Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
File:                     _X0csRSU6ziY8Q09Y1vnXxay3FE.mft (raw, json)
Hash identifier:          KWrtMzlU+CJec61m+2ybZL+FIaKnL8sXmKg5RJuVCKE=
Subject key identifier:   1C:56:39:0C:8D:45:EA:29:3E:6B:DF:7A:76:B0:1B:9E:E4:2C:8B:71
Authority key identifier: FD:7D:1C:B1:14:94:EB:38:98:F1:0D:3D:63:5B:E7:5F:16:B2:DC:51
Certificate issuer:       /CN=fd7d1cb11494eb3898f10d3d635be75f16b2dc51
Certificate serial:       019E1FECA568DD05AC220DA26ACEA18F660F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
Manifest number:          0F4B
Signing time:             Wed 13 May 2026 06:01:02 +0000
Manifest this update:     Wed 13 May 2026 06:01:02 +0000
Manifest next update:     Thu 14 May 2026 06:01:02 +0000
Files and hashes:         1: E82B-w4jJKhyGgYx3Ej9sCBHvb4.roa (hash: A+TYWIOmRpCeA175k18MhvZXgytX5Jk9nQ0FQ6VBaqA=)
                          2: Q4zQF0crGItA_1w0I9xQ7hGAgWQ.roa (hash: JfuU3qW2LSn3VZ4RrrVe6pLBVqp+kUuKYjX2iO0ocCI=)
                          3: _X0csRSU6ziY8Q09Y1vnXxay3FE.crl (hash: vcwuOMeZ57Ko11xQz5PbKA6oSadpKYoLVJmd6oglZhk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ec:a5:68:dd:05:ac:22:0d:a2:6a:ce:a1:8f:66:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd7d1cb11494eb3898f10d3d635be75f16b2dc51
        Validity
            Not Before: May 13 06:01:02 2026 GMT
            Not After : May 14 06:01:02 2026 GMT
        Subject: CN=1c56390c8d45ea293e6bdf7a76b01b9ee42c8b71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fb:1e:b2:60:7f:c3:7d:74:ad:e7:b6:d3:30:
                    39:1f:ff:73:99:ef:97:ff:23:ea:bd:e8:72:cd:fb:
                    e1:c4:eb:0a:09:5a:e0:39:d7:9c:03:67:4a:25:3d:
                    01:8b:6c:f9:bf:1a:7c:4e:87:48:ff:15:79:05:6e:
                    34:86:97:40:27:ab:f3:92:b0:89:68:b7:78:b8:fe:
                    6d:f2:3f:ae:39:e4:4a:e9:20:cd:2c:93:31:f6:06:
                    63:4c:63:61:b2:1e:6b:ac:ec:90:e0:b9:8e:ca:e3:
                    83:a3:e1:57:70:54:3c:0d:d7:a1:b3:d1:e5:7b:52:
                    fc:20:9f:6c:c9:c0:87:2a:9f:b7:45:10:ca:32:d1:
                    4f:97:ab:22:e8:56:cd:4e:f1:aa:61:f2:34:e8:1e:
                    4d:dd:cd:f0:8e:69:87:1c:a8:a5:cb:3e:74:ba:27:
                    46:68:e0:d2:77:97:bb:68:a9:d7:36:48:c7:aa:7a:
                    2e:63:e4:4e:12:71:e0:2d:65:d8:be:d9:9d:2c:96:
                    b6:62:f6:05:aa:30:79:a4:de:28:a6:12:0c:40:74:
                    ef:29:80:27:40:7f:6e:5f:36:64:47:59:02:e5:84:
                    57:e5:87:e5:c6:b1:b7:d0:6d:5e:09:c4:60:6e:ca:
                    6d:d4:d2:7b:fc:8a:48:1c:62:f2:9a:ba:ce:af:5c:
                    92:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:56:39:0C:8D:45:EA:29:3E:6B:DF:7A:76:B0:1B:9E:E4:2C:8B:71
            X509v3 Authority Key Identifier:
                keyid:FD:7D:1C:B1:14:94:EB:38:98:F1:0D:3D:63:5B:E7:5F:16:B2:DC:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:11:a2:03:7f:9a:55:44:c2:3f:a2:2c:6b:d8:89:69:0c:8f:
         04:d2:cc:c4:04:de:09:c7:a4:ac:af:39:cd:03:12:cd:10:86:
         35:03:f0:05:32:d4:bd:64:38:b8:e8:bb:98:f6:33:76:8c:b7:
         ed:3d:b6:dc:71:b8:df:70:2a:66:c0:fd:8b:23:f0:1b:96:a1:
         94:e5:e9:fe:8b:ae:77:3c:37:95:45:dc:52:a1:8e:51:de:a0:
         dd:23:f5:76:27:bb:32:ca:2f:ef:c0:3c:1d:e5:98:b2:d0:8f:
         67:4d:10:e4:71:99:44:f8:f7:3b:82:2f:a0:07:9e:14:e9:d2:
         1c:09:5b:94:6a:56:7a:16:3e:d1:39:c3:92:27:6c:84:d3:1e:
         55:d7:4d:32:a9:8e:36:e1:aa:74:e8:fc:9f:41:ab:14:3d:cc:
         b2:28:28:2b:4e:46:a6:5f:ea:e7:6d:9d:03:d1:ec:46:b2:cb:
         8b:16:f4:28:fd:23:12:2a:39:49:0c:06:53:83:75:5c:36:5d:
         d2:21:98:b0:56:0a:9c:04:e9:82:f9:b1:ca:a0:55:91:52:75:
         de:7d:7e:33:37:42:07:7a:8e:68:a7:6e:d3:d0:18:34:ea:d6:
         1d:9f:f2:2e:5b:f1:c2:86:62:6a:a0:17:7e:f2:07:ba:c6:14:
         47:6b:27:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:31:27 2026 by rpki-client