Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft
File:                     aFepuyl_CzxESrCvZzpSdQ6Xm04.mft (raw, json)
Hash identifier:          nJNsjWSvmGS6Ad8BWppxcq1omHRDM5d95FBXnOWNjwg=
Subject key identifier:   94:FB:95:D0:81:62:53:9F:40:50:01:F8:88:41:A9:A4:7C:9C:24:11
Authority key identifier: 68:57:A9:BB:29:7F:0B:3C:44:4A:B0:AF:67:3A:52:75:0E:97:9B:4E
Certificate issuer:       /CN=6857a9bb297f0b3c444ab0af673a52750e979b4e
Certificate serial:       019E1DC6FFFEF61B5BB84D249D1676AE7343
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft
Manifest number:          1906
Signing time:             Tue 12 May 2026 20:00:41 +0000
Manifest this update:     Tue 12 May 2026 20:00:41 +0000
Manifest next update:     Wed 13 May 2026 20:00:41 +0000
Files and hashes:         1: MFYkRU3grNRPvLbyPaISwxG8sRc.roa (hash: Kn7dq6VQMBUK2el7CpBxhmeZzkXVRbxFBsXov0HWD6Q=)
                          2: aFepuyl_CzxESrCvZzpSdQ6Xm04.crl (hash: TQb+WzOeLu5iB/BYVsyTtTzpB6AGPPnrIpBPVRj/h84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c6:ff:fe:f6:1b:5b:b8:4d:24:9d:16:76:ae:73:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6857a9bb297f0b3c444ab0af673a52750e979b4e
        Validity
            Not Before: May 12 20:00:41 2026 GMT
            Not After : May 13 20:00:41 2026 GMT
        Subject: CN=94fb95d08162539f405001f88841a9a47c9c2411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:22:8f:78:35:25:75:0b:e5:16:89:ec:1f:79:
                    43:65:f7:1d:f8:a7:99:df:84:e8:4a:ca:75:db:fd:
                    68:76:44:f7:71:ff:b8:37:d8:79:b8:ff:12:c4:96:
                    13:4f:d3:3d:d1:ff:92:ef:35:14:eb:c6:85:77:a3:
                    14:e6:51:b2:92:ac:70:39:74:f0:db:0b:51:42:95:
                    b6:ed:ad:03:3e:e3:79:90:7a:08:d4:0a:b1:7f:0d:
                    14:b5:a6:ac:09:75:e8:91:42:54:7c:0f:8c:fe:e9:
                    09:b3:08:5a:88:1a:dd:ac:7a:d6:f7:47:e1:b7:2a:
                    6a:4b:13:02:5f:89:54:28:06:78:14:e4:42:0e:f2:
                    16:1d:6a:19:8e:25:cf:33:3a:38:93:7c:63:6b:6f:
                    b8:39:9c:fb:6f:24:92:70:6c:d4:69:16:f7:03:9d:
                    1b:09:ec:f3:a6:fa:b3:66:b7:70:eb:02:1f:5b:a5:
                    23:e5:3f:68:3a:b0:9e:e2:15:b5:5e:55:f5:2e:01:
                    91:aa:65:08:17:f8:58:3e:2a:03:2d:38:5f:5d:21:
                    18:4c:5d:05:c1:05:b0:3c:d2:2d:36:fb:8f:81:5f:
                    66:69:96:b5:6f:cd:2f:7e:57:1f:22:a1:2c:0f:6b:
                    07:c5:1f:15:8e:5d:58:bf:85:44:af:17:c3:92:98:
                    60:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:FB:95:D0:81:62:53:9F:40:50:01:F8:88:41:A9:A4:7C:9C:24:11
            X509v3 Authority Key Identifier:
                keyid:68:57:A9:BB:29:7F:0B:3C:44:4A:B0:AF:67:3A:52:75:0E:97:9B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:12:8a:7d:b5:89:8d:fb:92:e0:59:6f:1e:c1:7a:79:d8:7f:
         5b:86:c4:14:61:d4:c1:14:2b:e8:11:d4:ba:d7:ac:78:b2:b5:
         d8:0e:2e:74:1b:2d:93:31:76:99:fb:a3:0d:f8:17:8f:82:d1:
         13:ab:0c:f7:b3:ca:ef:b1:c8:d5:d1:50:48:46:03:b9:85:79:
         b8:22:8e:29:90:90:7a:bb:79:3a:a5:c4:67:ca:6f:32:13:52:
         d0:d4:c2:a6:18:8d:3a:03:d2:f0:92:e3:d0:f9:f0:44:f8:8f:
         15:2f:95:e9:e1:e0:a0:21:7d:18:67:75:b5:7f:7c:19:a3:ce:
         92:15:70:a6:ef:e5:76:3b:a9:38:55:1f:44:21:94:fb:d0:50:
         ab:43:51:14:2a:9b:99:b1:82:6d:04:15:6f:8c:7c:37:a5:ad:
         38:b0:ea:ec:40:64:6c:19:7d:95:3d:80:36:07:82:dd:f2:0b:
         9b:cc:22:80:45:88:b7:49:de:b8:8c:98:1f:fb:87:28:1e:8d:
         27:1a:9b:5e:4c:d1:b6:5d:95:a4:5b:3f:c4:99:d2:ef:5f:b5:
         9c:3a:b2:fb:2c:3d:35:99:97:87:36:c8:16:d1:0d:04:b4:f8:
         b8:bc:bb:37:b2:4c:71:b0:de:b6:46:6e:63:33:2b:b6:36:cd:
         33:de:3d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:24:27 2026 by rpki-client