Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft
File:                     fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft (raw, json)
Hash identifier:          wgUFAO+ibVSAhDwVYho/SP0f6V9Oh0Myc0uZWY1Gky4=
Subject key identifier:   DB:CE:A1:90:18:7E:B6:7D:9F:77:72:43:A6:3F:FB:F8:83:2A:56:69
Authority key identifier: 7E:8E:09:72:4F:47:2E:76:68:9C:61:DC:A6:0A:7C:64:1F:2A:C8:F9
Certificate issuer:       /CN=7e8e09724f472e76689c61dca60a7c641f2ac8f9
Certificate serial:       019E1E352B57F62FE58B3BAA7FF88263D66B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fo4Jck9HLnZonGHcpgp8ZB8qyPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft
Manifest number:          012E
Signing time:             Tue 12 May 2026 22:01:01 +0000
Manifest this update:     Tue 12 May 2026 22:01:01 +0000
Manifest next update:     Wed 13 May 2026 22:01:01 +0000
Files and hashes:         1: F-MQ4_q16IIp-IO6Aj9rbXh6FAg.roa (hash: O9ss77MomSSt907FsLWzdFo2wbDsc9Vaw/c7NY0bUPI=)
                          2: Lv7nZi0Ca4VD-5H2MSb5yq4Mxf8.roa (hash: kAeb16gDeMymOsy5vSRtUWw4R89UmFmfcQyy8hoRkQs=)
                          3: a6ILxs7AfRiz-iaAF-l64QD3g3c.asa (hash: 7o07rC7UvT5It+u+RtYxdmApc9D4ts/fYHhAKB3o4vs=)
                          4: fl-aO37XXQmTdf9bFQvR4sML3I8.asa (hash: 095zE2TxY8ZX1/zGISHc5yzKNCHD1HSK1z5BPh0SZNU=)
                          5: fo4Jck9HLnZonGHcpgp8ZB8qyPk.crl (hash: 0MkMd39X7g8HqSHuHWKxo1vqI+ELka9cmHeajia0uUk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fo4Jck9HLnZonGHcpgp8ZB8qyPk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:2b:57:f6:2f:e5:8b:3b:aa:7f:f8:82:63:d6:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e8e09724f472e76689c61dca60a7c641f2ac8f9
        Validity
            Not Before: May 12 22:01:01 2026 GMT
            Not After : May 13 22:01:01 2026 GMT
        Subject: CN=dbcea190187eb67d9f777243a63ffbf8832a5669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f2:fa:75:71:e7:00:24:8f:3e:13:b0:c2:15:
                    d6:fd:0f:dd:0f:96:2a:15:7d:9f:95:0f:9e:95:74:
                    81:47:41:48:53:53:11:f8:d7:44:79:b3:ed:61:5c:
                    f3:fb:70:17:69:ff:d6:6d:54:57:05:f2:4b:49:41:
                    8f:48:9a:d0:a7:91:3b:87:8f:2d:5b:a1:1c:12:72:
                    be:15:bf:a5:0b:89:0a:0a:53:9a:6c:2a:ea:ab:10:
                    c7:05:00:fa:0b:60:25:8d:c5:4f:7e:a7:16:20:f9:
                    6f:33:e0:a1:64:ee:21:17:74:bc:7f:55:14:96:f8:
                    c8:08:bb:37:00:e7:69:bb:22:b4:41:42:e1:f4:33:
                    52:b1:4f:e6:48:bc:cf:68:d1:82:30:c9:92:3a:95:
                    8f:88:04:55:20:ef:96:d9:34:bc:d2:38:19:1f:f8:
                    59:12:ce:fd:e3:b0:41:1c:d9:35:44:56:e9:6c:d7:
                    ad:55:de:16:24:92:96:fe:bb:f6:81:5e:43:ad:cc:
                    18:72:81:67:c1:f6:91:8d:cb:cd:dd:a1:3d:9a:5a:
                    86:a5:6f:75:ed:69:9a:86:e7:92:94:dc:d3:19:cd:
                    81:1d:96:83:c1:56:fa:de:4a:cb:5b:5c:96:60:02:
                    c7:96:44:80:17:b8:c3:2f:29:fc:28:01:24:f9:5c:
                    7c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:CE:A1:90:18:7E:B6:7D:9F:77:72:43:A6:3F:FB:F8:83:2A:56:69
            X509v3 Authority Key Identifier:
                keyid:7E:8E:09:72:4F:47:2E:76:68:9C:61:DC:A6:0A:7C:64:1F:2A:C8:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fo4Jck9HLnZonGHcpgp8ZB8qyPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:3b:78:52:9f:f3:14:ba:ff:5b:50:93:2f:5e:a0:77:9e:3f:
         82:5a:e6:d1:64:1c:46:b7:49:e9:43:26:ff:06:6a:c9:6d:60:
         95:7b:c5:f3:22:06:f7:86:f0:fc:d5:a6:13:92:c0:9c:4b:fe:
         84:c8:28:32:f9:89:bf:24:1d:74:df:79:c0:91:90:0a:f4:d1:
         1f:11:53:76:ba:14:dd:e7:25:09:ca:f3:75:2f:e4:68:d7:b3:
         5e:a7:1f:fd:ce:9b:8b:2a:d5:ce:82:38:4d:08:64:3c:7b:15:
         db:43:ce:5a:c6:d0:4e:ee:64:b2:19:d6:fe:0f:53:e2:e8:0b:
         27:b2:c8:33:cf:1f:5b:16:38:ca:23:47:93:4b:24:1c:94:f5:
         cc:f4:56:78:e5:72:05:0e:2c:47:40:fa:15:9c:0d:88:e6:40:
         8b:f8:a5:b8:50:45:73:50:df:3f:a0:7e:1b:a2:f6:49:d1:ed:
         26:c4:09:07:36:ee:8c:a3:2b:07:09:be:89:74:b1:1b:51:13:
         91:b3:2e:ea:06:c3:20:c4:78:36:90:0d:bd:5f:3e:7b:2a:70:
         85:1c:eb:4b:99:2a:68:61:39:3c:f2:fc:92:4e:d7:93:f0:02:
         e9:f8:4b:88:8a:c5:f1:3c:02:90:e5:55:98:ba:4b:1d:70:d1:
         23:14:f8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:08:03 2026 by rpki-client