Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
File:                     t060sgvFlKwro6pa7zDnTiXhVuE.mft (raw, json)
Hash identifier:          F5PrewvXUdhP6hcTt1QJ6vJaCHXFuc6R8xfFc8Tyq1c=
Subject key identifier:   63:60:E3:D4:D4:BC:31:E5:24:0E:42:7F:E8:EC:7F:69:E2:26:50:A5
Authority key identifier: B7:4E:B4:B2:0B:C5:94:AC:2B:A3:AA:5A:EF:30:E7:4E:25:E1:56:E1
Certificate issuer:       /CN=b74eb4b20bc594ac2ba3aa5aef30e74e25e156e1
Certificate serial:       019E1FB5E343B99FAF7D43B3D86905204A0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
Manifest number:          0DA7
Signing time:             Wed 13 May 2026 05:01:14 +0000
Manifest this update:     Wed 13 May 2026 05:01:14 +0000
Manifest next update:     Thu 14 May 2026 05:01:14 +0000
Files and hashes:         1: UCdBL2cD1nASc373rfpJddfKBRk.roa (hash: lFmC2crxbHri6/LBkNCkhFFRFW/esHZK/bXeT9XM8CQ=)
                          2: t060sgvFlKwro6pa7zDnTiXhVuE.crl (hash: LNHkMa6i1geKaUS0B+rA+CeNlO8aAM0Pxj7w8so3Jbo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 05:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:e3:43:b9:9f:af:7d:43:b3:d8:69:05:20:4a:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b74eb4b20bc594ac2ba3aa5aef30e74e25e156e1
        Validity
            Not Before: May 13 05:01:14 2026 GMT
            Not After : May 14 05:01:14 2026 GMT
        Subject: CN=6360e3d4d4bc31e5240e427fe8ec7f69e22650a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4f:54:42:12:cf:c9:40:86:56:2a:40:16:e8:
                    b6:46:a3:49:d3:8c:13:69:cb:5a:a1:17:ba:16:3f:
                    c8:79:28:98:e2:9a:9e:44:15:00:0c:74:45:1b:1f:
                    db:7d:29:ca:96:82:fe:09:78:dc:63:c6:c3:47:95:
                    b9:70:5e:8d:d8:4e:1a:1f:3e:c6:e0:4a:0f:ea:14:
                    da:85:de:cc:c0:04:d0:03:27:24:8b:d8:25:da:75:
                    33:1a:95:da:d8:69:70:27:75:ee:f6:73:b5:40:d7:
                    e1:b1:3d:b2:01:54:c9:25:11:81:4b:18:5f:7b:f0:
                    97:fc:7d:8d:36:1e:e4:bf:73:3c:62:38:ef:e0:82:
                    fd:88:3f:4f:10:54:a9:65:c7:79:f3:b4:e0:48:52:
                    b7:6a:1e:b3:b5:ec:2f:89:7e:69:eb:95:86:42:8f:
                    fb:2f:1d:26:be:6d:84:ef:c5:23:01:87:be:7c:6f:
                    8f:bc:57:1c:17:b0:5d:f4:ba:e7:30:a4:7c:49:72:
                    f2:c8:c0:e7:f0:f3:a3:51:d5:79:c8:31:d1:d9:02:
                    5d:5b:e7:5d:bc:a3:10:51:ce:9c:66:4d:c9:f4:c4:
                    21:fa:45:66:36:4a:2a:42:88:ae:99:60:5b:35:aa:
                    52:0a:a6:60:e0:04:bb:72:04:3a:cc:75:31:c3:a1:
                    74:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:60:E3:D4:D4:BC:31:E5:24:0E:42:7F:E8:EC:7F:69:E2:26:50:A5
            X509v3 Authority Key Identifier:
                keyid:B7:4E:B4:B2:0B:C5:94:AC:2B:A3:AA:5A:EF:30:E7:4E:25:E1:56:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:64:46:7b:09:27:74:1f:ef:8d:06:c5:25:c0:cd:a0:60:a3:
         30:c8:f6:a6:63:90:c0:a9:4c:42:82:f6:25:26:f0:b2:b9:21:
         25:45:e0:3c:bf:7f:bd:2f:97:57:a3:f9:e4:a6:bd:e9:17:e8:
         44:50:b8:8e:24:49:cf:6d:83:08:1e:99:21:fd:24:36:9e:22:
         99:15:27:02:c3:9a:8e:10:e7:1e:02:ed:1e:b9:b8:b8:7a:27:
         36:b7:be:a0:0e:92:74:a9:35:2d:a3:73:4e:20:9d:43:cd:60:
         0e:62:94:a8:8d:ff:a5:85:8f:84:b0:d6:20:af:83:0e:06:e2:
         07:7f:c7:45:3e:0a:ae:d1:e4:f0:d4:81:80:72:db:d9:f1:0c:
         b5:2f:8f:04:3d:57:f1:26:09:4a:f4:f3:02:70:94:c6:4b:10:
         2e:97:cf:e5:05:03:31:fe:9f:e9:6e:70:16:da:1d:3b:46:5e:
         03:3d:63:b5:81:fb:0e:7c:7c:e3:67:58:32:f3:0d:33:50:12:
         6c:fc:17:c0:e6:62:f7:fd:a9:56:3a:49:6b:3c:e6:fe:fc:55:
         42:53:77:55:c6:4a:1a:ac:85:e3:71:23:bf:a6:7f:e2:03:84:
         f9:e7:34:f1:5f:fa:4b:48:b4:77:3c:39:cf:36:3b:34:c3:ed:
         eb:e5:db:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:40:40 2026 by rpki-client