Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft
File:                     0lqeLErIvAK8P_iSWsExdNLUeMQ.mft (raw, json)
Hash identifier:          hTaRf8gVzbfL3QyVBhh/QVPV/2jms3lbmPJ1zFJtHa0=
Subject key identifier:   44:F4:02:D0:B0:71:5E:BE:78:96:0B:D7:36:42:4B:C9:CD:33:50:4F
Authority key identifier: D2:5A:9E:2C:4A:C8:BC:02:BC:3F:F8:92:5A:C1:31:74:D2:D4:78:C4
Certificate issuer:       /CN=d25a9e2c4ac8bc02bc3ff8925ac13174d2d478c4
Certificate serial:       019E1DC7A39FEB0133876D8B67E06DB040D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0lqeLErIvAK8P_iSWsExdNLUeMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft
Manifest number:          08C6
Signing time:             Tue 12 May 2026 20:01:23 +0000
Manifest this update:     Tue 12 May 2026 20:01:23 +0000
Manifest next update:     Wed 13 May 2026 20:01:23 +0000
Files and hashes:         1: 0lqeLErIvAK8P_iSWsExdNLUeMQ.crl (hash: E8RZzIPOQ5KXVzQtPRiVWQfoKtG1m3Nno0OGfgAfCDY=)
                          2: JNb8qAOe82PBo3QGsaNX-y91s-c.roa (hash: N4b3iRyhTXcqX/rj0VSG64RSyTYz/SivUVU9/ij649s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0lqeLErIvAK8P_iSWsExdNLUeMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:a3:9f:eb:01:33:87:6d:8b:67:e0:6d:b0:40:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d25a9e2c4ac8bc02bc3ff8925ac13174d2d478c4
        Validity
            Not Before: May 12 20:01:23 2026 GMT
            Not After : May 13 20:01:23 2026 GMT
        Subject: CN=44f402d0b0715ebe78960bd736424bc9cd33504f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:67:45:2b:49:5f:08:f9:fb:e8:b2:36:e8:a2:
                    b2:21:a3:22:7b:c1:ef:f8:04:c2:a1:7c:9a:90:32:
                    c7:29:19:5b:e7:3f:3f:d7:de:89:99:f3:44:f5:fe:
                    4a:21:03:e9:c0:a8:f7:f6:f3:22:28:d8:0f:5b:ff:
                    48:2a:d8:8f:a8:17:09:f3:b7:41:75:4b:15:58:09:
                    09:20:05:df:5b:45:6e:59:17:32:9d:47:4d:9f:38:
                    af:78:33:2a:66:31:05:1e:97:ec:74:ac:c6:51:3e:
                    0b:79:ef:d8:99:d2:92:8e:91:57:75:4e:ef:f1:29:
                    db:a8:3a:d7:0b:1b:77:47:00:31:f1:26:db:dd:a7:
                    24:d6:85:ec:ca:cb:0b:45:25:b5:b4:72:e2:3a:fa:
                    c7:9a:90:b0:96:5f:b3:0a:b3:d6:dc:10:56:cc:0c:
                    00:9f:0a:68:bc:19:8a:fa:f5:3f:8a:00:dd:90:4d:
                    5c:11:c9:de:ac:ba:63:4b:31:7d:71:82:43:51:00:
                    aa:3e:d7:4b:25:33:c4:71:cd:1f:ab:7d:17:55:a5:
                    44:8d:70:81:8d:c1:05:c7:21:17:94:29:d6:13:9f:
                    b0:fb:ff:d3:2c:26:3a:b9:ac:74:b7:6f:65:46:01:
                    7f:b7:3e:80:8e:d3:d4:17:ab:01:9e:17:ca:ec:14:
                    8a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F4:02:D0:B0:71:5E:BE:78:96:0B:D7:36:42:4B:C9:CD:33:50:4F
            X509v3 Authority Key Identifier:
                keyid:D2:5A:9E:2C:4A:C8:BC:02:BC:3F:F8:92:5A:C1:31:74:D2:D4:78:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lqeLErIvAK8P_iSWsExdNLUeMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:7c:73:03:58:54:95:73:11:b2:b1:ba:c5:0b:29:9b:93:35:
         4b:91:e3:2a:57:19:87:05:76:87:fb:75:9f:6c:b3:3e:b2:bd:
         bc:27:76:d1:00:d1:ad:5f:07:f3:e4:bb:a7:98:00:23:36:a2:
         45:e7:5b:c4:b2:3d:38:a8:40:65:73:a7:b6:ed:83:6a:62:42:
         36:63:eb:cb:1e:ff:51:d2:f5:db:35:0d:b9:30:58:99:1a:43:
         55:c7:f7:49:c3:7d:74:9f:98:8b:14:af:e5:2d:94:ca:b9:ba:
         c8:2d:d1:cd:0f:4e:f4:2d:bd:67:d7:bc:1e:a2:26:0c:78:9c:
         c2:37:9a:d9:50:57:7e:1d:da:79:43:c0:c7:19:1e:24:b5:4e:
         cc:be:87:d0:39:7a:5e:9a:77:f8:66:ce:c7:1f:b6:f0:21:7c:
         0e:25:26:40:3d:75:d4:bd:7b:78:0d:65:f1:6c:38:64:76:b7:
         68:b3:3d:21:f3:8a:6f:8e:db:48:8d:83:52:39:ca:fb:ab:c2:
         76:c1:2e:5a:6f:f0:55:ea:31:cd:70:0a:26:d4:d1:1b:8e:1f:
         bf:c2:17:c2:2e:69:95:cd:b1:78:c4:b5:e9:53:5e:9e:aa:fe:
         dd:d6:1c:52:a1:bc:57:f3:5a:54:13:82:78:15:c0:e2:f4:19:
         11:3c:50:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:13:20 2026 by rpki-client