Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
File:                     1QYosB6kR3GDy_-S23oMWBRRlaQ.mft (raw, json)
Hash identifier:          nsYxJGZAVzuYg7vq92joRkVKv+JsLKSMvcycZObv6Kk=
Subject key identifier:   62:B5:D9:F2:96:D6:32:8C:B7:DD:9F:63:5E:43:26:63:30:D1:2B:21
Authority key identifier: D5:06:28:B0:1E:A4:47:71:83:CB:FF:92:DB:7A:0C:58:14:51:95:A4
Certificate issuer:       /CN=d50628b01ea4477183cbff92db7a0c58145195a4
Certificate serial:       019E1DC7299E65303052169C4BF8F4BB6E64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
Manifest number:          0DAC
Signing time:             Tue 12 May 2026 20:00:51 +0000
Manifest this update:     Tue 12 May 2026 20:00:51 +0000
Manifest next update:     Wed 13 May 2026 20:00:51 +0000
Files and hashes:         1: 1QYosB6kR3GDy_-S23oMWBRRlaQ.crl (hash: TyT+OL0Q8d4txLzYmXkXNMa9GFs+2pZiX5xQtPQo+xs=)
                          2: Cgsxb4qiaxInZIOD52ZW_SBVWn8.roa (hash: AfaNiPsxEDa6BqM9VdWTViXe2dMUmuZ+VOqQLOWjvx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:29:9e:65:30:30:52:16:9c:4b:f8:f4:bb:6e:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d50628b01ea4477183cbff92db7a0c58145195a4
        Validity
            Not Before: May 12 20:00:51 2026 GMT
            Not After : May 13 20:00:51 2026 GMT
        Subject: CN=62b5d9f296d6328cb7dd9f635e43266330d12b21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2c:da:e0:6d:f7:21:29:ee:d0:f1:81:ed:84:
                    8f:76:b7:d0:ba:be:d0:eb:95:9d:9c:5b:f5:f8:e7:
                    2b:e6:83:33:fb:33:5f:3e:cb:38:de:44:d0:69:88:
                    76:a7:e0:12:8e:48:b0:4c:81:57:30:94:98:5f:93:
                    db:bb:bb:7a:a6:0f:61:78:41:2b:67:21:59:ee:97:
                    a2:c2:d0:86:4a:99:38:94:37:1d:5c:7a:50:1c:88:
                    d0:3c:d6:d6:cb:0c:e7:22:d1:fa:11:9a:0a:e7:ce:
                    b8:eb:b0:a3:ea:28:7e:b2:f2:24:a1:7c:6c:ad:66:
                    02:6f:2d:a8:8a:a0:79:4c:e0:e5:cd:99:c7:75:a7:
                    91:bb:d6:4d:76:55:3e:79:07:94:0c:fe:bb:69:a1:
                    78:73:b3:21:43:89:9f:27:04:fb:a8:0b:59:db:1f:
                    da:da:75:54:1f:73:00:e0:c1:f0:60:27:43:30:47:
                    5b:b2:fa:b3:3e:0d:5c:2b:fd:8d:30:8e:ee:d2:c6:
                    51:84:1c:ef:03:d5:e7:5d:74:9d:b5:37:44:a9:3c:
                    a4:25:19:70:79:92:3e:fc:e3:1e:9d:f7:e3:63:5e:
                    c9:d1:dc:12:7d:08:c0:ec:15:55:74:76:ed:fb:4d:
                    32:ef:9b:c5:8a:05:92:5b:05:51:1b:fb:e6:53:61:
                    8e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B5:D9:F2:96:D6:32:8C:B7:DD:9F:63:5E:43:26:63:30:D1:2B:21
            X509v3 Authority Key Identifier:
                keyid:D5:06:28:B0:1E:A4:47:71:83:CB:FF:92:DB:7A:0C:58:14:51:95:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:30:76:92:61:d2:b1:6a:19:6b:0e:ea:7c:5e:0d:d0:26:0f:
         58:25:f5:43:c6:91:90:4b:6c:b0:f5:44:0c:4a:aa:ad:c5:a9:
         06:59:8e:a3:1a:ef:b3:69:64:c0:9e:7a:25:04:be:e3:bc:ab:
         cc:19:9c:11:e3:cb:d1:77:8a:f9:03:d8:b3:45:af:55:c8:3c:
         bf:33:9d:86:80:7b:3d:97:a1:07:6a:1f:cb:59:08:25:28:c0:
         c1:01:ef:ea:da:f9:7b:1c:a9:d6:7c:18:4d:df:c5:bf:b1:5d:
         0e:bd:c9:28:52:bc:65:ce:c3:1a:e7:5f:38:38:ea:1f:23:91:
         a7:7e:48:40:58:7a:f6:7e:2c:7b:81:ed:68:64:ff:0e:14:cb:
         96:39:1d:4d:5f:07:e9:5f:e8:48:53:e3:a6:05:50:45:92:e0:
         e0:3d:09:e8:c2:ab:28:83:46:03:18:1e:83:9b:39:5b:7f:3a:
         37:e0:50:ca:65:f4:fa:02:e3:c6:5f:d9:15:a9:2b:35:16:d8:
         41:90:8b:50:b1:f8:d3:f5:8c:b4:69:3d:ba:6d:6f:33:0f:ff:
         cc:a9:95:a5:ca:20:5c:5f:27:29:8f:7d:92:27:9f:4b:2f:85:
         29:a8:e4:cc:4b:e9:5d:03:f2:2f:58:8e:51:0f:5a:33:5f:c0:
         eb:11:b1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:43:09 2026 by rpki-client