Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft
File:                     mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft (raw, json)
Hash identifier:          fydmwTllcwVXchAlOkDBm7AUwaVn+2L5yQXFz30H4EY=
Subject key identifier:   86:E5:01:18:BD:3F:6F:70:27:F2:F4:B9:69:BC:9F:6C:99:2C:8E:17
Authority key identifier: 98:41:8C:C6:55:0D:FD:B1:89:99:69:A6:02:7E:43:5A:1B:0B:13:41
Certificate issuer:       /CN=98418cc6550dfdb1899969a6027e435a1b0b1341
Certificate serial:       019E1EA2E3A7553467BFA6B5661ED25EB732
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mEGMxlUN_bGJmWmmAn5DWhsLE0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft
Manifest number:          0F10
Signing time:             Wed 13 May 2026 00:00:52 +0000
Manifest this update:     Wed 13 May 2026 00:00:52 +0000
Manifest next update:     Thu 14 May 2026 00:00:52 +0000
Files and hashes:         1: mEGMxlUN_bGJmWmmAn5DWhsLE0E.crl (hash: 3IeAcZaY1dgDakU11rlGnbAn0zRJN+XfcXOWTBIAsxM=)
                          2: ymwnzHfZGdMRFGEeM7VXK-BgXAw.roa (hash: zIUfyqH90eqwbG4q9Ekkq/Mb1Io/2HvKy6Zq+oTaP8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mEGMxlUN_bGJmWmmAn5DWhsLE0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a2:e3:a7:55:34:67:bf:a6:b5:66:1e:d2:5e:b7:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98418cc6550dfdb1899969a6027e435a1b0b1341
        Validity
            Not Before: May 13 00:00:52 2026 GMT
            Not After : May 14 00:00:52 2026 GMT
        Subject: CN=86e50118bd3f6f7027f2f4b969bc9f6c992c8e17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:77:c4:bb:06:01:c2:2b:24:9e:c2:ac:86:a5:
                    27:ac:9b:1d:25:13:42:01:80:a0:c8:cc:70:ed:d4:
                    03:74:75:1c:f6:37:55:34:64:e0:db:0a:73:07:ac:
                    92:03:c1:f9:78:c0:99:6b:75:ab:05:c2:b6:bc:2a:
                    f8:8b:14:64:39:5b:9a:25:39:7f:21:87:3d:d4:82:
                    fb:c2:73:ee:9f:08:2f:80:41:46:59:08:01:6a:f8:
                    55:52:27:a8:ab:c6:b3:79:2e:e2:6a:5a:c9:0a:50:
                    79:5e:d5:5a:48:3e:ee:a1:53:09:7c:42:e6:54:86:
                    27:ed:43:a3:b0:ac:dc:a5:49:40:58:8b:38:a1:d5:
                    40:1e:40:22:63:08:fa:c0:e9:a8:13:b0:49:89:8f:
                    fe:a5:09:39:e6:e6:44:dd:ff:b0:5d:38:b8:8b:02:
                    4c:b1:74:50:0a:af:bb:79:76:6b:39:09:c7:92:ec:
                    05:93:31:4a:e3:9f:ba:d2:82:30:71:83:6e:b7:47:
                    d9:0a:ec:c6:5b:c4:52:88:82:8b:a7:c5:4e:f0:87:
                    9e:e0:f8:c5:25:6b:ce:a2:62:66:aa:ee:ed:4e:17:
                    10:ab:9c:56:22:e0:2f:9b:1e:d6:b8:f0:53:47:83:
                    2c:af:68:05:dd:bc:ff:11:a8:0c:e2:b1:71:d1:8b:
                    3e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:E5:01:18:BD:3F:6F:70:27:F2:F4:B9:69:BC:9F:6C:99:2C:8E:17
            X509v3 Authority Key Identifier:
                keyid:98:41:8C:C6:55:0D:FD:B1:89:99:69:A6:02:7E:43:5A:1B:0B:13:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEGMxlUN_bGJmWmmAn5DWhsLE0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:91:af:e7:26:7c:19:0e:c8:7f:30:8d:6d:91:dd:d1:84:65:
         ee:5f:9f:eb:8f:a7:29:5a:db:5b:84:94:7a:e1:a1:1d:25:e0:
         b4:9b:f2:5d:b1:38:65:9f:e1:8f:fe:7a:99:63:b4:e3:b9:fa:
         e4:9b:d5:88:86:04:5f:64:67:f3:c3:75:e9:04:9d:1d:d1:aa:
         af:2b:19:ee:9b:79:a6:f1:6e:a5:c1:6a:42:fa:37:63:08:ab:
         2b:89:6e:f4:90:96:a7:56:48:e4:f4:b2:bc:71:4b:22:e2:65:
         cd:fc:9a:8b:a0:b4:d7:77:69:51:53:00:46:92:77:ae:e9:c8:
         fd:f4:ba:8b:a2:01:01:b4:6c:9b:d7:2a:19:65:e9:7d:3c:d4:
         a7:b3:b0:48:8b:67:46:9d:78:c5:52:9d:00:08:ab:f5:d6:7d:
         19:eb:eb:83:46:72:35:a2:be:c4:06:e1:c7:40:c6:71:81:9a:
         fc:bb:f5:62:c0:86:43:a3:1b:67:6c:f3:80:8e:8a:91:cd:29:
         64:c7:8a:39:c3:1c:3f:e9:98:b9:fa:70:68:f3:c0:8e:64:42:
         52:55:93:f4:6a:96:04:32:a0:a1:a3:70:08:3c:f5:c6:ce:ae:
         04:aa:ac:30:b0:ad:bd:f7:53:70:41:75:8d:58:c5:aa:45:b0:
         4a:55:1a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:03:27 2026 by rpki-client