Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
File:                     1FbufkhK4u8JINCVvK4mj6_Wlhk.mft (raw, json)
Hash identifier:          rir+TzTCg8TNjtmSSlB++Qn/iOEsm4ZeZ8y8KIDwzyI=
Subject key identifier:   7F:27:F8:B1:DF:43:8E:A4:B9:1F:7F:E0:27:1B:D4:C3:80:F0:06:A0
Authority key identifier: D4:56:EE:7E:48:4A:E2:EF:09:20:D0:95:BC:AE:26:8F:AF:D6:96:19
Certificate issuer:       /CN=d456ee7e484ae2ef0920d095bcae268fafd69619
Certificate serial:       019E1D906F944760BEC34AE789806FB6CFF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
Manifest number:          1903
Signing time:             Tue 12 May 2026 19:01:05 +0000
Manifest this update:     Tue 12 May 2026 19:01:05 +0000
Manifest next update:     Wed 13 May 2026 19:01:05 +0000
Files and hashes:         1: 1FbufkhK4u8JINCVvK4mj6_Wlhk.crl (hash: lce/Yoq1b3WcFxXwMcNbX8JsjFoPvEGM8VfdU2aLDY8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:6f:94:47:60:be:c3:4a:e7:89:80:6f:b6:cf:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d456ee7e484ae2ef0920d095bcae268fafd69619
        Validity
            Not Before: May 12 19:01:05 2026 GMT
            Not After : May 13 19:01:05 2026 GMT
        Subject: CN=7f27f8b1df438ea4b91f7fe0271bd4c380f006a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b9:cb:8b:57:f1:52:e1:bf:4c:28:3a:71:3c:
                    64:eb:0f:af:00:2c:33:2e:60:27:37:f7:a2:fb:c8:
                    b9:d2:5d:7d:f0:ad:fe:d3:92:a5:34:49:81:37:46:
                    96:48:84:64:57:59:c9:02:39:e9:00:62:f2:76:9c:
                    e2:36:bc:6a:ef:32:75:e5:ad:0d:81:8a:98:1b:5d:
                    bb:c1:b7:ee:44:94:18:64:fa:25:22:2e:b3:4a:6b:
                    f9:65:b9:ef:08:d0:e6:8d:4b:b3:b3:30:de:9a:af:
                    9a:87:ee:38:f7:57:8c:b5:86:67:a1:84:47:06:e4:
                    44:1c:65:f3:49:2f:3b:d5:d9:53:ca:94:5a:1c:48:
                    30:b0:1a:bf:c1:a1:ee:0e:47:e2:49:24:09:bc:4b:
                    d1:3a:6c:d5:d9:04:5a:16:51:ee:1e:82:68:c0:90:
                    63:e1:64:db:b0:d7:e9:d5:cb:a6:45:e0:cc:15:6f:
                    ef:25:30:39:80:5d:ac:9b:6d:44:d4:34:59:50:9e:
                    b4:53:b0:df:dd:b2:db:38:f9:17:d7:a1:1b:1b:70:
                    ee:da:90:2b:f8:f9:72:03:65:18:f0:2b:a6:99:c2:
                    96:82:9b:4b:99:49:c3:d4:24:88:b6:af:dd:94:67:
                    5c:85:02:12:00:c1:97:19:70:70:2b:46:7b:45:58:
                    8e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:27:F8:B1:DF:43:8E:A4:B9:1F:7F:E0:27:1B:D4:C3:80:F0:06:A0
            X509v3 Authority Key Identifier:
                keyid:D4:56:EE:7E:48:4A:E2:EF:09:20:D0:95:BC:AE:26:8F:AF:D6:96:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:e9:c5:17:c3:fc:7d:cb:8e:fb:33:08:b9:05:fd:4b:4a:9d:
         77:ee:c7:df:ae:f1:23:52:0e:84:f7:df:c7:50:3a:fe:89:3e:
         2b:41:ec:dd:7a:9c:33:4b:db:45:f9:ed:3d:f3:bf:90:7a:3e:
         48:22:a7:eb:68:da:4d:a3:1a:c7:f1:88:a9:a8:2f:bb:c9:18:
         52:36:16:ef:44:c0:b1:79:7e:8a:fc:2f:4f:41:2b:ef:a6:e3:
         b9:34:ad:00:96:0b:a1:69:4a:f8:24:e3:61:ba:9c:55:19:31:
         f5:f3:84:b8:7d:c2:67:48:4a:a1:26:c5:18:d7:60:8d:5c:e8:
         27:5a:dc:48:d7:6a:c0:aa:4a:e5:38:65:ce:2a:73:6a:a8:53:
         69:af:3f:08:9a:b2:de:e1:3a:31:90:28:fb:81:f7:5b:2f:82:
         ca:2a:78:18:53:81:03:83:84:6f:6b:8e:38:07:92:b3:12:92:
         39:ee:ba:b5:98:6d:c2:ef:55:ee:f8:95:36:dc:86:12:d2:6c:
         5b:97:f0:fc:5a:89:d0:ba:c7:b3:09:7f:ff:ce:55:fd:cd:72:
         d8:d7:26:b6:25:f7:3b:1a:59:69:96:bc:ca:dc:99:a0:97:89:
         96:19:ae:17:01:45:74:26:12:e0:87:e8:81:6e:ef:f9:c3:38:
         b4:32:7f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:44:24 2026 by rpki-client