Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft
File:                     fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft (raw, json)
Hash identifier:          OriffxEM6n6wNyjwvIHgAMgz8PNeay4AaDAcjzw4FP4=
Subject key identifier:   8D:8F:1F:BD:82:02:42:9A:43:17:48:7E:E1:3D:DF:46:55:95:4F:1C
Authority key identifier: 7D:37:8D:5E:9F:6E:22:83:2F:94:36:DE:42:A0:00:03:A3:5E:5A:DC
Certificate issuer:       /CN=7d378d5e9f6e22832f9436de42a00003a35e5adc
Certificate serial:       019E1DC7B4D2729E9FCD0944CED0B14A7FB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft
Manifest number:          09DF
Signing time:             Tue 12 May 2026 20:01:27 +0000
Manifest this update:     Tue 12 May 2026 20:01:27 +0000
Manifest next update:     Wed 13 May 2026 20:01:27 +0000
Files and hashes:         1: 70GrOh32dQLUqU95-AO2TD0BpWg.roa (hash: JinzzeihpLTiA6O6jFrNum74gOx6URavCLmJpxWV2cM=)
                          2: fTeNXp9uIoMvlDbeQqAAA6NeWtw.crl (hash: vN/dX4+Up8RyM2gaon91TCZglRaz5at/pA4McD5Ko3M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:b4:d2:72:9e:9f:cd:09:44:ce:d0:b1:4a:7f:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d378d5e9f6e22832f9436de42a00003a35e5adc
        Validity
            Not Before: May 12 20:01:27 2026 GMT
            Not After : May 13 20:01:27 2026 GMT
        Subject: CN=8d8f1fbd8202429a4317487ee13ddf4655954f1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:88:81:0f:91:cb:8b:52:e7:ef:1c:1b:56:b8:
                    75:00:4a:9e:b9:89:50:ac:cf:c3:be:e5:64:23:28:
                    b0:9d:38:22:6b:11:36:85:64:47:ce:2a:50:63:b2:
                    fe:eb:ea:5d:50:9a:17:42:e5:df:5c:3b:bf:92:e5:
                    2e:16:a9:ad:cb:ee:c6:62:15:5f:84:53:1a:66:0f:
                    af:23:41:97:ce:d4:12:c1:8b:62:be:a6:85:ca:09:
                    e7:1e:5c:d8:e7:91:8d:1b:01:85:03:4e:6b:65:34:
                    79:b6:35:c0:09:b3:c3:7a:8e:d3:92:b1:b2:81:41:
                    35:ad:82:6d:c5:75:16:33:03:7d:0d:de:c1:a4:28:
                    ea:1b:2d:95:3e:8f:d9:89:74:8c:62:14:61:5b:25:
                    ce:02:4a:fc:67:e1:e9:a4:de:f3:0d:f5:e3:9e:70:
                    8f:49:44:b9:6c:b9:ac:b6:ec:c1:f7:24:e4:32:db:
                    b4:75:ff:32:36:b4:92:7a:97:50:f9:5d:d4:5b:45:
                    5e:9d:53:b7:b9:af:31:3d:43:8e:58:3b:e1:c5:f4:
                    89:3b:e6:cc:99:3f:f1:ba:0d:62:11:68:fb:c7:64:
                    70:50:04:b5:9e:54:05:a6:50:de:33:74:61:29:84:
                    29:1b:05:32:b9:ca:13:ad:ae:8b:f3:11:39:62:2c:
                    28:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:8F:1F:BD:82:02:42:9A:43:17:48:7E:E1:3D:DF:46:55:95:4F:1C
            X509v3 Authority Key Identifier:
                keyid:7D:37:8D:5E:9F:6E:22:83:2F:94:36:DE:42:A0:00:03:A3:5E:5A:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:6c:ae:49:3d:a3:ce:e5:f6:a9:8d:fa:4d:78:e2:7d:ac:e4:
         0c:3d:65:67:ba:22:45:ba:e0:d1:ba:68:8a:49:fb:d5:a9:30:
         f5:71:4a:3f:d2:14:03:ed:6c:25:9a:43:62:3f:10:33:6f:81:
         72:34:d3:d2:93:64:b1:a9:a2:00:f1:51:e0:e6:a9:3f:e2:d4:
         a0:56:d3:39:c9:29:2a:db:e6:91:23:6d:54:0b:41:0a:a2:f0:
         df:a5:1e:09:5a:99:61:1b:6f:e3:07:d1:98:f4:7d:3d:7e:a6:
         0c:a6:d5:16:39:00:3c:2f:b0:fd:45:c5:bd:70:b1:1a:48:aa:
         f1:3e:59:36:a4:85:f6:bf:50:00:e3:65:dc:ca:9c:b1:e7:5c:
         f0:55:08:ff:00:a2:a5:45:90:b7:7f:77:4b:02:d5:d9:72:ef:
         45:11:d4:a0:76:f6:42:91:d6:ca:db:19:7d:73:a8:51:95:d0:
         95:35:be:6c:d9:c6:38:05:1d:39:94:e7:5a:15:6f:36:1f:a5:
         23:e3:82:3f:75:79:31:32:80:b5:bc:cf:52:66:9b:69:13:32:
         a4:40:af:d4:08:1b:a7:a0:8e:04:56:46:73:6f:43:1b:87:76:
         51:02:c4:5f:8f:85:6f:dd:d3:0f:af:c3:9a:98:84:ee:01:15:
         62:db:d1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:45:09 2026 by rpki-client