Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft
File:                     Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft (raw, json)
Hash identifier:          dGZ2vpPFChD5LDcWHYdlN70dAJZtmq/RanMIRt/ClIU=
Subject key identifier:   11:7F:C0:F9:AF:9B:4F:C7:36:2D:C2:7B:7E:8A:7D:97:EB:9C:E4:48
Authority key identifier: 45:ED:11:16:30:E0:52:97:79:5D:DD:D2:98:EA:1F:B2:9E:69:5C:53
Certificate issuer:       /CN=45ed111630e05297795dddd298ea1fb29e695c53
Certificate serial:       019E1F7F7232F5D0E34163070017BD29F488
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Re0RFjDgUpd5Xd3SmOofsp5pXFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft
Manifest number:          0FEB
Signing time:             Wed 13 May 2026 04:01:46 +0000
Manifest this update:     Wed 13 May 2026 04:01:46 +0000
Manifest next update:     Thu 14 May 2026 04:01:46 +0000
Files and hashes:         1: 8pNTjqniMFk_l88aCl3q4gxjvCw.roa (hash: NhOt3V4pCHJS3ioRSgsTAxEcfjN40UAKQmrhzy1cBHI=)
                          2: Re0RFjDgUpd5Xd3SmOofsp5pXFM.crl (hash: Z/ORRTYpMuZhNfI6h2y/jkdNno1PoXJIzZXVYTzK9uo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Re0RFjDgUpd5Xd3SmOofsp5pXFM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 04:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7f:72:32:f5:d0:e3:41:63:07:00:17:bd:29:f4:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45ed111630e05297795dddd298ea1fb29e695c53
        Validity
            Not Before: May 13 04:01:46 2026 GMT
            Not After : May 14 04:01:46 2026 GMT
        Subject: CN=117fc0f9af9b4fc7362dc27b7e8a7d97eb9ce448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f6:13:04:d5:85:15:eb:56:ae:0b:18:5d:03:
                    8a:df:56:61:fa:b7:31:ba:4d:9b:83:cd:6f:eb:dd:
                    01:22:9f:ba:60:f5:a2:66:e9:d2:ae:1b:11:94:4a:
                    f5:a9:99:ce:a7:3d:cc:2b:47:81:ca:14:d3:1b:db:
                    79:bf:b6:43:a2:2e:e8:fa:3e:95:f4:ec:79:fe:24:
                    c8:3d:b7:d8:99:a2:9d:a4:dd:0a:27:a5:c2:47:a6:
                    08:e1:9f:21:b0:05:2c:08:aa:63:b6:1c:ff:f1:1e:
                    34:47:43:30:a7:43:f6:3d:12:25:a0:69:ac:95:13:
                    fa:4c:77:6c:11:5d:be:9a:15:23:ea:f3:79:f7:ed:
                    2e:fe:7e:98:49:a9:8b:a4:7d:e9:72:6b:a0:90:7e:
                    c9:5c:ff:a2:1b:43:fe:fc:94:ce:14:0d:69:71:de:
                    1c:c1:68:dc:fd:a1:d1:9f:0d:82:ac:ac:2e:47:90:
                    f9:c0:2d:5f:a3:f9:a6:a1:7b:f6:a4:76:b8:82:2b:
                    ea:d4:bb:8b:b2:3c:1c:33:3c:d3:26:1b:8b:f4:be:
                    ce:d2:52:6e:b4:f8:20:9a:8f:0c:d0:6c:67:f7:c8:
                    00:90:21:d7:56:e1:5b:63:96:f5:6b:eb:06:15:4f:
                    5a:6b:59:4e:cd:31:f0:4e:ec:22:40:d4:1c:a8:ce:
                    c4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:7F:C0:F9:AF:9B:4F:C7:36:2D:C2:7B:7E:8A:7D:97:EB:9C:E4:48
            X509v3 Authority Key Identifier:
                keyid:45:ED:11:16:30:E0:52:97:79:5D:DD:D2:98:EA:1F:B2:9E:69:5C:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Re0RFjDgUpd5Xd3SmOofsp5pXFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:67:e2:4a:d6:39:a7:50:12:70:02:ff:7a:d4:fb:1a:9a:89:
         77:52:17:79:af:9a:f3:93:b8:1f:fb:9e:a2:72:cb:39:f1:d1:
         b0:bb:f6:5e:7f:9b:0e:ac:9e:6b:98:ae:04:68:c0:c7:9c:1b:
         f3:31:30:3a:46:d0:bb:e2:a4:51:96:8d:33:4c:0b:7f:91:a3:
         d5:92:5d:2b:55:d9:a3:11:df:6b:e1:47:38:1c:cb:fa:71:1d:
         86:1a:49:f2:ce:2f:fd:4e:9b:d1:81:0d:25:95:e3:50:80:cb:
         2d:9f:8c:61:49:5a:88:4a:f5:f4:88:38:9a:bb:7d:5f:18:e8:
         37:bd:70:95:6e:a0:75:6a:e9:51:2a:e2:95:cd:a6:18:ea:eb:
         bc:17:61:86:2a:e9:65:d6:ff:83:9d:fc:bd:26:44:58:ac:12:
         d7:51:9e:b7:4c:88:44:90:9f:05:b4:c8:e9:48:1d:49:df:06:
         8c:88:e5:73:c0:36:79:a5:c5:31:9d:12:a2:16:36:71:d4:94:
         8d:8d:15:0f:02:21:fb:eb:33:8d:b9:4a:38:a0:c9:ac:10:5b:
         26:99:78:b9:77:ed:be:c9:24:ab:67:0b:92:b7:48:8e:6d:7d:
         4c:7b:d7:97:01:57:56:3e:a0:d0:73:50:6a:a5:36:d2:5c:88:
         f5:64:dc:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:22:03 2026 by rpki-client