Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
File:                     5F0K3ClN02bfatqIATTb0OaIzPc.mft (raw, json)
Hash identifier:          tC0QmFa2Nk0RKHwXO0UsOb/aVvZ2Pnu48YDCsr9JOsQ=
Subject key identifier:   03:D5:61:94:93:56:C7:E9:79:26:20:97:82:F0:53:97:5C:EB:DF:AC
Authority key identifier: E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7
Certificate issuer:       /CN=e45d0adc294dd366df6ada880134dbd0e688ccf7
Certificate serial:       019E1C10258FC19FE2A033EA00836D48A739
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
Manifest number:          1907
Signing time:             Tue 12 May 2026 12:01:20 +0000
Manifest this update:     Tue 12 May 2026 12:01:20 +0000
Manifest next update:     Wed 13 May 2026 12:01:20 +0000
Files and hashes:         1: 5F0K3ClN02bfatqIATTb0OaIzPc.crl (hash: 44BkyMhdqPYs2wbagzCEss3efpUBlYMAra24F2qTFoY=)
                          2: eVHX86Z5BUrMshf-zyfKQYxN0ao.roa (hash: 52NfErShygwUz/Jha+lSZaO5oAHArVutPPK1QEHMLQU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 12:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:10:25:8f:c1:9f:e2:a0:33:ea:00:83:6d:48:a7:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e45d0adc294dd366df6ada880134dbd0e688ccf7
        Validity
            Not Before: May 12 12:01:20 2026 GMT
            Not After : May 13 12:01:20 2026 GMT
        Subject: CN=03d561949356c7e97926209782f053975cebdfac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9f:c3:14:97:f4:ba:8b:0d:aa:4b:27:01:ad:
                    3a:9f:55:af:d4:67:e3:46:c7:c5:dd:11:e3:15:47:
                    9a:22:90:9e:14:49:4f:98:1a:3b:a9:e1:12:eb:d4:
                    84:3f:ff:1e:5c:4e:a2:2d:a7:d8:54:21:27:6b:d1:
                    b5:02:77:c0:a5:3d:e3:6d:2e:22:ab:8b:44:d5:b6:
                    af:7e:07:fa:97:26:9c:84:05:65:15:33:ff:c2:b2:
                    ec:b9:60:be:26:50:0f:a0:03:ed:67:e7:8d:0a:bb:
                    ab:ad:7f:6a:f5:08:3c:14:10:1d:5d:ce:12:d9:6b:
                    55:0e:b6:e3:7d:3d:de:2b:d6:6b:ee:4b:af:90:20:
                    56:b6:97:52:77:4a:fe:c6:3a:a0:d3:45:83:2d:bd:
                    05:57:17:e4:40:7c:eb:d0:ae:c7:b7:8a:30:ad:ec:
                    0d:f5:b9:f5:02:c2:c5:9d:47:b4:f8:6a:9f:61:d4:
                    c7:5a:cb:74:42:1d:44:c3:12:2d:81:d7:e6:a6:13:
                    24:56:59:40:21:b2:02:1f:b2:dc:01:2d:e3:64:4b:
                    eb:53:6d:10:36:b2:c3:62:9d:08:7f:ef:0d:95:38:
                    66:f3:cf:14:69:95:0a:86:04:59:f1:10:80:00:49:
                    3b:ad:80:29:40:6c:93:8d:11:72:12:3c:77:88:51:
                    d1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D5:61:94:93:56:C7:E9:79:26:20:97:82:F0:53:97:5C:EB:DF:AC
            X509v3 Authority Key Identifier:
                keyid:E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:39:38:2d:ea:36:ee:65:37:3e:07:c1:b4:ee:cb:65:fb:d1:
         1c:50:17:cb:ac:36:8c:e3:d5:67:15:5c:57:51:cc:e8:cc:ff:
         80:7e:99:92:1b:bc:1d:5f:f2:22:92:ce:a2:ce:1a:d3:65:c3:
         90:7c:8e:90:9a:3a:57:23:15:45:c4:32:28:9e:5a:8d:0f:dd:
         da:18:33:39:5b:b9:59:4f:10:df:48:a0:7b:f9:46:ba:4e:42:
         ec:50:a0:be:d3:e9:8c:7f:81:6d:81:8b:76:c5:39:a5:ce:ad:
         07:b1:5b:97:dc:b1:b4:b5:80:5e:6b:8a:63:cf:bd:40:cd:2b:
         23:eb:e2:c8:7e:f7:ab:e9:35:44:5f:0f:db:dc:eb:3a:f2:36:
         7e:22:b0:3d:37:0b:01:da:7e:64:34:82:24:c2:6e:2a:54:ee:
         e1:04:6f:6a:e2:8e:37:e4:7d:d9:66:c3:bc:2f:b7:e1:be:ab:
         ff:f9:b9:a2:5c:3a:1c:e8:80:d6:21:1f:0a:fa:af:47:5e:a3:
         51:b6:92:69:5e:df:97:93:2c:da:99:b5:69:a3:69:4e:48:9a:
         77:60:61:e9:be:13:1e:e2:1d:d7:cc:c0:b4:41:43:1c:f9:03:
         6c:3c:9a:94:f9:85:ca:0e:b1:80:11:f5:50:d3:1d:32:66:ed:
         8f:25:54:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:43:53 2026 by rpki-client