Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.mft
File:                     0MzQmlS_pjFBmXzWU7d7yZOS72I.mft (raw, json)
Hash identifier:          raRCwRN2RWEqB7pvJynW3DdjAxWBvJUNEHnyF2+WHqo=
Subject key identifier:   18:79:E9:23:A8:CC:94:47:32:BD:13:4A:BB:4A:EE:5E:2F:42:55:F6
Authority key identifier: D0:CC:D0:9A:54:BF:A6:31:41:99:7C:D6:53:B7:7B:C9:93:92:EF:62
Certificate issuer:       /CN=d0ccd09a54bfa63141997cd653b77bc99392ef62
Certificate serial:       019E1D22974D4F7A1ABACCDE6279E48214DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0MzQmlS_pjFBmXzWU7d7yZOS72I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.mft
Manifest number:          0B17
Signing time:             Tue 12 May 2026 17:01:06 +0000
Manifest this update:     Tue 12 May 2026 17:01:06 +0000
Manifest next update:     Wed 13 May 2026 17:01:06 +0000
Files and hashes:         1: 0MzQmlS_pjFBmXzWU7d7yZOS72I.crl (hash: owoh8K/0SXRtk8ha+sC3PYxnFU3aoWCSq8qTYyo1kCk=)
                          2: VQtJlC9hHzZMq_K64NB0xltL3Qc.roa (hash: My9rgEJXYw1FAk2B4n4agl5BA61SBdcnSem0n0fXVFA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0MzQmlS_pjFBmXzWU7d7yZOS72I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 17:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:97:4d:4f:7a:1a:ba:cc:de:62:79:e4:82:14:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0ccd09a54bfa63141997cd653b77bc99392ef62
        Validity
            Not Before: May 12 17:01:06 2026 GMT
            Not After : May 13 17:01:06 2026 GMT
        Subject: CN=1879e923a8cc944732bd134abb4aee5e2f4255f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e7:28:c2:0a:85:8f:06:df:40:c4:e0:f6:5a:
                    91:01:ad:32:04:bf:f0:3f:16:df:52:87:58:51:18:
                    d1:c1:92:c1:e6:b0:d5:ea:34:27:1d:3f:c8:3d:6f:
                    af:8e:73:a0:4d:d5:ce:f6:1c:d0:3f:b8:5c:e4:e9:
                    0a:bf:13:5c:fd:5d:ac:34:a3:bb:c1:02:d5:6c:51:
                    e5:59:b4:e2:0c:19:c2:24:a4:45:c4:d9:b0:85:18:
                    7f:73:7f:cd:99:10:cf:d1:e6:77:fa:ec:7f:79:d9:
                    4c:82:c5:f9:ed:d4:f5:0d:ea:41:8a:17:e6:59:4d:
                    bc:d7:87:1d:2f:a6:c5:58:42:90:94:86:5e:0a:0d:
                    6f:61:a0:48:85:f0:ec:81:26:30:be:a1:d3:35:ca:
                    1a:2b:65:16:da:32:b4:1c:c1:dc:c2:5e:c4:57:43:
                    bb:80:2d:46:9b:dc:15:6f:a2:25:52:6e:42:ce:89:
                    fd:cf:40:b3:c8:8b:28:6f:43:99:4d:53:5c:53:1e:
                    9b:8e:cf:eb:95:b1:ca:37:fd:29:37:c1:6a:86:8c:
                    24:79:97:9a:07:90:f3:8e:fb:4f:49:69:ca:af:fd:
                    f4:d0:f6:9f:14:e9:e1:a4:77:e1:bf:6d:fd:ca:1e:
                    19:73:0e:13:8b:56:2b:52:9a:f0:bc:31:a8:dd:83:
                    6d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:79:E9:23:A8:CC:94:47:32:BD:13:4A:BB:4A:EE:5E:2F:42:55:F6
            X509v3 Authority Key Identifier:
                keyid:D0:CC:D0:9A:54:BF:A6:31:41:99:7C:D6:53:B7:7B:C9:93:92:EF:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0MzQmlS_pjFBmXzWU7d7yZOS72I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:fd:ff:93:ab:2a:62:76:6b:dc:70:32:37:3e:9f:8d:bc:78:
         49:a1:43:d1:a0:d4:95:10:9d:4e:66:c8:da:46:cc:1e:9f:0a:
         69:2a:98:62:f0:33:5f:bb:e4:4c:14:b8:14:79:df:80:4f:ed:
         79:be:b0:45:d7:0d:53:c9:01:6d:76:dd:1e:2b:bd:88:25:75:
         d9:be:6f:d3:c9:7d:68:37:2d:a9:fa:58:a6:a3:31:a8:d2:ee:
         1c:55:d1:26:d6:47:a1:6c:50:3a:96:ef:e3:a6:13:3b:b0:cf:
         52:06:8b:22:3e:5a:70:ac:47:5c:67:7d:98:d0:c7:1b:da:94:
         5d:b5:3a:fa:6d:03:90:74:00:72:8d:9e:cd:51:f4:f4:a7:59:
         ec:b8:db:39:33:ac:5c:b5:cf:8d:a0:4b:d7:52:d3:a5:1a:58:
         1e:c8:8c:b1:5a:7c:2e:ef:19:42:71:73:dd:8e:53:bd:86:2d:
         31:b6:81:e6:3e:28:b9:28:f6:77:ee:5d:3b:93:98:9d:20:62:
         f9:f7:e9:58:fa:2c:f8:6a:44:68:67:ea:9f:44:7b:aa:be:8b:
         29:89:5d:aa:2e:ae:62:6d:a8:c0:6e:99:32:f2:bd:14:82:43:
         e8:7d:73:46:75:c5:a5:26:5d:d9:0c:9a:fc:4c:dc:7e:d2:b5:
         19:4a:f4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:07:59 2026 by rpki-client