Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft
File:                     4uQkJWNHPN8ULMt8zjwsw26j1GU.mft (raw, json)
Hash identifier:          cMv7Gbplmgvp9lndJeBP68evjYDXDSNouYxkwHro818=
Subject key identifier:   CB:72:9F:FB:E4:90:39:4A:8E:23:9E:95:AE:E5:A8:2F:9F:7E:9D:C1
Authority key identifier: E2:E4:24:25:63:47:3C:DF:14:2C:CB:7C:CE:3C:2C:C3:6E:A3:D4:65
Certificate issuer:       /CN=e2e4242563473cdf142ccb7cce3c2cc36ea3d465
Certificate serial:       019E1F48174DD880D36738807AD40CACAD63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft
Manifest number:          0F05
Signing time:             Wed 13 May 2026 03:01:18 +0000
Manifest this update:     Wed 13 May 2026 03:01:18 +0000
Manifest next update:     Thu 14 May 2026 03:01:18 +0000
Files and hashes:         1: 4uQkJWNHPN8ULMt8zjwsw26j1GU.crl (hash: TjRCdkX98fa12psK8UCYwNDU+/KlzHTbQWxAcWLhKlo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 03:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:48:17:4d:d8:80:d3:67:38:80:7a:d4:0c:ac:ad:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2e4242563473cdf142ccb7cce3c2cc36ea3d465
        Validity
            Not Before: May 13 03:01:18 2026 GMT
            Not After : May 14 03:01:18 2026 GMT
        Subject: CN=cb729ffbe490394a8e239e95aee5a82f9f7e9dc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a0:bd:91:d2:e3:4f:f2:41:78:0f:8f:ff:43:
                    5d:90:b1:eb:a7:0c:c7:89:ab:f4:b1:de:67:9f:25:
                    fd:12:2e:30:e2:af:d7:ab:dc:85:5f:cb:16:a4:a9:
                    30:93:0f:60:1a:e8:73:0a:19:04:66:79:a8:b4:ba:
                    91:93:66:fd:14:0a:db:a9:f7:46:85:d8:58:aa:61:
                    c4:d5:4c:c8:dd:37:3c:18:ac:9d:b2:68:58:d9:0b:
                    12:ad:f6:87:73:57:90:60:b0:88:52:24:02:57:94:
                    36:79:77:b6:ff:f2:62:9b:e9:db:90:54:1b:69:60:
                    a2:73:51:77:92:8f:27:79:63:88:3f:c1:34:55:1f:
                    3c:99:00:f8:03:f0:ab:aa:ee:31:fb:d7:70:70:5e:
                    03:9a:ed:17:0f:6d:ca:47:b1:15:d2:73:d8:82:69:
                    94:06:f5:ef:fe:66:fa:9d:b9:85:64:24:45:ad:b9:
                    aa:08:c8:0e:2c:d1:cc:d7:b0:96:6d:c4:a1:a5:cd:
                    01:0c:a5:a3:2d:3e:3c:9c:07:cf:b1:df:c7:ca:c5:
                    99:12:95:04:d5:68:07:42:6f:e8:73:59:6d:3b:9b:
                    0c:8b:3e:5c:3e:62:a4:84:96:32:9d:3b:f1:f8:01:
                    e4:c6:f0:1a:63:b6:ff:12:87:91:89:00:f5:a4:f3:
                    6e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:72:9F:FB:E4:90:39:4A:8E:23:9E:95:AE:E5:A8:2F:9F:7E:9D:C1
            X509v3 Authority Key Identifier:
                keyid:E2:E4:24:25:63:47:3C:DF:14:2C:CB:7C:CE:3C:2C:C3:6E:A3:D4:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:48:b1:17:4c:b5:17:41:8d:9e:f7:27:7a:31:8e:44:b5:e4:
         84:db:28:70:ff:a6:5e:db:3f:fc:5d:0f:1a:c4:46:21:ca:0e:
         aa:a8:ad:8f:bb:91:6d:d6:22:95:bb:d3:0a:20:d1:66:26:2d:
         30:38:94:62:46:1b:dd:a4:2c:b0:b8:22:ce:62:7c:02:13:20:
         2f:f8:18:f2:b6:36:08:dd:f8:f7:e2:00:ac:ba:46:62:3f:fc:
         14:9e:17:de:8b:64:57:3a:65:0d:df:66:06:1e:12:f0:4c:1c:
         b2:b2:dd:a9:86:be:71:3d:90:22:e9:5d:e9:37:b3:08:f8:9b:
         6c:22:dd:6f:54:26:46:0a:f0:69:62:63:d7:a0:2f:14:9f:18:
         e8:1f:98:ec:66:25:c3:48:e1:f3:12:20:1c:0d:35:44:2e:c8:
         76:1c:b0:e5:76:e7:4b:fd:33:17:63:76:6a:cc:95:7d:85:c1:
         6e:90:7f:7d:11:fb:58:3c:85:04:5a:06:f2:99:7c:1c:2f:e8:
         dc:86:dc:73:29:72:69:3e:44:f5:1b:f1:1e:37:92:29:f0:d6:
         31:15:60:84:06:d0:31:6a:e4:83:a5:a4:79:d8:16:9b:f9:96:
         b4:20:95:47:7f:1d:89:30:8d:4d:b6:6a:88:27:1f:89:c0:1f:
         54:2c:bd:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fSBdN2IDTZziAetQMrK1jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZTQyNDI1NjM0NzNjZGYxNDJjY2I3Y2NlM2MyY2MzNmVh
M2Q0NjUwHhcNMjYwNTEzMDMwMTE4WhcNMjYwNTE0MDMwMTE4WjAzMTEwLwYDVQQD
EyhjYjcyOWZmYmU0OTAzOTRhOGUyMzllOTVhZWU1YTgyZjlmN2U5ZGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6C9kdLjT/JBeA+P/0NdkLHrpwzH
iav0sd5nnyX9Ei4w4q/Xq9yFX8sWpKkwkw9gGuhzChkEZnmotLqRk2b9FArbqfdG
hdhYqmHE1UzI3Tc8GKydsmhY2QsSrfaHc1eQYLCIUiQCV5Q2eXe2//Jim+nbkFQb
aWCic1F3ko8neWOIP8E0VR88mQD4A/Crqu4x+9dwcF4Dmu0XD23KR7EV0nPYgmmU
BvXv/mb6nbmFZCRFrbmqCMgOLNHM17CWbcShpc0BDKWjLT48nAfPsd/HysWZEpUE
1WgHQm/oc1ltO5sMiz5cPmKkhJYynTvx+AHkxvAaY7b/EoeRiQD1pPNuJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMtyn/vkkDlKjiOela7lqC+ffp3BMB8GA1UdIwQY
MBaAFOLkJCVjRzzfFCzLfM48LMNuo9RlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHVRa0pXTkhQTjhVTE10OHpqd3N3MjZqMUdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MGZiNzgtNDE4OS00OTdkLWIwNmIt
OGU3YjcwOWRhNjUzLzEvNHVRa0pXTkhQTjhVTE10OHpqd3N3MjZqMUdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80MGZiNzgtNDE4OS00OTdkLWIwNmItOGU3YjcwOWRhNjUz
LzEvNHVRa0pXTkhQTjhVTE10OHpqd3N3MjZqMUdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcEixF0y1
F0GNnvcnejGORLXkhNsocP+mXts//F0PGsRGIcoOqqitj7uRbdYilbvTCiDRZiYt
MDiUYkYb3aQssLgizmJ8AhMgL/gY8rY2CN349+IArLpGYj/8FJ4X3otkVzplDd9m
Bh4S8EwcsrLdqYa+cT2QIuld6TezCPibbCLdb1QmRgrwaWJj16AvFJ8Y6B+Y7GYl
w0jh8xIgHA01RC7Idhyw5XbnS/0zF2N2asyVfYXBbpB/fRH7WDyFBFoG8pl8HC/o
3IbccylyaT5E9RvxHjeSKfDWMRVghAbQMWrkg6WkedgWm/mWtCCVR38diTCNTbZq
iCcficAfVCy99g==
-----END CERTIFICATE-----
Generated at Wed May 13 12:07:40 2026 by rpki-client