Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
File:                     28rKr4rBOpZKs9Rhk1hByOHJO4A.mft (raw, json)
Hash identifier:          qn8Pp6vDHCb8Wv2LLmc7PKNbLZ3Fu95z9bKgI1Om0SM=
Subject key identifier:   38:48:F1:49:29:55:DF:9B:AA:F3:DB:15:C8:ED:DA:91:93:10:CF:58
Authority key identifier: DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80
Certificate issuer:       /CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
Certificate serial:       019E1DFE214AFC5097D4494844DA81FCAA27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
Manifest number:          1907
Signing time:             Tue 12 May 2026 21:00:53 +0000
Manifest this update:     Tue 12 May 2026 21:00:53 +0000
Manifest next update:     Wed 13 May 2026 21:00:53 +0000
Files and hashes:         1: 28rKr4rBOpZKs9Rhk1hByOHJO4A.crl (hash: /HPi66sVZyAreFMkr8O6m/iI95r3ceJIgFkKYf1EsFQ=)
                          2: 7P-BWi-f3LglYNhsYLkhHyuFgak.roa (hash: 3XsWUR6dZLjAmN/rCOKI/7RzPiod/YP2TrC/UpajbOI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:21:4a:fc:50:97:d4:49:48:44:da:81:fc:aa:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
        Validity
            Not Before: May 12 21:00:53 2026 GMT
            Not After : May 13 21:00:53 2026 GMT
        Subject: CN=3848f1492955df9baaf3db15c8edda919310cf58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:9d:ff:ed:cb:01:9e:98:f9:7c:9e:29:4e:10:
                    a2:ae:3d:7e:c5:50:87:14:28:6d:b7:1e:dd:e9:00:
                    ed:e1:7d:21:42:f9:03:0d:4b:14:ca:83:3d:d2:23:
                    f9:bf:9d:6f:b9:53:d4:f9:03:29:00:bc:e9:8c:41:
                    b0:ec:02:8e:3e:29:65:4a:ba:82:f4:f8:03:fc:6a:
                    ea:70:2c:68:fe:0b:43:00:33:90:d5:85:fd:8a:31:
                    dd:66:e6:5d:e1:e7:80:62:46:5f:33:95:d7:d0:64:
                    7b:ea:0f:8b:74:64:a2:71:1c:63:69:39:21:8d:c0:
                    63:99:2b:3e:ab:b4:ab:e6:9d:98:e2:bb:de:51:23:
                    41:2f:48:f2:d1:ca:9f:38:d5:d6:ca:95:47:de:ee:
                    00:ca:26:7e:0e:7f:42:f5:3d:1d:7f:25:c9:22:45:
                    a8:a1:e8:05:a2:b9:d9:06:6a:e2:05:20:bd:f2:91:
                    dd:5d:ab:7c:1a:37:b5:fc:5d:1b:e1:c9:07:2a:0b:
                    3d:6d:6a:92:9d:be:f4:99:b4:d0:2d:da:e8:d8:72:
                    3e:18:e1:87:b4:da:bf:23:e5:25:7a:25:a8:39:98:
                    c8:c7:19:b0:36:d2:63:a4:99:f9:c4:fd:b2:00:f5:
                    85:2f:64:21:72:7c:fb:45:18:47:f3:f1:0d:e2:f1:
                    cc:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:48:F1:49:29:55:DF:9B:AA:F3:DB:15:C8:ED:DA:91:93:10:CF:58
            X509v3 Authority Key Identifier:
                keyid:DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:87:4b:67:c0:07:4c:57:5a:86:c0:73:99:88:9e:69:36:84:
         62:a2:be:e6:30:77:9c:51:d2:97:90:16:32:dd:2a:63:f2:4e:
         da:16:62:11:ff:a3:89:8c:74:4a:35:53:61:59:1f:52:ae:70:
         75:10:7b:3c:40:0b:8d:92:26:90:49:10:2a:1c:43:85:f9:b4:
         1c:22:8c:f9:22:25:0b:2a:68:dc:c6:a2:f5:97:c0:a4:08:c8:
         6a:ac:ad:85:3d:57:df:de:87:fa:39:6a:84:09:0f:c7:b1:0f:
         9e:97:1c:82:fc:9b:98:6e:0f:1d:06:6e:f6:f8:c6:21:20:53:
         f1:ec:8c:b1:da:51:5b:3f:db:f9:61:8a:2e:3c:7c:57:f4:b3:
         35:42:c5:ea:d3:53:25:03:be:e7:6b:29:cd:ae:0c:13:2d:76:
         c9:47:9e:d7:a6:29:03:3d:26:2d:a4:1f:2e:2e:c8:b6:8d:27:
         36:68:7e:ad:ab:6f:71:de:1d:8c:11:de:87:48:84:89:39:75:
         bd:73:80:c4:ab:03:d9:e4:43:de:98:c5:87:eb:8e:66:69:87:
         3f:94:cf:5a:e6:96:28:c2:a0:b8:29:1c:cf:73:41:16:d6:85:
         52:c9:e9:34:71:87:d8:15:ee:39:22:9d:98:cb:12:69:b6:81:
         10:f6:ce:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:36:20 2026 by rpki-client