Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
File:                     15ToHXL1nGWg0YFEobJgeYNTa0o.mft (raw, json)
Hash identifier:          MXO0tSgD+gXYeFGh+o9AqS6yRht/gHhxIMNKZkxn5bo=
Subject key identifier:   89:50:1F:50:75:4C:60:1A:13:66:89:6D:8D:04:BF:13:A2:02:6C:C2
Authority key identifier: D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
Certificate issuer:       /CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Certificate serial:       019E1C1064A7DC247D040FF69803E6A3C03B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
Manifest number:          1012
Signing time:             Tue 12 May 2026 12:01:36 +0000
Manifest this update:     Tue 12 May 2026 12:01:36 +0000
Manifest next update:     Wed 13 May 2026 12:01:36 +0000
Files and hashes:         1: 15ToHXL1nGWg0YFEobJgeYNTa0o.crl (hash: g6d1bSVyYURnIctgMVOkbkb5MGTFtXbyu7ZdXdXkZe4=)
                          2: 5hc4aUb2VLwERMgdF6JkSl9fWf0.asa (hash: j9/1PXx3xR2VNQwDsOYKFoQWF5EMTQQRt2vo77feDmY=)
                          3: 8FO8ullQ6EkIvj-ZloMZ3JXaYUM.asa (hash: oSXxTrGB/6IwvXAF+yDgCL0u1UBudeLNMt9/Nk+NN+M=)
                          4: KlFtX5aNaedcuN1hTohiFaoERnE.roa (hash: 5ZprcXqSlc6+nuceeTdTSXarSoT4j6QXIXVJ5nk6dlU=)
                          5: n4GrMGyvU-_AhAxKWfDJUggmdeI.asa (hash: XeIspJtXvdcDhR1XKK2wyUaBMrgjI7FZP4Odx1xEJio=)
                          6: yMp7kYSn21EDSkrtR9j7oGjGxcQ.roa (hash: xycgqlP92ghAdWAotDZ0yF2GeDGMCSXJLo6HRtND7No=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 12:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:10:64:a7:dc:24:7d:04:0f:f6:98:03:e6:a3:c0:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d794e81d72f59c65a0d18144a1b2607983536b4a
        Validity
            Not Before: May 12 12:01:36 2026 GMT
            Not After : May 13 12:01:36 2026 GMT
        Subject: CN=89501f50754c601a1366896d8d04bf13a2026cc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:02:db:bf:64:29:c9:08:f2:34:76:02:d7:af:
                    39:1f:97:2a:21:b4:03:e1:73:ed:e0:e7:2d:90:33:
                    86:9d:b2:15:86:70:df:6d:13:ca:e7:fb:5d:d9:da:
                    2c:e4:15:b8:ff:f3:82:ec:34:f4:94:d5:27:3f:b5:
                    af:b9:b2:17:57:0d:f1:bb:16:5c:f8:e2:62:a5:03:
                    ad:d7:46:c3:bf:c2:67:12:c7:25:ae:0c:79:47:4c:
                    b0:8c:44:0f:97:47:f3:6b:60:53:f5:53:3a:09:b8:
                    12:1f:b2:2e:85:a6:d6:e7:bc:34:74:1b:52:12:00:
                    32:ea:cc:a2:95:19:3b:da:0c:f7:f7:71:1d:f6:ec:
                    0f:91:b7:2c:13:46:62:c2:8d:60:da:f9:0b:90:66:
                    61:08:a5:89:cb:30:d0:59:36:fb:b1:8e:d8:b2:88:
                    9c:44:ec:3d:80:9f:e5:ad:5d:93:dd:22:57:ea:67:
                    0f:ae:77:07:4a:ae:dc:44:ae:06:7e:f2:e7:5a:f0:
                    19:8f:85:2a:1c:89:8b:9c:12:dc:94:8d:e3:46:af:
                    49:6c:64:6f:b6:96:3d:6a:16:56:d2:9e:85:a3:c7:
                    2a:85:6a:35:22:5e:02:06:32:79:75:3a:4d:d8:95:
                    0e:cd:18:96:96:61:40:80:58:10:f1:21:ad:0e:0c:
                    4b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:50:1F:50:75:4C:60:1A:13:66:89:6D:8D:04:BF:13:A2:02:6C:C2
            X509v3 Authority Key Identifier:
                keyid:D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:c8:a9:dd:c0:a2:07:9c:cc:ff:f0:09:6e:b3:9e:af:5f:6d:
         1e:f0:4e:d1:dd:9e:36:83:5b:3e:7b:34:3d:5a:60:a0:f9:cf:
         cc:b2:04:e8:23:0e:28:26:a1:c5:30:4f:ef:e1:9c:6f:55:d9:
         44:20:e3:22:ff:f2:4c:84:4d:43:e8:12:7a:d5:b7:d3:f4:6e:
         c3:36:c3:28:96:0e:b0:d7:0c:1e:d3:e3:6a:ae:b3:e4:9b:1a:
         aa:9d:7d:a1:e5:66:41:35:1e:c1:93:4e:6c:83:b8:29:cc:c4:
         7b:b4:1a:c8:9d:33:73:cc:10:ad:29:82:ac:85:34:65:fe:a1:
         50:b9:24:3a:b1:d0:62:87:37:02:df:de:58:0e:a0:42:34:f1:
         fc:23:4d:80:76:2b:1d:f2:87:3d:30:48:6d:97:c1:89:78:ac:
         36:ec:d1:27:f5:bd:78:d9:96:8d:34:7e:e1:20:ac:95:4a:fd:
         16:97:a1:c1:63:db:03:c5:79:78:d5:76:9e:bc:a3:50:96:b1:
         cf:b9:6b:a3:ba:0e:46:68:d5:ab:a8:d5:39:ee:22:93:03:dc:
         89:5f:d6:41:a3:06:68:c4:b0:33:8a:cd:7a:0b:fc:ef:1f:56:
         b8:6d:2e:bb:73:57:0e:85:11:cc:da:e7:89:8a:30:ff:94:27:
         ab:46:10:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:23:54 2026 by rpki-client