Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
File:                     1wYe6H9bVfGQOis3BOuglEqwxaw.mft (raw, json)
Hash identifier:          2HoWAzJ+MeaAOnUUT85o+nGKNq+q1SpziiU6l3y+5Y8=
Subject key identifier:   4C:01:30:8A:FC:84:F6:BB:9E:94:D1:83:B2:A9:37:07:27:B1:47:2D
Authority key identifier: D7:06:1E:E8:7F:5B:55:F1:90:3A:2B:37:04:EB:A0:94:4A:B0:C5:AC
Certificate issuer:       /CN=d7061ee87f5b55f1903a2b3704eba0944ab0c5ac
Certificate serial:       019E1D594FFAA29E5049D17BD8B8239E4CA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
Manifest number:          151F
Signing time:             Tue 12 May 2026 18:00:52 +0000
Manifest this update:     Tue 12 May 2026 18:00:52 +0000
Manifest next update:     Wed 13 May 2026 18:00:52 +0000
Files and hashes:         1: 1wYe6H9bVfGQOis3BOuglEqwxaw.crl (hash: u5L/MdWcWBg2eOvT0nmQwj50v8staxhyaURZNg/GET4=)
                          2: qRy6ONe0R3SK-tgWlZzQz3yXI-8.roa (hash: 2lNtTexaTuQ64Sk2B9hHpKofwKN/Vg7RcO43ReydSmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:4f:fa:a2:9e:50:49:d1:7b:d8:b8:23:9e:4c:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7061ee87f5b55f1903a2b3704eba0944ab0c5ac
        Validity
            Not Before: May 12 18:00:52 2026 GMT
            Not After : May 13 18:00:52 2026 GMT
        Subject: CN=4c01308afc84f6bb9e94d183b2a9370727b1472d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:cd:a7:81:89:cd:ef:a5:ae:41:91:86:e7:43:
                    67:f5:7f:02:c3:c7:45:a9:61:82:6b:19:43:b5:40:
                    40:e8:02:7b:73:05:21:d0:b6:dd:39:ee:7a:1c:b3:
                    4e:f3:56:de:1f:36:17:ab:68:c0:0c:69:d8:07:50:
                    1a:90:9b:34:39:a4:2a:fd:b9:6a:af:15:8f:be:41:
                    8a:cb:14:ee:4b:62:b3:9e:a7:ef:7c:56:99:86:95:
                    cd:d3:45:55:f2:9a:72:f5:78:b3:91:9c:55:c7:a0:
                    9b:86:01:95:44:1d:a7:69:49:25:7e:a8:fb:89:78:
                    55:11:fd:a7:a8:02:08:78:29:cf:35:fd:23:29:84:
                    0b:c1:b1:42:ba:5b:6b:25:3a:2f:fe:cf:af:25:cb:
                    96:c5:ad:6e:de:82:ec:73:33:18:4a:26:25:1f:28:
                    b9:31:ff:d7:12:2d:2d:b1:fb:b1:37:17:fe:20:97:
                    57:17:ac:01:60:8e:21:8e:43:6a:93:b1:9f:f6:2f:
                    70:55:c7:11:78:c1:3f:88:a3:9c:f6:0c:ca:07:77:
                    e0:a2:26:fd:6e:de:8e:0c:ff:4e:ae:a9:46:df:a7:
                    93:41:84:b8:5b:6c:97:fc:28:06:b3:b6:d9:6b:c7:
                    eb:47:c4:91:65:c3:33:42:c4:cc:77:3d:63:eb:50:
                    c0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:01:30:8A:FC:84:F6:BB:9E:94:D1:83:B2:A9:37:07:27:B1:47:2D
            X509v3 Authority Key Identifier:
                keyid:D7:06:1E:E8:7F:5B:55:F1:90:3A:2B:37:04:EB:A0:94:4A:B0:C5:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:12:9c:8d:f0:0b:7c:9c:37:27:12:c8:06:a4:55:8b:2d:a8:
         db:e4:a0:45:4e:c3:23:86:ad:52:74:3d:38:bb:f4:85:ba:b4:
         5b:0e:9a:fb:c9:b2:ef:4e:05:20:63:03:b0:b1:a9:01:61:33:
         c6:f0:cf:4d:3d:5a:c9:ae:b1:fc:91:17:fb:6c:f0:07:62:6e:
         34:03:6e:71:0e:53:57:c3:b5:ca:0f:fa:0b:13:eb:36:0b:76:
         4a:ca:60:7f:1a:9a:7d:1c:9c:23:dd:7a:4b:c3:0e:44:3a:4b:
         69:2c:63:36:70:b9:b4:09:1f:97:a0:af:62:48:e5:ce:22:02:
         64:63:40:ca:be:11:74:ec:6f:0d:ca:36:15:5c:5e:2c:63:67:
         14:5e:c7:e8:59:c9:6b:04:a6:09:bd:27:ec:18:f1:fc:dd:83:
         e4:94:dd:16:68:15:de:12:ac:79:2b:ec:6c:22:44:bc:10:f2:
         f6:05:f4:2a:76:79:58:b3:0b:dc:d3:2f:35:fd:29:6e:76:ea:
         f3:79:9a:c4:bc:38:d5:6c:0c:33:99:9f:61:8b:39:f6:cd:4b:
         e8:1b:de:d6:23:09:3c:16:40:17:1a:51:ce:d3:46:34:81:cc:
         2f:4d:c0:91:d3:ac:e1:93:2f:31:b0:3d:f8:1a:3f:1f:eb:d3:
         51:68:4d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:13 2026 by rpki-client