Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
File:                     fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft (raw, json)
Hash identifier:          bBb8yT75PzHYp/flog8JYrCrXQiVr8+TNlLHz4bUuQs=
Subject key identifier:   CF:79:61:7F:EB:05:FB:F2:0B:85:FC:0B:ED:B8:B1:4D:4C:B4:C3:C4
Authority key identifier: 7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6
Certificate issuer:       /CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6
Certificate serial:       019E1DFEB4E253628124843C0BB9463AC051
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
Manifest number:          1918
Signing time:             Tue 12 May 2026 21:01:32 +0000
Manifest this update:     Tue 12 May 2026 21:01:32 +0000
Manifest next update:     Wed 13 May 2026 21:01:32 +0000
Files and hashes:         1: G0kBNcjhGFcxChx46aWWaNpRXhY.roa (hash: VJoqFME0N6dK/qBA61hfvkkTq2MVQMZWW93hxUvsK8Q=)
                          2: IhUUSRuZPQ93qmBEuCsX-VJJ8_Y.roa (hash: wQMNMlSi7ML40phwxmQnjfrhkgmt/fkZEJZEruvJetM=)
                          3: J7oFZC1CJk2GtQuj_-ICPxLHOsQ.roa (hash: oGKjzDdrrCM7vTukMw0Fba8efuuuaYKCVfCXlBR+Jpc=)
                          4: O_CD_5ALmuh68TK-xyESGxnHW24.roa (hash: A4M+FCTh23fTzIJAI9lDd9sc/Yc7QQultOVy81PYaSo=)
                          5: Y05YWTld1eID__luRs7pp8ewZwY.roa (hash: 02lMUa1OHr9cMSAHSJuLTXNV5rSyX1jxkq8ORZ0rugw=)
                          6: fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl (hash: Gybzhi1JMX2/3HL3gNiecGGdTDWFuMI4fBLUdO9D/PA=)
                          7: oFmVPpAqArTolT86zoYzDNps-ck.roa (hash: vxR9GCqj5WIpQWRTxrTVSqLQRxXTFqzFObqIUCYCQMY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:b4:e2:53:62:81:24:84:3c:0b:b9:46:3a:c0:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6
        Validity
            Not Before: May 12 21:01:32 2026 GMT
            Not After : May 13 21:01:32 2026 GMT
        Subject: CN=cf79617feb05fbf20b85fc0bedb8b14d4cb4c3c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:42:77:85:f0:60:ee:1c:43:e9:cc:d7:7a:84:
                    9b:15:ba:6d:8c:6d:66:ff:9e:e9:f4:a1:81:47:85:
                    73:a8:d7:a3:a6:25:a8:20:31:20:8c:32:fd:2a:78:
                    de:3f:12:12:30:5a:5f:a8:0f:1a:cb:68:77:76:e1:
                    21:54:ad:ad:36:32:14:27:e7:dc:52:74:1a:b5:a5:
                    94:ca:c1:af:4a:9f:71:7a:24:66:20:08:46:e5:85:
                    24:6c:07:c8:59:e9:b4:7c:d4:17:f9:52:12:cc:17:
                    08:f0:a9:8f:67:13:a6:a0:19:83:3c:eb:9d:22:1d:
                    a1:57:bc:e6:e9:b4:97:9e:64:da:e8:1f:fd:00:36:
                    dc:16:59:6e:75:c6:90:e4:03:8c:ac:10:08:73:84:
                    25:c6:68:39:0f:26:9c:96:dc:45:c4:56:1e:c2:5d:
                    28:c7:df:60:88:55:4d:cc:a7:48:7a:5b:15:be:ed:
                    ec:66:11:82:62:62:d9:1f:75:6b:48:49:21:78:94:
                    ce:2d:97:5d:56:24:40:ab:61:63:91:a5:b9:05:63:
                    07:74:29:cb:42:73:72:04:d9:8d:c6:32:de:3c:78:
                    51:ce:f5:d2:66:3a:2d:f9:38:7e:b2:14:a8:ba:6c:
                    c3:cd:e6:21:9a:a9:1a:c1:4e:84:dc:82:e4:3b:2b:
                    01:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:79:61:7F:EB:05:FB:F2:0B:85:FC:0B:ED:B8:B1:4D:4C:B4:C3:C4
            X509v3 Authority Key Identifier:
                keyid:7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:2a:4a:6a:5d:9b:9d:87:9c:1d:b0:1d:91:f7:3f:84:8c:a6:
         91:ce:c0:8a:65:fa:51:53:49:ac:ac:64:07:f3:b9:cb:59:da:
         c3:7d:1a:1a:c4:8d:66:7b:6a:37:ef:17:82:79:aa:f1:25:3e:
         39:bc:9b:35:68:f1:d4:72:88:41:4e:65:7f:54:d3:12:b7:97:
         db:f5:43:55:51:a4:3b:85:57:dc:39:65:92:bb:46:09:81:4c:
         8b:f0:15:63:99:ff:5e:ce:cf:fc:98:7d:a0:91:63:fc:00:ed:
         9a:35:df:84:d7:a5:a9:3d:40:9a:c1:83:6a:8b:7c:a7:8a:12:
         29:ed:88:ef:de:5c:3f:b8:e5:4e:a5:53:55:27:da:02:dd:78:
         4c:44:a0:cf:c7:61:43:39:d6:9d:31:8b:a0:31:06:9e:33:7d:
         3a:22:aa:6c:aa:e4:ca:e2:1d:b6:e4:ee:e8:cc:35:a9:51:49:
         95:a5:0a:b6:c8:ba:d7:c7:52:b6:d8:49:ba:3f:92:bd:c9:e5:
         17:be:93:01:a4:df:c7:e5:98:82:95:32:ef:8f:b5:65:b6:87:
         ae:b3:45:64:e2:15:05:bb:74:9d:ed:52:a4:8e:b8:b0:d2:fc:
         f5:ed:8d:a0:60:a2:03:f8:c1:60:ff:9e:ee:5b:e6:c4:96:84:
         da:a4:80:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:19:32 2026 by rpki-client