Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.mft
File:                     4npTBThB5i83hzAr07PcF66DR6M.mft (raw, json)
Hash identifier:          P/uO0k3UjgTwdNtmoQ0CeZM12vbvYvrqyHCveYolmdo=
Subject key identifier:   E3:F1:1D:0A:1C:85:DA:20:9A:93:66:63:11:35:C4:E9:94:38:1A:D2
Authority key identifier: E2:7A:53:05:38:41:E6:2F:37:87:30:2B:D3:B3:DC:17:AE:83:47:A3
Certificate issuer:       /CN=e27a53053841e62f3787302bd3b3dc17ae8347a3
Certificate serial:       019E1E34DB309BC84BC6AE45D2331790ECA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4npTBThB5i83hzAr07PcF66DR6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.mft
Manifest number:          0C66
Signing time:             Tue 12 May 2026 22:00:40 +0000
Manifest this update:     Tue 12 May 2026 22:00:40 +0000
Manifest next update:     Wed 13 May 2026 22:00:40 +0000
Files and hashes:         1: 4npTBThB5i83hzAr07PcF66DR6M.crl (hash: O3Qy/tAH5CjrazUTGe7uh2yi2MNP4ClJ4WNulIw8SIE=)
                          2: cSt6K46EMy2J87fQrUxV7kuln7s.roa (hash: bwoUNClS8M/uJi71mCDhu+Re3L2VQt/bSmzn5caPq7c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4npTBThB5i83hzAr07PcF66DR6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:34:db:30:9b:c8:4b:c6:ae:45:d2:33:17:90:ec:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e27a53053841e62f3787302bd3b3dc17ae8347a3
        Validity
            Not Before: May 12 22:00:40 2026 GMT
            Not After : May 13 22:00:40 2026 GMT
        Subject: CN=e3f11d0a1c85da209a9366631135c4e994381ad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:22:96:70:52:ee:30:9c:ef:7a:8e:49:25:ff:
                    6d:e9:aa:30:1e:cf:a4:44:9c:cf:5c:30:f9:44:7b:
                    dd:1d:1a:14:fd:59:28:79:e5:87:8a:19:73:98:d1:
                    6e:77:5b:ec:59:7f:b2:ef:fb:bb:60:d9:7e:ea:7f:
                    8e:a7:b9:ab:fe:2b:5a:51:a0:87:e5:cb:ba:61:42:
                    77:df:77:b7:59:06:63:c5:a0:9f:4d:20:c9:fa:c4:
                    90:5e:a4:8d:ae:c4:b9:f1:91:f0:23:29:d2:1d:de:
                    27:79:69:f9:ec:ba:cc:05:64:5d:a5:80:64:87:c1:
                    bd:80:b9:ac:db:58:38:10:99:ab:95:d5:be:29:1b:
                    05:45:69:6b:79:8a:b5:66:8e:17:35:6a:65:99:34:
                    81:02:75:0a:1e:1c:2c:50:ea:20:1f:30:6a:96:93:
                    fa:e4:b7:a0:92:5f:bd:fc:48:58:60:5c:ed:a5:27:
                    6b:c2:10:3e:8a:a4:44:db:a3:db:74:a5:7b:3d:70:
                    ac:ec:6a:51:5d:ea:b3:23:59:13:e5:2b:d0:76:5f:
                    a2:1a:57:af:83:f1:f4:d2:53:58:f2:0e:d3:01:8a:
                    7b:9f:8d:d4:ee:bc:b9:ce:9c:69:2a:46:87:fc:be:
                    01:81:ca:dc:a1:b4:fd:ec:76:26:20:11:92:41:8c:
                    94:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F1:1D:0A:1C:85:DA:20:9A:93:66:63:11:35:C4:E9:94:38:1A:D2
            X509v3 Authority Key Identifier:
                keyid:E2:7A:53:05:38:41:E6:2F:37:87:30:2B:D3:B3:DC:17:AE:83:47:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4npTBThB5i83hzAr07PcF66DR6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:7b:5d:62:82:ab:a1:36:7e:e7:a7:4c:44:62:cf:23:e9:d5:
         69:b7:f6:76:f8:9a:9a:74:31:14:3c:23:2f:86:11:41:58:4e:
         8c:b0:25:b3:00:67:fe:02:e6:1c:ac:d3:70:34:06:76:1e:7b:
         14:fa:fd:6d:8b:79:ed:ad:33:dd:da:cb:50:44:2d:14:b0:28:
         d4:31:e3:ab:6e:f0:6c:04:7c:15:ef:b8:17:5a:6a:f8:4f:b9:
         3c:fb:32:8f:6b:94:22:64:5e:21:c2:f8:e7:a0:a4:3e:73:c6:
         9e:7e:be:fb:76:6c:9a:a3:61:9e:a9:00:71:77:65:5c:a2:c6:
         8c:91:22:d2:d3:99:fe:8d:14:73:89:8d:1f:3e:82:23:3d:09:
         10:c5:c3:a8:85:9b:e7:42:5b:6c:65:f8:c0:84:ae:df:8a:0e:
         29:04:0b:21:df:f5:1d:45:12:99:91:cb:a0:c2:ed:0f:d4:9d:
         f1:5c:ca:ce:5e:22:0f:8e:0e:df:84:da:45:d6:47:49:4f:16:
         c1:6f:2b:de:4b:ec:ed:3e:79:7a:bf:3f:ff:ba:2f:43:42:88:
         81:4a:ac:88:90:39:aa:4b:4c:a1:1c:16:a9:35:02:bd:bb:73:
         ec:f4:7f:47:55:7b:58:bd:eb:72:6c:d5:57:ab:d1:26:3c:fe:
         8a:0d:be:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:04:12 2026 by rpki-client