Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
File:                     _PyV8biAEebcM9BBuYsxMHdsQo8.mft (raw, json)
Hash identifier:          NvCUr7d/zf748vdLQK+zR3Zu/2rtC4zWQs4O63NuATk=
Subject key identifier:   09:26:76:1D:09:E1:72:A5:20:88:6D:DE:03:68:BD:58:5E:72:69:43
Authority key identifier: FC:FC:95:F1:B8:80:11:E6:DC:33:D0:41:B9:8B:31:30:77:6C:42:8F
Certificate issuer:       /CN=fcfc95f1b88011e6dc33d041b98b3130776c428f
Certificate serial:       019E1DC704633DCAD0864A5369465BF99BE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
Manifest number:          0A79
Signing time:             Tue 12 May 2026 20:00:42 +0000
Manifest this update:     Tue 12 May 2026 20:00:42 +0000
Manifest next update:     Wed 13 May 2026 20:00:42 +0000
Files and hashes:         1: _PyV8biAEebcM9BBuYsxMHdsQo8.crl (hash: dhmej5QWVeZ9OAYhI+Wb3rf64oFCF7DbXf31LJfqKtw=)
                          2: jON8jV9Q2GLdoq1oYbTtzWvSeAw.roa (hash: CpfaNm7QCE9dRH1Z5uGSs1NzanRsXUOVz00UoK4+1jY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:04:63:3d:ca:d0:86:4a:53:69:46:5b:f9:9b:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcfc95f1b88011e6dc33d041b98b3130776c428f
        Validity
            Not Before: May 12 20:00:42 2026 GMT
            Not After : May 13 20:00:42 2026 GMT
        Subject: CN=0926761d09e172a520886dde0368bd585e726943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7f:13:98:35:6a:9f:b8:3b:51:44:cf:e5:79:
                    bd:6e:86:0a:ea:a0:fd:2c:28:56:e9:58:72:3a:a2:
                    b0:51:b8:d5:d8:f2:6a:0a:01:30:32:d3:a6:04:9e:
                    73:82:5c:ee:84:93:31:8f:82:57:48:a7:41:f7:68:
                    68:d6:b5:d2:87:0a:91:e0:80:c4:b3:92:e0:62:8c:
                    40:ed:ee:53:40:bb:36:87:04:62:f3:7a:10:ee:f2:
                    8b:87:ee:ff:7b:90:b3:03:7c:2e:46:bc:40:c5:28:
                    08:8f:cf:5d:28:a3:4a:fb:12:55:eb:be:ac:e6:68:
                    6b:0c:2b:ed:9a:78:31:35:ad:ad:a8:f6:31:d2:79:
                    12:34:7c:d4:35:a6:11:5e:ec:40:3b:ce:8c:38:37:
                    f1:d8:cb:24:b5:bd:a5:6b:6a:5b:77:d9:73:63:c8:
                    c6:b7:d4:7e:cf:b5:ba:f1:53:5d:8a:0f:28:33:9b:
                    34:56:7a:79:58:38:bd:41:95:8a:21:08:97:e3:f1:
                    34:c2:31:b3:0f:9d:64:bd:e3:f9:56:bb:77:f9:3d:
                    66:e3:e6:5f:00:fd:38:80:33:a3:5e:49:75:8d:9a:
                    a7:63:7f:2b:0d:e2:98:0b:98:fd:d4:ee:fa:15:e5:
                    78:95:26:18:ac:7d:eb:46:64:8f:03:c9:4f:c1:75:
                    25:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:26:76:1D:09:E1:72:A5:20:88:6D:DE:03:68:BD:58:5E:72:69:43
            X509v3 Authority Key Identifier:
                keyid:FC:FC:95:F1:B8:80:11:E6:DC:33:D0:41:B9:8B:31:30:77:6C:42:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:35:54:af:7a:dc:13:0d:5f:f1:2f:3b:85:ac:5b:73:84:4a:
         3a:6e:5f:00:2e:1a:6d:cc:64:a6:e9:04:f9:df:3b:31:a7:52:
         a7:19:fa:4c:a9:43:08:03:d3:74:99:1b:a6:db:67:fd:92:0f:
         c0:56:14:03:00:0a:c3:bf:37:7e:0d:7d:2f:86:71:95:90:c8:
         c0:69:90:fe:f1:3e:30:5e:d9:0f:d1:bf:40:4d:bb:08:7e:61:
         55:0e:f7:55:44:98:3a:e0:5f:d4:0b:da:78:38:6f:c1:19:4a:
         3c:17:f3:e5:13:c9:6d:f4:12:1a:c2:2f:d2:46:38:25:d3:e3:
         cb:26:f6:1b:1c:3a:94:76:ca:4a:df:28:6c:33:ee:d0:a5:f8:
         0c:66:ed:99:e5:55:1c:be:d6:0e:ff:20:de:26:39:b1:87:68:
         fb:4e:96:50:6f:f0:24:bd:90:c7:96:45:37:ff:c3:c5:d4:54:
         61:81:bf:9b:43:04:83:69:ff:b5:12:b5:ec:7e:ca:33:f7:99:
         92:6b:38:fb:74:c8:16:1a:50:01:bd:8e:a8:8c:45:d8:67:c9:
         af:4b:86:02:4c:e6:38:1a:23:c3:81:45:09:1c:7e:4d:f0:d4:
         6f:4e:f6:9d:a2:31:e0:91:a2:d3:e4:f4:f7:ea:c8:1f:9c:cf:
         d3:8b:fd:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:41:26 2026 by rpki-client