Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
File:                     4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft (raw, json)
Hash identifier:          qc/P8lZrgWdn+dvixO8yUVuN4nzX/mpZspE2cZyoJWQ=
Subject key identifier:   63:C8:68:84:B0:AB:93:24:07:99:43:7F:6D:13:1B:7A:7B:14:87:62
Authority key identifier: E1:55:03:B1:1B:98:A5:F5:8D:4F:55:EF:AE:A3:AD:2B:21:AA:EC:83
Certificate issuer:       /CN=e15503b11b98a5f58d4f55efaea3ad2b21aaec83
Certificate serial:       019E1CEC0EE13902FA0B6DE76AE63CB6EA41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
Manifest number:          1800
Signing time:             Tue 12 May 2026 16:01:32 +0000
Manifest this update:     Tue 12 May 2026 16:01:32 +0000
Manifest next update:     Wed 13 May 2026 16:01:32 +0000
Files and hashes:         1: 4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl (hash: pV9LvUkWUouY0CTtSaGTrJzwo7KSqWDQTMKwgO0uTb8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 16:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:ec:0e:e1:39:02:fa:0b:6d:e7:6a:e6:3c:b6:ea:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15503b11b98a5f58d4f55efaea3ad2b21aaec83
        Validity
            Not Before: May 12 16:01:32 2026 GMT
            Not After : May 13 16:01:32 2026 GMT
        Subject: CN=63c86884b0ab93240799437f6d131b7a7b148762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:13:df:d4:09:94:6e:10:67:b6:0a:6f:29:c8:
                    d0:44:35:4b:03:bb:a8:2c:af:b0:b3:02:ed:41:4d:
                    ef:15:e8:ff:ef:a5:29:a2:c1:b9:17:19:81:94:18:
                    55:0c:3d:bf:d9:47:b7:0d:ed:3c:9c:37:46:5e:98:
                    d4:f7:52:c4:2b:d7:a5:89:ad:10:40:c1:95:5d:b8:
                    1e:78:50:85:3b:02:19:5f:93:e0:69:25:57:f7:18:
                    dd:d5:72:08:f6:91:85:b4:b7:b0:f1:55:64:a7:18:
                    fe:34:c3:b4:77:be:43:60:af:55:e9:8b:22:4a:6b:
                    2c:ae:8d:f6:b6:58:f8:9c:33:f1:c0:00:1d:6e:25:
                    3e:d3:f3:33:4d:a6:7e:f7:ce:04:0b:c7:81:2a:25:
                    f5:64:02:6a:34:b2:d9:30:ba:c3:37:b8:88:c5:9d:
                    9e:10:65:a9:82:cc:9d:43:53:48:08:32:93:a2:4f:
                    05:01:cf:7c:d2:7e:8c:cf:11:19:30:38:0b:e9:6f:
                    cc:98:d2:a4:9e:a6:46:8e:d1:84:41:85:28:b2:4a:
                    63:ce:2c:c4:73:e2:9f:77:05:d5:f6:82:f6:eb:6f:
                    b0:04:9a:0a:61:e6:4e:98:7e:4c:3d:89:fa:72:23:
                    1d:21:86:79:37:83:e2:cf:f1:a0:bf:9e:11:c5:6b:
                    b3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C8:68:84:B0:AB:93:24:07:99:43:7F:6D:13:1B:7A:7B:14:87:62
            X509v3 Authority Key Identifier:
                keyid:E1:55:03:B1:1B:98:A5:F5:8D:4F:55:EF:AE:A3:AD:2B:21:AA:EC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:60:3d:de:91:8e:f6:9f:d5:f9:c8:15:3a:fb:27:84:77:cf:
         17:9f:fb:34:cf:90:c0:7d:20:7f:60:ab:63:c3:7a:f0:10:76:
         c6:d2:1f:7a:91:33:dc:66:e5:f6:e4:cb:c1:7a:cc:33:7b:f7:
         95:5b:23:25:a9:05:2a:88:6c:60:fe:92:de:ff:26:32:76:3d:
         83:89:a6:55:59:5b:a2:19:2d:c2:7b:87:05:e4:42:8a:b2:78:
         23:ea:fd:0d:58:bd:a2:d9:00:68:10:67:6d:41:de:b2:40:c4:
         b0:5a:52:a9:1a:8b:cf:99:30:3f:31:5a:e9:c2:b6:ed:37:77:
         61:ce:f9:ae:99:ff:df:8d:30:63:00:5a:92:73:e6:ea:04:3c:
         c4:3d:57:f4:f6:62:5b:b9:09:d1:6b:3e:37:f8:0d:37:32:2d:
         0f:ac:20:8b:0e:0b:08:3c:e6:c3:8d:25:a2:56:a5:a9:bd:c3:
         1e:aa:51:4c:45:6e:82:8d:32:d1:70:1a:79:6a:75:04:5f:9a:
         4b:fe:63:78:40:a0:30:9c:75:b5:fa:67:61:e0:7f:3d:c2:92:
         05:ad:41:41:f2:43:6b:40:33:dd:76:3c:4e:f6:2c:ae:1e:fe:
         33:bf:ac:9c:c3:ed:ff:af:e5:c7:0f:f3:38:c3:f6:82:d0:f4:
         f2:19:81:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:44:19 2026 by rpki-client