Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
File:                     D6vrbvgg09UvBTciM8VB7ksU82E.mft (raw, json)
Hash identifier:          6k+r0CSlPalutP6IcUMp1eUx3Q+pLIz1of3lZ9Kz5Xk=
Subject key identifier:   47:F5:4A:00:9D:FD:DD:AF:08:51:A6:F9:F9:D1:F2:6F:5D:9C:25:63
Authority key identifier: 0F:AB:EB:6E:F8:20:D3:D5:2F:05:37:22:33:C5:41:EE:4B:14:F3:61
Certificate issuer:       /CN=0fabeb6ef820d3d52f05372233c541ee4b14f361
Certificate serial:       019E1DFE42011AB02605267F9CAD48A3253E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
Manifest number:          1908
Signing time:             Tue 12 May 2026 21:01:02 +0000
Manifest this update:     Tue 12 May 2026 21:01:02 +0000
Manifest next update:     Wed 13 May 2026 21:01:02 +0000
Files and hashes:         1: D6vrbvgg09UvBTciM8VB7ksU82E.crl (hash: pSHWpqEcqakB287M3MGYMAcgMbdRduL8VW8xDM/dx08=)
                          2: VS5UOf4Oqufmk1nDLv2qDmY9aAk.roa (hash: yxhJeQxv5OL2X3W33orxeTr4UI2HV6MbDSVgY4g3PdE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:42:01:1a:b0:26:05:26:7f:9c:ad:48:a3:25:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fabeb6ef820d3d52f05372233c541ee4b14f361
        Validity
            Not Before: May 12 21:01:02 2026 GMT
            Not After : May 13 21:01:02 2026 GMT
        Subject: CN=47f54a009dfdddaf0851a6f9f9d1f26f5d9c2563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:aa:99:45:c0:3c:31:3e:4e:b6:91:1d:04:db:
                    3b:cb:ab:f5:75:e8:24:a0:07:e6:67:b9:a7:a5:14:
                    4d:6f:45:de:4d:b9:9d:7a:5c:cf:49:64:13:5e:a2:
                    da:39:71:3f:2a:fa:7b:5f:a6:df:66:9e:e2:92:e3:
                    93:9a:b7:c4:36:7c:d7:20:b5:7c:2d:b2:3d:b2:68:
                    f2:38:5d:ad:d6:62:0c:51:70:a3:d7:ed:2e:a3:2f:
                    54:10:8b:f4:a5:7d:79:12:b8:01:6a:09:03:dd:67:
                    2b:1c:5f:5d:9b:b7:69:db:a4:b7:28:89:0f:d6:7a:
                    44:fa:ff:16:6d:16:90:08:d9:72:f3:7f:98:62:d7:
                    67:6b:c6:7e:7b:95:79:ca:c4:9c:06:03:08:03:d6:
                    ce:4d:8d:11:6c:ff:92:4c:64:02:83:e4:a4:81:9a:
                    83:31:54:21:89:af:88:93:35:47:0f:e9:60:d6:ac:
                    f3:20:38:4f:ef:17:d2:f1:5a:cb:a6:98:1a:8e:67:
                    11:f3:81:ff:27:b8:27:99:86:62:f3:45:4e:91:db:
                    10:b8:1f:a0:57:62:f5:3b:a6:92:96:08:c3:bb:c0:
                    cd:33:e6:8e:c8:0e:67:b1:3d:24:24:90:f4:64:ab:
                    5a:4b:52:49:cf:ba:f2:da:8b:82:29:d8:e7:91:43:
                    55:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F5:4A:00:9D:FD:DD:AF:08:51:A6:F9:F9:D1:F2:6F:5D:9C:25:63
            X509v3 Authority Key Identifier:
                keyid:0F:AB:EB:6E:F8:20:D3:D5:2F:05:37:22:33:C5:41:EE:4B:14:F3:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:f9:3f:30:20:5a:88:4e:85:13:56:2c:3c:a4:12:06:da:7b:
         f2:70:70:ca:78:4f:11:1e:19:f8:10:0b:36:bb:6b:77:bc:3e:
         d0:77:02:5f:de:18:32:c3:bf:df:ce:af:3c:6b:09:df:85:ae:
         58:96:35:4c:a0:fc:50:b6:92:90:5e:3b:b6:85:31:3e:f4:4c:
         5f:68:80:af:01:16:35:2c:49:90:b8:83:b9:b4:2f:fd:7f:5b:
         48:a2:f3:8d:f5:33:1a:e1:09:01:f2:9a:04:fb:ca:8f:33:06:
         38:59:f7:e9:2e:b9:54:d2:7e:5a:b7:dc:2d:09:6f:47:99:6e:
         3d:bc:1a:6a:81:c2:df:89:45:a5:b9:cf:db:45:f0:d8:ca:8f:
         fb:29:ba:d6:7c:4b:5b:79:d2:24:1c:1c:20:34:89:07:e9:0c:
         7b:60:5e:c3:ec:d8:20:58:1b:51:af:e7:fe:8e:7c:89:c5:f0:
         3c:3a:3a:a1:c4:01:b1:30:27:b0:50:be:f9:1d:ad:9c:0a:af:
         1d:d3:68:9b:1c:74:0a:cd:6e:78:8b:18:d2:7c:6d:75:c0:b5:
         c5:27:dd:b6:6a:14:33:82:ed:94:e0:9c:79:c5:0b:8b:8f:be:
         ea:61:dc:6c:4a:73:d6:41:fb:d5:44:22:d1:7a:00:61:96:d4:
         fd:12:bd:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/kIBGrAmBSZ/nK1IoyU+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmYWJlYjZlZjgyMGQzZDUyZjA1MzcyMjMzYzU0MWVlNGIx
NGYzNjEwHhcNMjYwNTEyMjEwMTAyWhcNMjYwNTEzMjEwMTAyWjAzMTEwLwYDVQQD
Eyg0N2Y1NGEwMDlkZmRkZGFmMDg1MWE2ZjlmOWQxZjI2ZjVkOWMyNTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqqZRcA8MT5OtpEdBNs7y6v1degk
oAfmZ7mnpRRNb0XeTbmdelzPSWQTXqLaOXE/Kvp7X6bfZp7ikuOTmrfENnzXILV8
LbI9smjyOF2t1mIMUXCj1+0uoy9UEIv0pX15ErgBagkD3WcrHF9dm7dp26S3KIkP
1npE+v8WbRaQCNly83+YYtdna8Z+e5V5ysScBgMIA9bOTY0RbP+STGQCg+SkgZqD
MVQhia+IkzVHD+lg1qzzIDhP7xfS8VrLppgajmcR84H/J7gnmYZi80VOkdsQuB+g
V2L1O6aSlgjDu8DNM+aOyA5nsT0kJJD0ZKtaS1JJz7ry2ouCKdjnkUNVBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEf1SgCd/d2vCFGm+fnR8m9dnCVjMB8GA1UdIwQY
MBaAFA+r6274INPVLwU3IjPFQe5LFPNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDZ2cmJ2Z2cwOVV2QlRjaU04VkI3a3NVODJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mM2Q4MzQtY2VlZC00YmJkLWFiZTEt
NWEzNzEyNjcwNWFkLzEvRDZ2cmJ2Z2cwOVV2QlRjaU04VkI3a3NVODJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9mM2Q4MzQtY2VlZC00YmJkLWFiZTEtNWEzNzEyNjcwNWFk
LzEvRDZ2cmJ2Z2cwOVV2QlRjaU04VkI3a3NVODJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl/k/MCBa
iE6FE1YsPKQSBtp78nBwynhPER4Z+BALNrtrd7w+0HcCX94YMsO/386vPGsJ34Wu
WJY1TKD8ULaSkF47toUxPvRMX2iArwEWNSxJkLiDubQv/X9bSKLzjfUzGuEJAfKa
BPvKjzMGOFn36S65VNJ+WrfcLQlvR5luPbwaaoHC34lFpbnP20Xw2MqP+ym61nxL
W3nSJBwcIDSJB+kMe2Bew+zYIFgbUa/n/o58icXwPDo6ocQBsTAnsFC++R2tnAqv
HdNomxx0Cs1ueIsY0nxtdcC1xSfdtmoUM4LtlOCcecULi4++6mHcbEpz1kH71UQi
0XoAYZbU/RK9aQ==
-----END CERTIFICATE-----
Generated at Wed May 13 01:27:41 2026 by rpki-client