Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft
File:                     RmI6xd-e7899JPMXx7aUKX5PNio.mft (raw, json)
Hash identifier:          Qsq2g6mGV7P0K0zMLkmLWNU0vajYmq72fxVRhwg7tYE=
Subject key identifier:   3F:09:32:F0:7E:B8:61:72:5B:CF:3E:AB:F5:AB:DD:32:E6:65:3C:41
Authority key identifier: 46:62:3A:C5:DF:9E:EF:CF:7D:24:F3:17:C7:B6:94:29:7E:4F:36:2A
Certificate issuer:       /CN=46623ac5df9eefcf7d24f317c7b694297e4f362a
Certificate serial:       019E1EDA551EA65223CBC7523988ADE0D916
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RmI6xd-e7899JPMXx7aUKX5PNio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft
Manifest number:          09EE
Signing time:             Wed 13 May 2026 01:01:25 +0000
Manifest this update:     Wed 13 May 2026 01:01:25 +0000
Manifest next update:     Thu 14 May 2026 01:01:25 +0000
Files and hashes:         1: RmI6xd-e7899JPMXx7aUKX5PNio.crl (hash: zxKgThcMrb2TdfVNlxCOqGOQvNtEvygXH41VlxSNhdY=)
                          2: nfM87_cNIFSFao4mBuo9ap5n_Ds.roa (hash: clZcRSa2WjMsc93x5iPKZEXkrsa/Ap2DM4NOqed4YYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RmI6xd-e7899JPMXx7aUKX5PNio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 01:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:55:1e:a6:52:23:cb:c7:52:39:88:ad:e0:d9:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46623ac5df9eefcf7d24f317c7b694297e4f362a
        Validity
            Not Before: May 13 01:01:25 2026 GMT
            Not After : May 14 01:01:25 2026 GMT
        Subject: CN=3f0932f07eb861725bcf3eabf5abdd32e6653c41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8d:fb:5a:04:fa:f8:9b:38:94:10:b3:04:35:
                    13:ba:35:6c:16:3b:36:13:5b:d6:5f:7b:6d:45:bb:
                    5c:3f:1a:29:7c:7f:ed:09:33:6c:55:60:69:14:0a:
                    ec:df:78:d1:89:af:50:ea:cf:0c:d9:4c:18:15:11:
                    e4:19:3b:d9:76:c9:e3:0a:0a:11:c9:ac:fe:54:4f:
                    d8:48:0d:18:99:f3:d4:50:e8:fd:0d:17:92:c0:53:
                    e7:09:d4:5f:62:17:69:64:3e:aa:e3:10:1b:10:00:
                    02:6c:0f:d9:01:35:66:7f:8a:39:21:1d:a0:f9:a7:
                    9c:7c:3a:ad:0e:41:58:ad:e6:74:da:98:d8:e5:3c:
                    02:8a:ca:f1:39:81:98:d6:df:75:af:b4:fb:04:4c:
                    7c:b0:4c:2f:04:5a:f9:ad:bd:bb:ec:9b:86:04:4d:
                    94:d6:da:63:08:86:33:c0:74:da:1a:dd:f0:b3:11:
                    09:ea:39:04:6d:4b:f4:d8:ef:c1:c9:db:0d:d8:10:
                    f4:f4:e7:c8:38:61:3f:eb:6b:48:c8:7a:84:a9:ff:
                    96:e8:e0:0a:8c:76:b0:6a:2a:cf:cf:4c:a9:f0:44:
                    26:bd:81:77:7b:53:78:23:5f:b8:10:e9:a0:ed:f3:
                    f9:d8:b9:04:ab:e4:94:56:e3:c7:9b:da:93:f0:23:
                    54:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:09:32:F0:7E:B8:61:72:5B:CF:3E:AB:F5:AB:DD:32:E6:65:3C:41
            X509v3 Authority Key Identifier:
                keyid:46:62:3A:C5:DF:9E:EF:CF:7D:24:F3:17:C7:B6:94:29:7E:4F:36:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmI6xd-e7899JPMXx7aUKX5PNio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:16:95:be:c7:43:92:cc:54:af:d4:01:84:4e:d6:2d:97:3c:
         c1:d1:54:66:20:59:d3:ab:cd:73:0e:db:42:0d:21:a1:0e:04:
         78:cc:3e:7d:b7:ee:d6:5b:f0:bc:6c:5e:3d:ab:da:84:7b:a1:
         2d:31:e9:de:74:c4:18:fe:2e:43:8c:68:12:ad:29:db:c1:d5:
         d4:6f:07:b7:3c:da:b8:81:82:9d:d2:b9:c4:f7:43:5b:b4:15:
         c3:d0:59:3c:ab:57:52:fd:54:06:69:db:c2:31:31:ac:dc:01:
         0f:cb:3c:1d:03:76:77:56:68:dd:d1:33:44:7b:48:be:d1:e2:
         a3:2b:0f:7c:be:b4:95:9d:17:52:c5:50:6c:b6:5c:a0:cf:95:
         b3:ea:81:60:54:cf:fd:0b:e8:7b:a1:4a:3c:0a:9f:cb:ab:e1:
         7a:2b:d1:65:dd:16:c4:f1:e4:88:ac:ca:5a:61:a2:25:75:7b:
         54:07:13:81:39:9d:00:20:e4:06:5c:0c:23:b0:48:61:cd:43:
         c9:4d:80:2f:3a:e3:a1:45:09:6a:fe:c5:10:db:20:f7:f5:42:
         b2:90:a8:63:cc:76:f1:ca:98:3a:b0:d0:a6:d9:4f:03:ec:63:
         95:96:67:ae:73:d1:e9:bb:d0:9b:e3:4b:5f:30:88:06:04:2d:
         0c:a5:4b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:44:40 2026 by rpki-client