Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
File:                     rakwWHtP0v73KPBW7KhohCLDuXw.mft (raw, json)
Hash identifier:          te92m8F2a6YirQIgSVfvEaOSMoZxI7YQFlrBUomgAuA=
Subject key identifier:   64:9F:C3:E6:C1:84:AF:52:60:22:22:35:B7:44:F1:76:32:17:76:98
Authority key identifier: AD:A9:30:58:7B:4F:D2:FE:F7:28:F0:56:EC:A8:68:84:22:C3:B9:7C
Certificate issuer:       /CN=ada930587b4fd2fef728f056eca8688422c3b97c
Certificate serial:       019E1D902AC4935E7BC8D6F08135BC97F4E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
Manifest number:          0DD5
Signing time:             Tue 12 May 2026 19:00:47 +0000
Manifest this update:     Tue 12 May 2026 19:00:47 +0000
Manifest next update:     Wed 13 May 2026 19:00:47 +0000
Files and hashes:         1: P5elOkBLveGl1Ib_d-hIHalet_Q.roa (hash: yhnDVPZx7UIZ7b78IbUGd3YNtEhVBShWgFfNgBkV6AE=)
                          2: rakwWHtP0v73KPBW7KhohCLDuXw.crl (hash: XzgxIYVaBE6cgvgGS7RE/wOh1zYY50id/CnakHmwm0w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:2a:c4:93:5e:7b:c8:d6:f0:81:35:bc:97:f4:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ada930587b4fd2fef728f056eca8688422c3b97c
        Validity
            Not Before: May 12 19:00:47 2026 GMT
            Not After : May 13 19:00:47 2026 GMT
        Subject: CN=649fc3e6c184af5260222235b744f17632177698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:4f:1e:d4:92:5e:6a:9b:a4:57:81:6a:69:a3:
                    60:95:53:e3:4b:5d:a8:46:b3:53:89:6f:12:f8:9f:
                    99:30:a2:4e:9a:22:ba:f4:87:30:9a:c8:07:0c:02:
                    b5:e6:b7:47:03:c6:86:a4:f9:a6:c7:54:93:35:e1:
                    ff:7b:4c:00:c4:79:9a:9e:92:5b:44:48:83:f9:73:
                    c9:3b:7b:91:53:15:5d:f7:60:c1:0b:29:a6:b1:62:
                    66:d1:bd:8e:de:c8:b3:9a:6a:7a:a3:6d:db:d0:4f:
                    78:56:a6:85:ac:68:80:40:b5:0c:be:d0:a3:77:89:
                    81:88:14:77:1f:e8:c0:57:b7:84:4c:55:48:5c:d6:
                    e4:f3:c8:b5:80:56:5c:2f:0c:1d:cf:a9:98:db:23:
                    05:0a:e4:ab:e2:2a:b5:42:81:35:6d:24:b3:c5:4a:
                    e5:a8:2b:9f:bf:a7:3d:d7:5b:c2:82:36:b7:e4:f1:
                    fb:2c:77:1f:80:1b:b5:45:5d:c0:5d:29:0d:ab:c5:
                    6b:61:55:53:9d:89:ee:d3:37:98:cd:9c:ca:38:61:
                    01:7a:ca:4a:c2:c0:6e:88:60:af:8c:fe:a6:a0:5d:
                    01:57:6e:37:fe:ed:90:bb:d1:ed:7f:1c:de:62:d6:
                    e0:2b:c8:a9:1a:ff:88:b9:d5:24:cd:38:e7:9e:00:
                    bf:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:9F:C3:E6:C1:84:AF:52:60:22:22:35:B7:44:F1:76:32:17:76:98
            X509v3 Authority Key Identifier:
                keyid:AD:A9:30:58:7B:4F:D2:FE:F7:28:F0:56:EC:A8:68:84:22:C3:B9:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:d3:8a:c1:0b:c8:c1:74:45:4a:21:a3:7a:b4:56:c9:7d:c5:
         e0:5c:25:2a:35:e0:24:21:84:e1:d7:c1:4f:6d:fa:52:f3:a9:
         87:0c:e5:b5:9c:dd:0f:b5:13:be:6f:e0:37:77:fe:48:40:cc:
         80:0a:ca:04:de:79:b7:d3:bf:9a:cf:b7:a6:f8:34:e5:e5:21:
         3e:a6:d1:6e:44:70:16:ee:69:a1:af:6a:36:26:df:44:f8:23:
         e0:46:be:a4:28:a8:9a:9e:f8:fd:93:40:73:89:92:c3:bb:3c:
         75:45:46:2f:1f:cd:dc:4d:7b:89:b5:fa:cc:38:44:8e:a8:5a:
         b5:ad:37:d2:d7:f9:41:82:6a:13:d3:18:87:88:70:24:24:00:
         ec:92:53:aa:03:a1:dc:47:32:8c:f5:5a:9d:50:9e:c2:db:53:
         6e:d9:31:b3:1a:e9:4f:f1:6c:af:5a:18:e0:cd:42:09:d1:df:
         e6:82:b3:ae:f7:40:79:e1:ba:95:d2:43:bb:c0:e7:67:e3:ab:
         5b:df:e6:9f:8c:f1:99:49:9d:1d:01:ed:11:87:a7:3a:47:50:
         68:6f:01:c1:25:09:d5:89:90:c6:a7:9c:61:08:8f:aa:a7:86:
         53:97:04:f2:15:aa:ca:00:eb:ac:2a:15:52:77:2c:a5:6a:01:
         59:23:65:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:50:12 2026 by rpki-client