Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.mft
File:                     0f00NtehmnND-oANh6Aa8YPaMYs.mft (raw, json)
Hash identifier:          5ZadWWsQUM7vO3oNToXL1R2hgmHPg+/QUO1qQcvnVuQ=
Subject key identifier:   52:40:24:0A:40:3E:95:93:22:7C:82:FF:1F:04:A5:69:C0:56:CB:F1
Authority key identifier: D1:FD:34:36:D7:A1:9A:73:43:FA:80:0D:87:A0:1A:F1:83:DA:31:8B
Certificate issuer:       /CN=d1fd3436d7a19a7343fa800d87a01af183da318b
Certificate serial:       019E1ED9D2DC24178E54EE820F599BD5811E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0f00NtehmnND-oANh6Aa8YPaMYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.mft
Manifest number:          0F13
Signing time:             Wed 13 May 2026 01:00:52 +0000
Manifest this update:     Wed 13 May 2026 01:00:52 +0000
Manifest next update:     Thu 14 May 2026 01:00:52 +0000
Files and hashes:         1: 0f00NtehmnND-oANh6Aa8YPaMYs.crl (hash: G3HwRAij9zMv31d08pEauhbu9QXnGYQpPP/nFYbeZwM=)
                          2: IASwi9of8Nm06s2NEyZeclBiyks.roa (hash: wJHjHPTUMp7nASIGnsvw0Yq6r11NWYMurdnBadU/uWs=)
                          3: cJm02hXD31NI7pVQ-Zg6zC-hgq4.roa (hash: HsDfNZqhgWgKKit0y0ockf+XjyRYYtlEbZ6HrEVkmGs=)
                          4: d2D28pbUUy75o_ayovdj8OnlSSk.roa (hash: VCEc/3eMD6beAJR+mVre94XxkAsuGJ0/hx5+lBhoAGg=)
                          5: jwsbk3UxQHXyjEExXwNUXcrvx38.roa (hash: Glu31tXKVdAhpJSQOXApQod2ByFLYzTP23c7sIux+Ks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0f00NtehmnND-oANh6Aa8YPaMYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:d9:d2:dc:24:17:8e:54:ee:82:0f:59:9b:d5:81:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1fd3436d7a19a7343fa800d87a01af183da318b
        Validity
            Not Before: May 13 01:00:52 2026 GMT
            Not After : May 14 01:00:52 2026 GMT
        Subject: CN=5240240a403e9593227c82ff1f04a569c056cbf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e9:65:3f:d5:ab:70:80:9b:fb:30:1f:63:56:
                    ac:75:23:81:86:a9:00:fa:9d:a7:91:a5:dd:ec:9f:
                    39:aa:02:5e:34:e4:a5:88:be:b0:68:29:92:06:0f:
                    79:45:71:b5:40:c7:af:fd:30:4b:8b:df:26:83:4b:
                    5a:c4:ec:b0:a3:3d:4d:bf:42:28:e4:ca:75:1e:37:
                    e0:58:e3:d0:82:a5:7f:14:ce:1b:89:e1:ac:e8:fc:
                    5f:84:97:be:ed:ea:b1:d8:90:c4:9c:a8:fd:b5:50:
                    6f:a3:e1:6c:65:dc:74:47:f8:48:ed:60:de:3d:ab:
                    b7:3b:a4:7e:de:85:30:03:fd:fb:d2:09:0b:74:7e:
                    b4:93:0a:be:39:35:78:83:42:9e:17:35:48:70:fb:
                    c3:d0:39:d5:75:15:ad:c7:81:ef:16:7c:14:19:3c:
                    a9:84:bd:72:8e:91:0e:56:d9:9c:6f:0a:f5:83:3e:
                    4b:d9:d1:41:c3:c6:62:4e:79:bf:eb:48:c0:c2:6b:
                    15:6b:0d:20:f0:c2:e2:d4:8b:2d:e5:0d:19:75:32:
                    57:b9:1d:53:c0:fd:b9:35:c1:28:46:b6:bb:49:e8:
                    a2:56:f6:35:dc:0f:8b:8d:4d:f5:31:7d:db:02:0e:
                    93:09:e7:67:25:fa:3c:96:5a:8c:cf:0e:b7:67:8d:
                    f8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:40:24:0A:40:3E:95:93:22:7C:82:FF:1F:04:A5:69:C0:56:CB:F1
            X509v3 Authority Key Identifier:
                keyid:D1:FD:34:36:D7:A1:9A:73:43:FA:80:0D:87:A0:1A:F1:83:DA:31:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f00NtehmnND-oANh6Aa8YPaMYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:c8:de:d7:44:22:8a:64:c0:47:12:b3:15:29:41:9a:3b:7c:
         e8:27:78:e9:b5:73:e9:cc:50:05:ac:9b:5e:d3:fc:b8:80:ec:
         fd:a7:9a:fd:54:29:7e:dd:0a:59:8b:d7:38:68:57:80:c9:58:
         21:10:6e:25:a7:9d:9b:a7:b0:2b:d8:63:e4:89:b5:63:fa:58:
         2d:13:2d:60:92:ea:d1:b3:2b:d0:18:b7:13:57:fe:47:12:b8:
         4f:cd:31:b8:75:a4:7b:f4:4e:41:14:9c:39:c9:14:4c:10:db:
         16:76:9d:52:e7:59:55:68:db:3e:b5:9e:36:81:02:b5:bd:8a:
         2d:48:67:1e:9d:16:1e:38:68:45:37:7c:ca:90:3a:49:ba:17:
         6d:94:7f:02:37:29:3c:07:48:96:a0:4c:f5:cb:dd:1e:34:65:
         04:13:89:8a:f0:fc:b2:9c:e3:07:71:dc:7d:a7:14:f6:ca:52:
         f9:7a:26:58:8f:28:c9:e4:04:11:1c:8d:f7:a3:86:84:36:16:
         70:63:50:96:2d:83:80:09:ca:02:25:2a:7d:8a:11:3c:d8:36:
         99:7d:fd:03:ef:a0:c2:36:44:d5:2d:b2:6c:cb:53:3f:19:61:
         0f:f7:35:e0:c0:77:d0:6e:f0:19:9c:fe:8c:00:5a:54:cb:41:
         c6:c7:2e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:22:33 2026 by rpki-client