Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.mft
File:                     _sb7WkZ5dMl3qZfG3aFGSAXtN58.mft (raw, json)
Hash identifier:          d2DoO6ERzH90Wcx/PMyN0wMSb9rCzSesBRjYf2uPiYY=
Subject key identifier:   80:CD:ED:02:8C:A5:F3:C1:26:87:80:4F:67:D8:14:FC:70:37:AB:99
Authority key identifier: FE:C6:FB:5A:46:79:74:C9:77:A9:97:C6:DD:A1:46:48:05:ED:37:9F
Certificate issuer:       /CN=fec6fb5a467974c977a997c6dda1464805ed379f
Certificate serial:       019E1EDA041EB7445F82FA7C79A3D38B1177
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.mft
Manifest number:          0CA9
Signing time:             Wed 13 May 2026 01:01:04 +0000
Manifest this update:     Wed 13 May 2026 01:01:04 +0000
Manifest next update:     Thu 14 May 2026 01:01:04 +0000
Files and hashes:         1: 4ypzGfCHhgDoMmCtv9mhP95DsH8.roa (hash: cgyweP6TWOD2EkCngfHayXAx2FserZFtDFpsPs5VJG0=)
                          2: 9xs44BTciEe79T5DFs_dv3etyAA.roa (hash: hm5e8WZY1I0zpkj9lyYKgGK1z/f607v96gqeEkkvWMs=)
                          3: _sb7WkZ5dMl3qZfG3aFGSAXtN58.crl (hash: SJnUVb+CDgJUHBjJtLyq0TKXvYEmsk5EoGaEgx9fceI=)
                          4: nMOMLSKNHZWnqOpaztV5tvRIW_0.roa (hash: hzcdgrRKntQ9Q0+tx+TtRx6J7FNm7FNdX1mkQMztsyI=)
                          5: qybWWPweMAxxbe6Dx9t3-MHAIDM.roa (hash: Vk+vGEJAunUNZlN6ZA7MDbwnLEBdBJ90nYvsUNNE5Fs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:04:1e:b7:44:5f:82:fa:7c:79:a3:d3:8b:11:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fec6fb5a467974c977a997c6dda1464805ed379f
        Validity
            Not Before: May 13 01:01:04 2026 GMT
            Not After : May 14 01:01:04 2026 GMT
        Subject: CN=80cded028ca5f3c12687804f67d814fc7037ab99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cd:fe:df:ee:07:9f:8a:71:ba:63:40:d7:a5:
                    5f:fb:34:49:fe:5a:46:7b:f2:1a:64:30:14:b2:49:
                    d5:b9:9d:b0:57:44:df:b4:f5:a1:3b:d1:2f:97:a7:
                    88:93:be:66:08:e6:e6:14:94:20:55:e6:cf:91:14:
                    90:b7:8d:12:f7:e2:9a:4d:dd:92:02:9a:5c:ee:48:
                    b8:81:c4:24:65:d3:42:3a:f1:83:90:40:3e:b1:d9:
                    e2:b9:db:22:1a:cd:00:be:e4:e2:8f:24:d4:31:50:
                    7e:24:68:9a:70:cf:bc:ad:28:41:ed:f8:c6:88:4b:
                    1f:29:98:36:c9:f6:5e:38:32:83:0e:f2:1e:b7:36:
                    64:15:14:19:67:c4:2b:b8:ac:c0:31:1d:a4:b2:09:
                    5a:31:2e:52:98:55:4c:d2:6e:fc:98:ff:67:ae:f7:
                    17:a9:3b:a1:af:c7:6c:d7:83:8a:71:73:e3:5a:fb:
                    64:7e:11:fc:6f:ac:8f:03:b8:ff:cb:c9:83:66:e1:
                    f7:97:1b:f0:57:46:1d:e6:d9:ea:ee:b5:d3:0a:a9:
                    45:94:de:15:b4:9b:40:8c:f2:39:ba:b4:d1:5b:3a:
                    60:a1:88:05:73:1a:77:80:6a:2b:7a:72:3a:47:6d:
                    db:4a:d1:9f:7c:ae:c2:19:13:d4:ff:1a:2b:32:a7:
                    6d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CD:ED:02:8C:A5:F3:C1:26:87:80:4F:67:D8:14:FC:70:37:AB:99
            X509v3 Authority Key Identifier:
                keyid:FE:C6:FB:5A:46:79:74:C9:77:A9:97:C6:DD:A1:46:48:05:ED:37:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:ea:88:92:33:c6:69:d7:35:fc:55:bd:94:50:d5:fb:33:3c:
         ca:08:e2:89:da:cd:23:90:31:59:34:02:41:5f:13:d2:6f:70:
         f3:38:16:3e:ef:39:d1:a7:b3:6f:02:e1:f9:59:b0:d1:1f:20:
         f2:d8:f9:69:50:cb:aa:e5:c4:d1:3d:69:38:14:0c:8b:34:2e:
         82:fe:56:95:a4:63:f8:b6:8a:78:ec:ec:33:e1:37:20:ca:07:
         14:ae:87:3c:b3:40:e1:32:66:72:44:b3:23:61:fe:16:34:96:
         71:4a:1c:27:aa:ce:d8:6f:7d:5a:5e:86:c8:ee:b1:17:34:c8:
         a4:d2:32:ab:3f:c3:3a:5f:d5:49:47:c2:4d:14:fd:66:f5:d9:
         43:e6:b3:74:8a:f0:8e:93:89:a5:be:9e:c4:ec:de:16:38:cb:
         98:89:2d:84:1e:5f:95:71:d7:60:e9:ed:fd:d6:f6:6a:a5:a8:
         8b:e6:ee:c4:fb:ca:2f:39:52:d5:0a:c9:6d:db:58:bb:5a:83:
         48:f7:b1:5b:56:8b:fb:7c:29:6b:bf:9e:fb:a7:84:7a:64:80:
         42:cf:18:bc:27:66:f9:16:b1:54:7e:48:8e:ac:a8:1a:e2:3c:
         ee:10:4b:66:d7:69:8f:46:74:da:d2:5e:c0:e7:49:83:48:19:
         ad:ce:68:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:50:06 2026 by rpki-client