Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
File:                     do0jVpP2hnxbOBPaHzb-EHvR14I.mft (raw, json)
Hash identifier:          36L8OojseaQbEbtf7lXlRniRfmpuZ5vUADozVjVIsd0=
Subject key identifier:   CA:1E:5B:60:9F:A6:D2:E4:AC:A5:C5:2E:E1:38:B5:2B:3D:B5:B5:FE
Authority key identifier: 76:8D:23:56:93:F6:86:7C:5B:38:13:DA:1F:36:FE:10:7B:D1:D7:82
Certificate issuer:       /CN=768d235693f6867c5b3813da1f36fe107bd1d782
Certificate serial:       019E1ED9AC308DBE37C4D65F6D14B6B94769
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
Manifest number:          0FDE
Signing time:             Wed 13 May 2026 01:00:42 +0000
Manifest this update:     Wed 13 May 2026 01:00:42 +0000
Manifest next update:     Thu 14 May 2026 01:00:42 +0000
Files and hashes:         1: KuefoOzdZ9vrXjVoaWqLBNOd8Fc.roa (hash: Tr2+OxM2L2vZYYtrtzp3JmsEgxHYlAlF0KBqV8P0L1o=)
                          2: do0jVpP2hnxbOBPaHzb-EHvR14I.crl (hash: 5QhyVx6pgwffEXmdXSYynbSHoj/IoqkYAmcefJSTNe8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:d9:ac:30:8d:be:37:c4:d6:5f:6d:14:b6:b9:47:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=768d235693f6867c5b3813da1f36fe107bd1d782
        Validity
            Not Before: May 13 01:00:42 2026 GMT
            Not After : May 14 01:00:42 2026 GMT
        Subject: CN=ca1e5b609fa6d2e4aca5c52ee138b52b3db5b5fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ab:8d:86:5b:e2:c9:70:54:23:c5:43:b3:e6:
                    c2:22:59:eb:e4:ca:14:01:9a:5c:04:ac:ab:c4:24:
                    48:83:17:9d:56:15:2a:8a:20:9f:5a:a9:00:7a:12:
                    12:12:e1:09:61:dc:37:99:7c:dc:17:0c:57:e5:b9:
                    04:5a:2f:cc:73:03:3e:9a:7e:42:c5:74:d3:f1:f5:
                    16:ec:c4:49:46:24:31:0c:d5:42:0d:23:18:80:60:
                    ce:c7:a9:e7:7a:3c:64:f7:4b:f9:62:a4:f9:c9:a5:
                    8c:5c:e8:2c:d3:4b:f3:fb:3c:bd:d9:e1:25:ad:5b:
                    40:74:45:1f:75:a9:45:d8:35:b5:c7:7a:01:da:9e:
                    41:c5:bb:11:0e:0a:7f:bf:f8:46:df:a1:d1:15:b6:
                    a1:12:a4:95:4f:0f:2f:c5:98:e2:35:22:47:84:53:
                    66:6b:72:c2:90:29:f9:25:6c:f3:86:7a:1b:a8:9b:
                    08:b3:38:5f:59:d5:50:b8:12:8f:13:42:f6:97:c7:
                    f1:b5:ee:b1:61:8a:fb:14:e6:c6:bc:36:39:de:b2:
                    e4:5b:49:06:d6:3f:ee:4a:f5:91:b3:4b:af:3d:fe:
                    2b:0b:18:11:9f:84:98:31:e5:89:d7:91:da:f5:da:
                    d9:fa:4a:20:55:43:6c:0c:f0:a6:ac:56:98:d2:b4:
                    96:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:1E:5B:60:9F:A6:D2:E4:AC:A5:C5:2E:E1:38:B5:2B:3D:B5:B5:FE
            X509v3 Authority Key Identifier:
                keyid:76:8D:23:56:93:F6:86:7C:5B:38:13:DA:1F:36:FE:10:7B:D1:D7:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:28:48:b2:42:2f:42:f1:05:79:84:c6:36:33:bd:d4:7a:c1:
         0d:8b:2c:70:04:db:fc:3b:77:99:58:a9:fe:0e:7e:78:24:19:
         78:d1:42:ba:aa:7e:a6:b4:c2:ff:5e:13:b4:c5:8c:bb:c3:e5:
         ad:36:30:7f:f6:0a:84:2b:88:66:9e:0d:c9:07:0b:73:3f:dd:
         79:00:e7:a7:70:7b:7a:a7:1a:45:6f:81:b4:ae:8f:40:8a:e1:
         41:19:52:d1:3a:58:b7:88:4f:70:72:6d:e1:98:f3:6e:d1:bd:
         4a:ca:4a:73:ed:c3:06:2f:88:e1:d5:54:39:12:e0:8b:f7:27:
         7c:ee:25:05:f3:1f:a9:51:86:6b:80:c3:bd:d6:4b:04:a6:4c:
         28:c4:75:aa:43:1c:2b:2c:dd:ab:8d:07:f1:db:d1:33:66:7b:
         e4:12:e9:72:a0:f5:f6:5d:49:2c:4c:05:d1:ed:0b:ca:9a:1e:
         4d:4b:57:25:9d:3a:3a:e6:e5:38:61:aa:32:95:20:03:6e:46:
         58:8f:e7:82:59:45:c1:96:aa:78:3e:92:16:20:f6:a7:ab:5b:
         34:50:ca:d6:1d:c5:40:58:3d:3b:9e:92:30:d0:70:44:7b:ec:
         4b:36:12:15:36:a8:81:08:21:2a:11:ca:99:1a:5f:9e:96:bb:
         e3:7c:63:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:50:42 2026 by rpki-client