Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
File:                     noHdqtiPcHFhLXw7dhjiTRpSM7s.mft (raw, json)
Hash identifier:          TA2kk0SV1TgIUU3RDj270FTU8yysrOsOBbrCoEqSU1k=
Subject key identifier:   0B:55:47:AF:61:4D:18:3E:C3:6C:F6:E4:3F:22:10:E9:18:08:08:71
Authority key identifier: 9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB
Certificate issuer:       /CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
Certificate serial:       019E1F10C86390F952D4453EA8D479392E99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
Manifest number:          0FB2
Signing time:             Wed 13 May 2026 02:00:53 +0000
Manifest this update:     Wed 13 May 2026 02:00:53 +0000
Manifest next update:     Thu 14 May 2026 02:00:53 +0000
Files and hashes:         1: WiXt3vLRsEbHO4V69Ernp9Pa3Dc.roa (hash: 5/0dAfxj8roSB2N+rzuNs50RghH7Q+7eLmnDrf3ejec=)
                          2: noHdqtiPcHFhLXw7dhjiTRpSM7s.crl (hash: xj1XSONtPJ7kQKG7i9SIvalFc4NEKU/Wd1GPHuXHVS4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:c8:63:90:f9:52:d4:45:3e:a8:d4:79:39:2e:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
        Validity
            Not Before: May 13 02:00:53 2026 GMT
            Not After : May 14 02:00:53 2026 GMT
        Subject: CN=0b5547af614d183ec36cf6e43f2210e918080871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ef:24:fd:b2:a5:cf:35:4a:f3:02:6d:4d:08:
                    19:dc:0a:24:15:88:ed:83:42:ce:08:ef:74:48:00:
                    67:37:cf:a8:97:71:7b:32:10:cf:4d:ed:73:05:bc:
                    6e:14:35:68:e8:12:39:ab:85:27:a1:13:df:85:74:
                    1d:5b:e3:27:7a:8c:87:04:b8:9f:e3:68:16:a8:52:
                    4e:9f:0b:a9:35:15:3e:c9:85:a6:45:68:93:14:fd:
                    13:b6:71:c1:79:1a:bf:49:dc:7b:42:6a:f6:e0:08:
                    81:ba:24:8a:af:c2:cd:1c:c1:5f:cd:b0:f6:4d:fa:
                    bd:dc:a7:74:6f:b6:78:89:22:84:f9:ac:2d:1c:bc:
                    3f:3b:c4:f5:58:6c:95:a6:91:d3:5e:71:6e:9d:2d:
                    57:19:9b:33:93:a9:63:d7:73:90:2c:89:c5:f0:1f:
                    71:0d:cb:40:34:21:bb:c6:fa:26:22:eb:73:e2:41:
                    1b:da:ec:07:6a:51:95:25:0f:f8:fd:7c:eb:5d:d8:
                    4f:d4:53:3d:e0:b0:4f:4a:22:c4:16:e4:aa:82:28:
                    66:4d:a5:81:5f:57:0e:80:74:3d:e3:76:58:45:ca:
                    7b:6e:57:9b:26:f1:f6:7d:e3:53:76:ad:e0:e0:99:
                    43:6e:6f:82:46:83:14:76:0b:9b:2a:4c:6f:37:b4:
                    24:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:55:47:AF:61:4D:18:3E:C3:6C:F6:E4:3F:22:10:E9:18:08:08:71
            X509v3 Authority Key Identifier:
                keyid:9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:33:34:5a:c9:35:ec:1b:86:cf:29:14:89:60:c4:03:68:48:
         fb:fa:58:97:fd:79:13:24:85:f4:83:fb:64:a5:a0:99:37:7b:
         b7:b5:2c:38:ae:dc:aa:35:24:23:e5:81:2d:f5:b0:f4:8e:92:
         d4:cc:52:86:14:87:90:8d:fb:32:5a:2b:1b:0c:c1:e6:a0:a6:
         41:82:3a:56:11:af:3d:4e:04:d7:a3:0b:68:cf:fb:80:3e:67:
         cd:1f:db:47:b4:2f:3d:61:bc:40:37:cc:81:e6:a3:66:e5:33:
         40:90:d0:cb:2c:50:57:09:d4:99:43:73:62:61:d5:fe:52:8f:
         d3:a5:0b:1b:bc:5a:a1:f7:ac:b2:eb:fa:c6:f7:b6:fa:21:78:
         e5:b3:8d:66:7f:ae:dc:31:f7:bb:45:3d:3d:69:ad:7f:b7:ff:
         f8:8d:14:b7:a2:5d:97:ef:d5:8a:ff:f4:ba:76:c5:47:79:2d:
         f8:1c:a9:85:25:38:11:26:7f:9a:2a:e9:7c:d1:ac:22:7e:ce:
         f7:66:d1:7e:36:39:b8:57:3e:22:e2:80:95:f8:75:79:4e:66:
         cb:f2:d9:1b:5d:1f:8b:d5:e0:a3:30:e2:e8:13:af:7b:b8:84:
         e6:bc:6f:e4:28:d9:21:41:9a:3b:f9:84:58:25:e7:7f:d0:15:
         41:63:14:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:16:12 2026 by rpki-client