Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/68e53f-70a8-43ae-830e-f9d6f4a33309/1/1tSrT7TFdkBWSIHcd7OmYfxMxDU.mft
File:                     1tSrT7TFdkBWSIHcd7OmYfxMxDU.mft (raw, json)
Hash identifier:          +0IoIowuZLBpnH3fDZa6wsAOXGI/NH7zSNE8LLv+Z+E=
Subject key identifier:   90:10:52:A2:4A:44:A3:1E:8A:B5:01:F9:B0:07:F7:44:2D:65:94:D0
Authority key identifier: D6:D4:AB:4F:B4:C5:76:40:56:48:81:DC:77:B3:A6:61:FC:4C:C4:35
Certificate issuer:       /CN=d6d4ab4fb4c57640564881dc77b3a661fc4cc435
Certificate serial:       019E20236ABFF988AE1D7485673D53B21218
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1tSrT7TFdkBWSIHcd7OmYfxMxDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/68e53f-70a8-43ae-830e-f9d6f4a33309/1/1tSrT7TFdkBWSIHcd7OmYfxMxDU.mft
Manifest number:          026E
Signing time:             Wed 13 May 2026 07:00:52 +0000
Manifest this update:     Wed 13 May 2026 07:00:52 +0000
Manifest next update:     Thu 14 May 2026 07:00:52 +0000
Files and hashes:         1: 1tSrT7TFdkBWSIHcd7OmYfxMxDU.crl (hash: WVFM65j4bOGXUK1/MW2Un8lvg1w4HQUg/SSyZoXk4HA=)
                          2: hrDir8hInSlFPN-Q1uO1aajy_9g.roa (hash: LO9s/4upanODPdu0Y/QyxRsG/lztm/48QBv0SUqV5f8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/68e53f-70a8-43ae-830e-f9d6f4a33309/1/1tSrT7TFdkBWSIHcd7OmYfxMxDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/68e53f-70a8-43ae-830e-f9d6f4a33309/1/1tSrT7TFdkBWSIHcd7OmYfxMxDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1tSrT7TFdkBWSIHcd7OmYfxMxDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:23:6a:bf:f9:88:ae:1d:74:85:67:3d:53:b2:12:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6d4ab4fb4c57640564881dc77b3a661fc4cc435
        Validity
            Not Before: May 13 07:00:52 2026 GMT
            Not After : May 14 07:00:52 2026 GMT
        Subject: CN=901052a24a44a31e8ab501f9b007f7442d6594d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7b:45:cd:48:09:a9:48:b7:b8:87:22:f6:9c:
                    6a:a5:d8:da:b2:b6:0a:e3:2d:be:58:40:2c:86:67:
                    ab:5c:33:21:ee:9c:f7:63:a7:02:1d:08:b8:83:73:
                    3e:60:3b:cf:fb:71:5f:84:d9:1c:e8:f5:54:a8:23:
                    c0:0c:91:85:51:c6:5f:e6:35:8a:df:99:4f:1b:9c:
                    92:22:ab:c9:44:9b:aa:1d:47:20:85:70:b3:fa:26:
                    cf:da:78:d1:81:4a:bd:37:33:e5:b0:a5:57:33:af:
                    f2:d8:bb:f6:be:96:3f:09:e8:87:5f:24:0e:3e:70:
                    8a:b9:fb:7d:fd:e6:60:03:11:23:5a:ae:25:bf:ef:
                    62:a0:3b:93:50:89:1f:da:16:1a:d2:d9:56:64:e6:
                    b1:58:46:92:c0:09:16:8d:3b:31:c1:e9:6a:01:7b:
                    5b:e5:8e:65:50:44:c6:f6:8f:dc:4d:04:8d:75:dc:
                    6f:6f:50:33:2d:f6:30:6a:5f:e0:3a:83:69:5d:74:
                    fd:5e:7a:e6:cc:7a:fb:db:51:45:8a:b3:64:01:b7:
                    7f:13:9c:26:75:8b:72:c4:38:c4:f6:30:02:e1:d8:
                    40:53:55:2e:a5:57:51:68:bc:77:07:89:f1:80:86:
                    b6:e1:6e:0a:a0:f7:4a:8b:f5:27:5a:dc:ac:08:81:
                    b8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:10:52:A2:4A:44:A3:1E:8A:B5:01:F9:B0:07:F7:44:2D:65:94:D0
            X509v3 Authority Key Identifier:
                keyid:D6:D4:AB:4F:B4:C5:76:40:56:48:81:DC:77:B3:A6:61:FC:4C:C4:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tSrT7TFdkBWSIHcd7OmYfxMxDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/68e53f-70a8-43ae-830e-f9d6f4a33309/1/1tSrT7TFdkBWSIHcd7OmYfxMxDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/68e53f-70a8-43ae-830e-f9d6f4a33309/1/1tSrT7TFdkBWSIHcd7OmYfxMxDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:f5:42:64:83:dc:46:24:92:c0:f8:0a:48:7e:64:b1:b0:99:
         54:0d:27:01:20:e5:5c:1c:be:46:f6:8b:b8:d1:30:5a:d1:59:
         60:90:5f:87:a6:d4:7b:40:8e:ed:9e:f6:bb:cb:21:3f:16:1e:
         b6:03:3d:5e:cc:77:d9:ea:1a:3a:3e:97:bf:6d:ec:21:01:d7:
         4f:18:a4:fc:a6:d6:39:05:75:57:25:7e:d2:3b:3b:1c:a9:76:
         41:cb:b3:57:bb:eb:f2:bc:9c:32:00:55:ac:96:7c:18:68:4d:
         45:09:89:a1:fe:f5:12:56:28:71:e8:87:8d:90:cc:81:8f:94:
         73:f7:30:89:64:e8:14:db:8c:58:af:60:0a:34:59:79:ad:34:
         cb:3f:58:2a:9c:0f:a8:db:69:5f:bd:e0:74:1d:99:ac:58:a8:
         1f:13:bf:4e:80:71:25:7f:6c:48:b7:e8:69:a2:db:f8:d6:3e:
         3a:c7:d5:c6:b1:a9:b6:5a:b9:24:60:e4:a5:da:e1:d5:51:3d:
         61:6b:96:c0:c9:47:29:ea:38:84:fb:d1:39:f7:b4:c8:8e:8b:
         a7:05:97:85:2e:91:e5:02:a8:08:47:82:02:bb:d1:a8:05:f2:
         ad:20:74:b0:69:18:7c:db:01:47:4e:e7:02:b9:8e:31:f2:22:
         5d:e1:a7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:38:04 2026 by rpki-client