Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
File:                     rwAta7hamGvIjbzZMyCUVOW14II.mft (raw, json)
Hash identifier:          rAcNMpwivwiY7noxTfrChYc4sV+KFv9Fq3zXRk1/H6k=
Subject key identifier:   55:11:39:AC:86:19:45:06:9F:A0:25:01:13:72:E6:E9:20:69:13:EC
Authority key identifier: AF:00:2D:6B:B8:5A:98:6B:C8:8D:BC:D9:33:20:94:54:E5:B5:E0:82
Certificate issuer:       /CN=af002d6bb85a986bc88dbcd933209454e5b5e082
Certificate serial:       019E1FECA74606062B0C0C524F3F5AC860A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
Manifest number:          1407
Signing time:             Wed 13 May 2026 06:01:03 +0000
Manifest this update:     Wed 13 May 2026 06:01:03 +0000
Manifest next update:     Thu 14 May 2026 06:01:03 +0000
Files and hashes:         1: p1Z5ag1eRovSGpghiltah3wrLp8.roa (hash: fdCiGCU5t+2pHmKwq78C8J8Bdqj2StfkhlW4J0RllGM=)
                          2: rwAta7hamGvIjbzZMyCUVOW14II.crl (hash: wfAda2EpMpyLHqRKdlxHV2CoUsLn745fa3ybowaikKw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ec:a7:46:06:06:2b:0c:0c:52:4f:3f:5a:c8:60:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af002d6bb85a986bc88dbcd933209454e5b5e082
        Validity
            Not Before: May 13 06:01:03 2026 GMT
            Not After : May 14 06:01:03 2026 GMT
        Subject: CN=551139ac861945069fa025011372e6e9206913ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f7:eb:25:6c:bb:84:2e:e7:a8:7d:03:64:a4:
                    f4:73:db:1d:7f:bb:ea:4a:19:a8:4f:90:49:bb:36:
                    e3:0a:0e:24:43:85:2a:74:de:01:30:df:30:96:76:
                    49:16:66:c3:dd:eb:f0:2b:c9:ad:80:3f:ea:dd:58:
                    9e:42:d6:ec:d4:00:08:46:58:14:1d:a1:bd:ab:1e:
                    06:06:17:59:d4:12:5b:03:2c:7b:e5:23:1d:dc:66:
                    3d:af:d0:94:7b:38:e2:11:b2:c2:e4:42:8e:d0:d9:
                    44:90:47:0b:ef:20:25:23:30:e7:86:85:4b:70:3c:
                    81:a4:ec:a2:2c:73:9f:95:35:23:57:08:46:12:36:
                    16:31:99:27:e6:4e:41:b8:b5:74:ac:35:21:0a:6c:
                    97:76:99:e5:b9:77:5b:a0:47:e9:72:e1:50:47:f3:
                    1f:ad:8a:77:3e:fb:9b:32:22:34:dd:c0:91:9b:b5:
                    89:b6:21:0d:71:03:d3:7c:b5:bf:31:5e:25:bf:b2:
                    04:72:48:b1:5f:a9:7b:69:c7:fd:bc:ce:67:d4:f0:
                    e1:b5:68:32:4a:ab:e0:17:f9:e6:37:81:84:3b:59:
                    df:1b:d2:61:ae:4e:9a:25:cb:c1:16:45:ba:e0:5c:
                    b9:c1:bc:1f:fc:30:a0:5f:d3:61:f2:f6:51:46:10:
                    50:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:11:39:AC:86:19:45:06:9F:A0:25:01:13:72:E6:E9:20:69:13:EC
            X509v3 Authority Key Identifier:
                keyid:AF:00:2D:6B:B8:5A:98:6B:C8:8D:BC:D9:33:20:94:54:E5:B5:E0:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:f9:a5:ff:11:03:8e:d0:8b:1e:a2:6d:19:6b:9c:01:56:f4:
         6c:05:c5:e5:fa:db:31:8d:02:60:e5:0f:ff:ee:4c:59:6b:95:
         b5:0c:c9:dc:b9:7c:e2:0b:30:31:d0:13:74:5b:98:50:b0:c6:
         87:e0:fe:26:a3:ba:f5:58:d8:1a:01:29:84:0f:10:1e:df:0d:
         48:1c:2c:ad:b7:c8:4d:db:2d:c1:eb:f8:23:c9:50:ff:fe:5e:
         ed:83:52:cf:e8:bf:43:d9:5d:0d:3e:0e:57:0e:88:a9:6e:30:
         bf:37:27:48:79:5e:13:f0:bd:65:ba:35:79:31:b1:2f:bd:4a:
         1f:d3:cd:56:a7:dd:6b:04:40:a7:1c:6f:47:88:d3:3f:f3:cd:
         5b:b6:fc:24:90:7d:26:85:96:df:7b:76:a8:45:e4:29:02:ca:
         91:87:a8:89:20:a0:5d:de:d8:ef:f0:da:bd:97:17:53:25:b6:
         b4:c3:1a:3e:08:1b:af:be:c8:bd:1d:f5:d9:79:ce:e0:19:11:
         fe:95:d9:97:e3:ca:7a:28:4d:cd:6a:9b:72:a5:72:dc:e2:c8:
         21:a7:b1:ba:13:3a:4a:d2:88:83:d0:e3:7e:50:fc:dc:a6:62:
         82:8b:40:c4:f5:09:6c:b0:84:59:df:6e:d1:a7:86:c8:a1:e9:
         5e:0d:06:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:50:03 2026 by rpki-client