Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
File:                     IxMMmax6pAhscXVxFKQWP4AJAUI.mft (raw, json)
Hash identifier:          hHOpDpyT4U8Rubp76LKLjtzXhoyR4UqIUsf4tre9V3M=
Subject key identifier:   BD:20:A7:C7:16:56:76:65:9C:65:9C:CF:AB:64:92:6D:62:F3:63:3E
Authority key identifier: 23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
Certificate issuer:       /CN=23130c99ac7aa4086c71757114a4163f80090142
Certificate serial:       019E1F7EF273992D3520D2DCB488B787584C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
Manifest number:          0C50
Signing time:             Wed 13 May 2026 04:01:13 +0000
Manifest this update:     Wed 13 May 2026 04:01:13 +0000
Manifest next update:     Thu 14 May 2026 04:01:13 +0000
Files and hashes:         1: IxMMmax6pAhscXVxFKQWP4AJAUI.crl (hash: 8J//lqOVsYRTikFKqFvHfZP53b0/ldvddXXBQueFTrw=)
                          2: M7AsOPJRuDvyqpdVNAPIyt4dy4E.roa (hash: VA2KwTkb4NGqo/O9WoJ31YAHnrH27JkWDC9odiYJKyE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 04:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7e:f2:73:99:2d:35:20:d2:dc:b4:88:b7:87:58:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23130c99ac7aa4086c71757114a4163f80090142
        Validity
            Not Before: May 13 04:01:13 2026 GMT
            Not After : May 14 04:01:13 2026 GMT
        Subject: CN=bd20a7c7165676659c659ccfab64926d62f3633e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3c:57:1e:ee:07:61:9d:14:b1:ac:7a:6d:d5:
                    70:b0:bb:1d:e8:4d:ea:40:48:e5:6d:af:4c:b8:55:
                    12:10:9a:1a:d3:c0:8c:65:45:27:ed:01:3c:11:9f:
                    8e:19:93:ad:bf:10:e4:05:00:bc:d6:7b:dc:f8:22:
                    b0:6d:02:55:95:18:67:a6:e0:e4:50:ef:eb:59:b4:
                    22:30:33:66:70:ca:72:54:15:2a:c7:63:8e:a9:51:
                    4c:62:b2:d2:8b:dc:b4:de:4b:6d:e1:52:db:1d:5c:
                    83:b3:be:1f:b4:7a:9a:9e:13:22:f1:45:b8:72:87:
                    2e:2f:ff:ab:fb:13:d6:27:63:70:d5:bd:5d:30:d0:
                    c4:ab:aa:68:72:db:1e:54:72:a6:84:78:61:4a:03:
                    7d:af:46:f0:4a:77:25:ee:11:b5:82:97:10:09:e5:
                    7e:0d:0d:46:64:70:bd:dd:2d:f3:43:bd:3d:b6:36:
                    60:92:42:ec:bb:4f:31:69:9c:f7:87:70:f9:0e:82:
                    f0:33:fd:f3:f7:aa:18:32:7a:70:d5:84:07:a5:c3:
                    79:03:fe:ad:86:91:aa:bf:00:c4:89:8d:fe:35:cd:
                    e9:3a:22:3a:be:b9:17:76:64:db:bd:83:54:f3:48:
                    8e:cf:31:5d:02:97:ee:9e:76:ec:14:14:af:70:83:
                    fc:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:20:A7:C7:16:56:76:65:9C:65:9C:CF:AB:64:92:6D:62:F3:63:3E
            X509v3 Authority Key Identifier:
                keyid:23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:b0:06:da:63:fe:e5:71:6c:e7:1c:f0:23:54:61:fc:4b:f2:
         e9:5f:45:7b:76:00:db:7b:90:29:d8:73:2c:80:de:6d:cc:cd:
         a7:5b:3c:a3:ec:7d:bc:68:ae:18:6c:c2:11:9e:20:72:ee:31:
         99:4b:65:33:28:e1:74:e8:35:d3:5f:48:2f:71:fc:f4:70:1f:
         64:ec:ce:1d:76:91:04:39:a4:b4:d5:af:5f:5a:dd:33:09:2f:
         5c:78:18:7e:11:ce:02:9f:62:38:1f:22:64:7f:5c:49:b2:21:
         a7:ac:6d:db:75:46:71:35:30:10:1b:e3:10:97:a8:f8:2b:96:
         6d:09:0a:6d:6b:67:00:6a:5e:c8:0d:39:21:ff:be:81:08:59:
         89:e7:d6:0b:43:43:0c:03:0e:63:bb:80:01:b2:91:15:e6:2e:
         20:f9:c6:80:20:f5:fd:ae:d1:b3:82:99:a1:de:3a:15:9e:45:
         82:24:ce:f8:31:59:a9:ef:06:86:9b:71:d1:eb:1a:d6:25:aa:
         74:76:f6:43:aa:91:7c:7a:bd:20:d0:09:76:ca:ac:c2:02:08:
         9e:4e:25:01:81:02:66:9c:36:ef:55:3c:e3:64:bd:ec:01:af:
         54:0b:5a:a7:c5:2b:ee:9d:94:7b:a7:5e:fd:93:32:12:c1:84:
         35:99:b4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:13:34 2026 by rpki-client