 2026 00:01:06 +0000
Manifest this update:     Wed 13 May 2026 00:01:06 +0000
Manifest next update:     Thu 14 May 2026 00:01:06 +0000
Files and hashes:         1: 4OvbaaM-jzrzY64UT4U1OOgDG2M.crl (hash: 7doLd5HfIXzEBKonHidZnDCFAtO8o4bwFevwOgoP/9Q=)
                          2: uZAkdvgnla4W0XfXq_LcU0XnYDc.roa (hash: yjPqez282iszAcd+/RqL31Peh6NQ/8RPBG85snT1+sw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:1d:e7:4e:e9:40:94:1b:db:38:66:18:3b:42:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0ebdb69a33e8f3af363ae144f853538e8031b63
        Validity
            Not Before: May 13 00:01:06 2026 GMT
            Not After : May 14 00:01:06 2026 GMT
        Subject: CN=28b5b98eaa026ded18592a0cc94beec44e175185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ac:2a:3a:6f:92:0a:2e:c1:12:9e:f6:5e:f8:
                    4b:80:64:4b:ab:a9:12:6c:0f:e3:90:4a:5e:2d:6b:
                    e4:77:90:66:01:83:39:a6:56:7f:11:bd:75:d7:4f:
                    1a:93:51:59:33:1f:ba:94:ff:de:1a:27:a3:6f:92:
                    cc:79:01:a6:fa:5e:cd:10:3e:64:08:40:88:69:42:
                    26:5a:92:84:61:2f:09:e1:42:25:5a:33:d8:0f:70:
                    20:a1:39:68:2f:35:e7:35:e4:1a:1d:d4:7c:b4:a1:
                    bb:69:a5:6f:37:50:70:a4:f8:0b:68:7c:c6:25:30:
                    0e:40:b0:a3:d8:d3:c1:ec:5a:2d:8d:7d:72:5b:ce:
                    7a:34:de:c4:ce:68:84:72:eb:b3:c0:19:4c:93:a4:
                    83:f4:0b:6d:e5:01:ed:d5:f5:18:dc:e0:e5:09:5d:
                    f6:f1:d5:41:20:a5:86:88:16:0e:99:cc:0e:28:60:
                    68:a8:70:04:c3:4a:e0:06:91:1b:49:81:05:4a:f6:
                    60:71:f0:e0:0b:85:ab:20:74:0a:b6:02:12:60:c3:
                    ee:12:43:b1:bd:8a:9f:44:5e:91:34:b2:0d:fb:b8:
                    07:93:9f:45:42:9d:8e:e3:49:47:82:44:c5:7c:ce:
                    14:b5:6c:be:af:3c:c8:0b:13:a1:a7:bd:65:b6:96:
                    78:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:B5:B9:8E:AA:02:6D:ED:18:59:2A:0C:C9:4B:EE:C4:4E:17:51:85
            X509v3 Authority Key Identifier:
                keyid:E0:EB:DB:69:A3:3E:8F:3A:F3:63:AE:14:4F:85:35:38:E8:03:1B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:c9:ce:f3:8f:d4:cb:98:d0:be:9f:13:c2:b1:89:27:fc:5a:
         b9:c6:d4:8c:3a:75:51:3e:37:dd:44:b5:ac:d4:99:54:31:71:
         e1:39:95:4b:aa:88:51:32:43:34:f8:63:3e:e2:06:aa:39:83:
         e1:80:56:4e:8e:ab:7d:38:dd:f0:05:c0:60:57:11:42:8f:b4:
         38:00:b3:ef:1b:5a:18:29:94:9b:9f:2d:42:12:2f:b9:79:69:
         50:13:27:55:96:63:92:07:b1:6c:2f:23:12:31:42:94:d0:39:
         8b:41:a5:47:a4:fb:66:0c:27:1e:8e:6c:bd:61:65:bd:73:e3:
         6d:df:ac:f9:4f:02:7d:a5:27:e0:a2:ea:92:43:f0:15:a6:4b:
         1a:2f:13:1b:9b:1a:79:15:6c:bf:f3:b6:3d:e0:68:1c:fa:a8:
         aa:87:ca:a7:ac:2f:b9:a4:b5:0b:15:0b:c5:24:61:e9:c5:4c:
         df:ee:c6:39:7d:bd:81:32:10:85:34:95:d1:94:78:58:f4:4f:
         48:cf:16:22:b2:15:26:c4:8a:3a:0f:3d:6b:a9:71:8d:4d:ed:
         dd:54:6e:1b:3e:d4:65:eb:2a:35:6e:c2:45:e0:a4:ba:03:1e:
         ce:0c:c4:38:23:c4:fa:03:8b:5b:e1:c9:9e:97:26:a6:33:e1:
         29:4f:fa:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:12:56 2026 by rpki-client