Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/f0b6ad-8597-48b2-81a5-1d55cbd3f22c/1/1aDMnmpdW5fb6pZmTdlKw-QifPQ.mft
File:                     1aDMnmpdW5fb6pZmTdlKw-QifPQ.mft (raw, json)
Hash identifier:          AxTTOfR924deSsP4UmP6MTxOPyiag5zP1YIfV8anbbc=
Subject key identifier:   9C:B1:F0:8F:BE:F4:7E:73:0E:21:85:EC:48:0D:73:FD:EF:F1:1F:73
Authority key identifier: D5:A0:CC:9E:6A:5D:5B:97:DB:EA:96:66:4D:D9:4A:C3:E4:22:7C:F4
Certificate issuer:       /CN=d5a0cc9e6a5d5b97dbea96664dd94ac3e4227cf4
Certificate serial:       019E1E6C7B44128C8F6CED07DDBCB6CB1D3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1aDMnmpdW5fb6pZmTdlKw-QifPQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/f0b6ad-8597-48b2-81a5-1d55cbd3f22c/1/1aDMnmpdW5fb6pZmTdlKw-QifPQ.mft
Manifest number:          D1
Signing time:             Tue 12 May 2026 23:01:26 +0000
Manifest this update:     Tue 12 May 2026 23:01:26 +0000
Manifest next update:     Wed 13 May 2026 23:01:26 +0000
Files and hashes:         1: 1aDMnmpdW5fb6pZmTdlKw-QifPQ.crl (hash: jOVGy2BC8s/YX0YvChCpH8TQeTot3/xGYa12ns+Aqns=)
                          2: o0b3FLGT6_KTAMziRPFBDuoxIFs.roa (hash: HuGKkmAJlpIF3je5dBAlXM+W0Ozh9HwD67fbKdy/D8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/f0b6ad-8597-48b2-81a5-1d55cbd3f22c/1/1aDMnmpdW5fb6pZmTdlKw-QifPQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/f0b6ad-8597-48b2-81a5-1d55cbd3f22c/1/1aDMnmpdW5fb6pZmTdlKw-QifPQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1aDMnmpdW5fb6pZmTdlKw-QifPQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:7b:44:12:8c:8f:6c:ed:07:dd:bc:b6:cb:1d:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5a0cc9e6a5d5b97dbea96664dd94ac3e4227cf4
        Validity
            Not Before: May 12 23:01:26 2026 GMT
            Not After : May 13 23:01:26 2026 GMT
        Subject: CN=9cb1f08fbef47e730e2185ec480d73fdeff11f73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:74:23:8d:3a:4c:34:9f:90:64:da:7e:36:7d:
                    4d:c2:2d:46:3a:08:ec:9f:54:15:a6:54:3d:5d:2d:
                    89:d5:e1:ed:b3:aa:65:59:b6:73:4f:ea:56:d1:f7:
                    eb:f6:8c:18:d0:2a:37:02:bc:58:11:3a:f9:4e:4e:
                    eb:f3:6b:df:c1:c3:86:3b:f1:d0:fa:55:a3:be:17:
                    bd:a5:8b:79:16:32:45:ad:d6:1c:70:52:fc:57:b3:
                    fd:5b:c8:8d:dd:8a:41:e5:15:19:ce:58:a9:40:b8:
                    59:38:da:ee:82:fd:03:89:83:97:45:bb:a8:6c:63:
                    fb:33:91:f5:64:12:32:f9:61:ff:97:77:48:7f:1e:
                    fb:55:8b:85:a7:e0:f8:d9:7b:61:e0:a9:c6:e7:f9:
                    6b:8f:bc:c0:10:3e:86:a2:86:bc:53:97:11:9f:3d:
                    68:82:86:71:5e:82:d9:39:d0:77:f0:f6:14:e0:1e:
                    33:26:8d:cc:dc:6c:a0:6f:6b:00:f9:ef:8b:6a:91:
                    88:c1:a2:7e:5c:30:6f:70:96:5a:9c:05:85:e2:71:
                    81:94:d0:a7:82:6f:01:12:a1:b4:bb:b9:1d:49:bc:
                    ad:cd:fa:7d:e7:bb:94:64:81:ee:b9:02:01:37:cd:
                    28:bd:52:7d:0c:64:eb:2f:d7:6c:66:d3:1f:59:c2:
                    0d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B1:F0:8F:BE:F4:7E:73:0E:21:85:EC:48:0D:73:FD:EF:F1:1F:73
            X509v3 Authority Key Identifier:
                keyid:D5:A0:CC:9E:6A:5D:5B:97:DB:EA:96:66:4D:D9:4A:C3:E4:22:7C:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aDMnmpdW5fb6pZmTdlKw-QifPQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f0b6ad-8597-48b2-81a5-1d55cbd3f22c/1/1aDMnmpdW5fb6pZmTdlKw-QifPQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f0b6ad-8597-48b2-81a5-1d55cbd3f22c/1/1aDMnmpdW5fb6pZmTdlKw-QifPQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:0d:09:6d:da:48:b1:10:4e:35:40:58:1e:55:cd:ba:f4:f4:
         3a:2f:85:db:29:ec:70:66:ad:ff:a0:e0:c8:3c:7b:bf:4a:86:
         f0:df:a3:b0:b8:bc:6d:eb:94:bc:34:0d:78:d6:f3:a4:b1:f1:
         00:c3:88:c6:bb:72:9d:62:2d:8f:91:7e:65:b0:fd:d5:d6:15:
         d2:0f:67:69:6e:a1:01:c6:3c:68:8f:d5:6c:35:48:dc:08:fa:
         f7:d1:b8:67:0a:6a:1a:cd:8c:9c:c3:c3:be:c8:ac:77:c5:ab:
         c1:1f:5d:3f:c8:b9:9f:0e:85:be:75:21:1c:a0:3b:56:8f:13:
         d1:97:27:73:68:89:9a:bc:95:73:8d:a1:46:97:99:8e:7b:cd:
         ef:4a:de:16:45:59:7b:32:af:70:b9:0e:b9:f2:2a:64:14:38:
         56:a8:8e:f6:3c:85:58:b6:20:59:f7:fa:10:33:b6:ed:71:a3:
         10:ae:0b:e1:c5:5b:0b:0d:76:af:9a:9f:cf:9a:4c:80:bf:b3:
         c2:13:77:be:68:d4:5f:74:1b:2b:81:5c:19:16:db:4c:38:f5:
         17:33:f5:b3:e5:6d:c1:e6:20:3c:f7:4e:c7:00:b8:90:de:75:
         11:47:56:0f:01:6c:8f:3c:6b:0c:74:71:6f:4f:c4:5a:58:e9:
         a9:27:10:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:08:03 2026 by rpki-client