Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft
File:                     ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft (raw, json)
Hash identifier:          eGclD2dLtBCPdibh4+ahBHUza+4ihZQiU32pUMXE3ZA=
Subject key identifier:   21:CA:E6:EC:6A:24:7D:62:D2:61:E5:21:6F:9E:E4:57:62:4E:57:40
Authority key identifier: 92:C0:CF:04:A1:4F:6F:F7:8B:18:F0:C0:07:57:88:22:0A:F7:39:1C
Certificate issuer:       /CN=92c0cf04a14f6ff78b18f0c0075788220af7391c
Certificate serial:       019E1EA3307A96DE81DA4FA4EC7A585FF11F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ksDPBKFPb_eLGPDAB1eIIgr3ORw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft
Manifest number:          011E
Signing time:             Wed 13 May 2026 00:01:11 +0000
Manifest this update:     Wed 13 May 2026 00:01:11 +0000
Manifest next update:     Thu 14 May 2026 00:01:11 +0000
Files and hashes:         1: H-oaoSxJaeI8ELGKoMHlBqtTmBI.roa (hash: pqm+tBEvB6VJYlLNeVfb+SIF3kwpRFZv8Qqe2+lb3Y4=)
                          2: ksDPBKFPb_eLGPDAB1eIIgr3ORw.crl (hash: NtMYo1nBMBrCrlLKB52Iy8a/mxB5irb+fVKPeoYBqSk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ksDPBKFPb_eLGPDAB1eIIgr3ORw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:30:7a:96:de:81:da:4f:a4:ec:7a:58:5f:f1:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92c0cf04a14f6ff78b18f0c0075788220af7391c
        Validity
            Not Before: May 13 00:01:11 2026 GMT
            Not After : May 14 00:01:11 2026 GMT
        Subject: CN=21cae6ec6a247d62d261e5216f9ee457624e5740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:96:92:38:20:b2:4f:e9:5f:43:71:0a:31:38:
                    17:31:86:c4:4f:51:a2:24:b0:1f:7f:35:66:e0:04:
                    c5:a9:e6:af:77:c0:12:a0:d7:db:b5:81:4d:eb:57:
                    bc:ac:48:70:ed:14:f4:7b:0f:a3:d3:a2:17:22:a6:
                    b9:36:d5:f7:95:67:6d:8f:c4:e0:ee:c9:55:7a:10:
                    d8:81:f4:94:0d:62:a0:d8:cf:a5:d7:cb:35:85:b1:
                    18:57:30:4c:2b:71:68:93:4e:16:f2:9b:bd:e1:0c:
                    f5:ac:b6:36:5d:b6:33:9b:ab:98:f9:b5:37:18:63:
                    2c:0e:a4:1c:c1:51:cd:05:85:61:b4:d0:21:19:8c:
                    52:56:91:f0:43:f6:d9:47:b4:30:51:fb:85:5e:c6:
                    ef:ca:5c:08:91:3f:2d:b3:cd:86:b6:bc:ee:c3:5f:
                    29:b2:04:29:45:fb:63:04:87:9e:57:34:5b:54:7a:
                    69:1e:db:f3:ea:49:e5:66:c7:53:7b:fe:59:96:6a:
                    71:ce:1b:7d:4f:ab:00:e6:bb:79:3b:0d:03:cb:b8:
                    31:ec:a5:68:73:2f:13:02:e4:d9:bf:ca:23:ff:85:
                    9d:7f:39:ea:ff:66:6e:46:35:cb:38:43:00:0a:b8:
                    be:9a:b3:c7:f7:7d:c7:a1:a9:ee:a9:88:5d:56:1f:
                    3d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:CA:E6:EC:6A:24:7D:62:D2:61:E5:21:6F:9E:E4:57:62:4E:57:40
            X509v3 Authority Key Identifier:
                keyid:92:C0:CF:04:A1:4F:6F:F7:8B:18:F0:C0:07:57:88:22:0A:F7:39:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksDPBKFPb_eLGPDAB1eIIgr3ORw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:59:1d:f9:fb:55:10:3b:28:9a:4d:6c:40:6c:da:2a:88:c9:
         30:62:a2:77:30:eb:42:b0:e6:88:dc:19:05:69:13:95:1f:38:
         02:6e:0b:d4:9b:d8:49:f2:de:cf:af:f2:1e:da:e8:42:65:c1:
         70:b7:83:a0:1f:84:a2:6e:fb:29:6a:1f:4d:e3:ec:2f:c2:3d:
         45:76:8a:19:bb:6b:34:56:5b:f3:04:d2:94:b4:61:3b:fa:1a:
         6e:35:c9:e4:69:04:47:58:5a:dd:9f:fe:23:eb:4d:50:73:17:
         2d:bb:da:44:ac:da:16:a7:a6:fd:4c:01:b6:66:77:6f:f2:d2:
         71:3a:f5:59:54:66:9d:e3:d3:61:e4:64:dd:92:94:4e:fc:63:
         3a:94:21:8e:d6:61:77:47:c2:61:45:57:e0:4d:8c:e3:19:ad:
         2b:96:55:6b:e8:f3:cd:6d:c4:54:b7:ca:fe:43:22:b8:26:fd:
         39:fc:59:e8:b9:a4:6a:95:d2:e9:b8:c1:78:16:ea:53:c3:04:
         cf:59:61:94:07:57:bc:eb:07:33:9f:35:2f:53:04:d5:e8:da:
         4b:2e:c5:5a:20:69:75:1e:b8:1b:ce:b8:fb:b6:85:79:7e:cf:
         da:00:a5:9e:9a:c5:29:e9:e1:78:09:70:fe:e8:7c:c4:71:37:
         ef:37:91:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:32:33 2026 by rpki-client