Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
File:                     0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft (raw, json)
Hash identifier:          +ePQHZGqQQhqNghDfIeoBfsYlkShQb9lJXO0Fz4Ro4I=
Subject key identifier:   25:97:FF:BB:EB:27:4C:6E:63:A5:46:89:82:3B:D7:12:80:C0:3B:90
Authority key identifier: D2:DD:4D:DD:53:6F:18:A8:72:CB:AC:15:E5:89:54:2A:ED:CD:07:37
Certificate issuer:       /CN=d2dd4ddd536f18a872cbac15e589542aedcd0737
Certificate serial:       019E209159262716AB7EC97CCB4D9613E38C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
Manifest number:          0AF1
Signing time:             Wed 13 May 2026 09:00:56 +0000
Manifest this update:     Wed 13 May 2026 09:00:56 +0000
Manifest next update:     Thu 14 May 2026 09:00:56 +0000
Files and hashes:         1: 0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl (hash: I86AxEfwBV4VRPewWPqwg2I8z/wjpEq1pbUJnKws78k=)
                          2: X_8Np37khTcPCEtRXHbNQfqvQNE.roa (hash: XNLBBBK7IAMNXci8RcPDaNEkuHX48HSzOY+bMxN50u4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 09:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:91:59:26:27:16:ab:7e:c9:7c:cb:4d:96:13:e3:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2dd4ddd536f18a872cbac15e589542aedcd0737
        Validity
            Not Before: May 13 09:00:56 2026 GMT
            Not After : May 14 09:00:56 2026 GMT
        Subject: CN=2597ffbbeb274c6e63a54689823bd71280c03b90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6d:1c:33:05:d6:4d:4b:ad:3d:db:40:ee:f0:
                    86:79:f4:8d:78:8b:6e:73:ab:2a:a7:aa:a1:32:66:
                    6d:ad:2c:81:92:da:42:98:7b:42:85:a7:16:72:b2:
                    ec:4a:22:1d:4d:34:15:eb:2c:dc:2c:5f:33:5d:aa:
                    1d:c7:8b:c9:d5:ae:9f:5a:51:e1:ce:ee:92:27:d3:
                    a5:6b:19:18:7d:16:74:7e:45:db:c8:94:5f:3a:39:
                    64:1a:fa:c8:cd:94:21:2c:78:75:11:7c:7e:b0:1e:
                    7a:f7:aa:49:59:b6:e5:31:7b:84:d3:ee:35:ed:7b:
                    d2:bf:e1:46:cc:20:a5:50:86:de:08:5c:32:dd:3c:
                    1d:dd:e8:bd:61:22:07:21:44:6d:31:cb:93:a7:e1:
                    65:35:c3:bb:b2:9f:40:19:e8:5a:cb:74:06:be:45:
                    63:20:c6:a7:6d:41:e3:b0:dc:c4:a9:bd:e6:c2:53:
                    22:95:3b:67:80:2f:22:48:22:7c:99:25:b5:1a:81:
                    7d:60:ef:79:34:7d:6f:09:d5:70:fb:80:29:d6:e6:
                    33:2c:21:96:21:fa:14:b5:c9:86:4c:05:71:37:29:
                    18:93:a2:57:28:c7:25:1d:78:18:ff:14:0f:3b:ff:
                    49:1c:06:77:90:8a:2c:a4:53:d0:3c:ab:90:73:b6:
                    59:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:97:FF:BB:EB:27:4C:6E:63:A5:46:89:82:3B:D7:12:80:C0:3B:90
            X509v3 Authority Key Identifier:
                keyid:D2:DD:4D:DD:53:6F:18:A8:72:CB:AC:15:E5:89:54:2A:ED:CD:07:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:46:6f:ef:16:5c:79:58:91:63:e1:f9:07:a2:66:42:2b:ee:
         98:79:42:1c:b7:3b:84:cc:fa:e7:17:81:3e:65:db:41:c2:63:
         11:22:f9:ad:c1:cd:41:d9:d7:90:99:38:16:c9:4d:d2:1a:41:
         0b:19:67:1c:32:42:43:44:f8:16:cc:f2:55:ca:f3:b7:3c:e3:
         b7:13:dc:bf:50:df:22:98:2d:64:f1:51:17:61:01:78:60:e8:
         f6:58:38:0b:ba:4c:2a:60:14:41:9c:f8:92:b0:d2:ce:4b:84:
         84:e9:d1:a5:19:ba:f2:90:33:84:fc:8b:ba:01:94:07:42:b5:
         6d:22:0c:75:19:ce:b4:90:96:0c:36:b5:df:cb:2d:e2:31:9f:
         0b:5f:3a:99:2c:1a:21:d3:6a:1b:8e:8a:42:39:69:4c:7c:85:
         84:28:3c:6c:6c:db:2c:0e:04:ba:21:10:75:d0:33:47:67:55:
         a1:2d:c9:cf:6d:6f:ee:67:82:3d:43:fe:b4:d6:40:ad:9e:b9:
         61:44:58:67:a3:c2:7b:50:2b:7e:48:74:b1:76:6e:c2:36:b5:
         03:c4:93:81:04:a7:73:91:b4:7c:ec:8d:18:b4:b9:92:7b:6b:
         c7:69:e4:6d:79:96:9b:f0:e2:64:ea:c2:90:1d:b1:e4:1b:84:
         d8:f4:86:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:45:54 2026 by rpki-client