Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
File:                     gXyxTOQBSsMmnXDu6onIcFWxdvE.mft (raw, json)
Hash identifier:          0InmP114tng3d2MnksLzjI4ThWP7cla/GinDHTM5D8w=
Subject key identifier:   D9:D9:00:3C:0D:A7:FB:61:7C:97:C1:B6:5A:4C:2D:C4:AE:ED:1C:C3
Authority key identifier: 81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1
Certificate issuer:       /CN=817cb14ce4014ac3269d70eeea89c87055b176f1
Certificate serial:       019E1D90CA26CC431CDBF7B108335106836F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
Manifest number:          09E4
Signing time:             Tue 12 May 2026 19:01:28 +0000
Manifest this update:     Tue 12 May 2026 19:01:28 +0000
Manifest next update:     Wed 13 May 2026 19:01:28 +0000
Files and hashes:         1: gXyxTOQBSsMmnXDu6onIcFWxdvE.crl (hash: hxifOLIAS3+H+eC2iQBjN/m5SWATZEYZdwQ/kb0F4dU=)
                          2: qdUh2hSoqgeqIRg-X_UezX9LadQ.roa (hash: T5mdwLAzJSWrOE2roB/OPAtD4ZvRlYtzJ6Bor5XITOA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:ca:26:cc:43:1c:db:f7:b1:08:33:51:06:83:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=817cb14ce4014ac3269d70eeea89c87055b176f1
        Validity
            Not Before: May 12 19:01:28 2026 GMT
            Not After : May 13 19:01:28 2026 GMT
        Subject: CN=d9d9003c0da7fb617c97c1b65a4c2dc4aeed1cc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:10:bc:ed:a7:54:4b:40:16:29:44:d3:da:00:
                    46:62:b4:3e:96:ca:b7:50:2d:fd:6f:59:38:23:b3:
                    9a:5f:53:de:df:67:2c:48:ac:18:6e:91:78:dc:44:
                    78:95:92:fd:16:8c:6e:37:42:ae:44:29:dd:62:50:
                    eb:80:73:f5:87:94:dd:e6:57:83:16:6a:8b:7a:f0:
                    dc:88:66:f0:cf:59:c1:c5:7b:92:fa:78:24:74:6e:
                    2a:a8:37:d3:75:cb:3b:d1:33:4e:f6:3e:a4:2c:44:
                    9c:a7:4b:0e:1d:f4:f8:d9:61:83:87:56:32:13:57:
                    1a:6c:b2:5a:ff:c9:eb:17:a9:7a:5a:30:e0:ec:79:
                    b6:ee:61:23:e0:9b:9d:b4:71:01:12:cc:5c:f1:e7:
                    bb:96:42:62:09:89:a4:9d:a9:d4:03:6d:98:7b:3b:
                    30:41:e7:59:d3:77:bf:c6:53:d5:02:b5:e4:20:43:
                    5f:99:e5:18:09:42:6b:06:08:2e:75:8e:9f:2e:2a:
                    fa:55:61:e8:a0:a4:0e:a0:ec:0d:de:e9:5b:08:d9:
                    f6:76:d4:38:34:5a:30:11:97:fe:03:aa:83:18:71:
                    99:e0:fa:2d:73:09:1d:85:30:f3:47:78:17:cd:8a:
                    38:b7:2e:f1:fa:af:12:e0:ed:28:33:c5:37:ee:fc:
                    88:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D9:00:3C:0D:A7:FB:61:7C:97:C1:B6:5A:4C:2D:C4:AE:ED:1C:C3
            X509v3 Authority Key Identifier:
                keyid:81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:3b:90:99:76:de:0d:d0:8e:de:85:0e:6f:2a:66:c1:00:72:
         d6:55:f1:6c:13:5c:9c:b6:1f:82:4f:2b:f7:e8:bf:33:78:6f:
         19:e4:8d:5a:e7:01:c4:bc:63:53:60:8b:2d:ae:25:a0:5c:43:
         6d:8c:3f:cd:24:cb:ac:ba:d6:de:60:06:8c:5e:43:89:b9:53:
         0b:57:ee:f4:73:77:fc:7b:21:57:d4:8d:02:61:7c:73:58:7e:
         b9:42:9f:ff:96:85:c3:7f:6e:65:3b:7f:e5:25:e4:04:17:e9:
         60:c1:9c:00:7f:3a:0d:e4:2d:5c:66:68:56:26:f3:00:25:b2:
         9c:8a:d9:79:1c:8f:b9:d7:14:b6:c8:8e:cb:8a:bc:96:16:97:
         e3:3e:0c:b0:8e:9d:47:b4:a8:75:5c:4b:27:7c:8f:02:47:03:
         ca:95:af:2a:97:56:6d:93:e5:86:03:a5:ef:d4:79:b6:5c:91:
         de:d1:73:2d:73:be:73:42:8b:d5:8a:1b:15:a0:f3:06:54:a0:
         ca:4d:32:88:dd:f6:0a:07:78:33:b8:b5:f8:b1:27:a9:b1:1f:
         f4:70:ae:5b:a2:50:20:7a:5b:2b:e4:0a:b8:a3:ab:06:8e:1b:
         13:ec:dd:3e:b0:f6:cb:66:ee:a2:b0:1d:65:85:dd:96:ae:dd:
         7c:57:3f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:18:54 2026 by rpki-client