Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
File:                     DETz4ku_xgSOX_pQw9zjZP_AErA.mft (raw, json)
Hash identifier:          BhRUvniH5dF62dMGKHMYOxoEWNA3V8J0Izgj1vgv3SE=
Subject key identifier:   BC:D3:AC:08:A8:94:21:6B:A6:9F:73:22:E0:39:B2:1A:EE:C6:9D:EA
Authority key identifier: 0C:44:F3:E2:4B:BF:C6:04:8E:5F:FA:50:C3:DC:E3:64:FF:C0:12:B0
Certificate issuer:       /CN=0c44f3e24bbfc6048e5ffa50c3dce364ffc012b0
Certificate serial:       019E1CB4F28A20D642839E8A0F235FF6EAF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
Manifest number:          15CC
Signing time:             Tue 12 May 2026 15:01:21 +0000
Manifest this update:     Tue 12 May 2026 15:01:21 +0000
Manifest next update:     Wed 13 May 2026 15:01:21 +0000
Files and hashes:         1: DETz4ku_xgSOX_pQw9zjZP_AErA.crl (hash: UUiWR2jVZwnPGzm+yRNNO03mMr8Hb3oDwc20i+Glb0E=)
                          2: Ki_V1gbeMTHzzb2sAJkjbiTIB4k.roa (hash: G8coFslA7SGGsh7OBwFjSWY/mTtlNbU81EsuVTVQlk4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b4:f2:8a:20:d6:42:83:9e:8a:0f:23:5f:f6:ea:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c44f3e24bbfc6048e5ffa50c3dce364ffc012b0
        Validity
            Not Before: May 12 15:01:21 2026 GMT
            Not After : May 13 15:01:21 2026 GMT
        Subject: CN=bcd3ac08a894216ba69f7322e039b21aeec69dea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ef:8e:e2:c9:a5:89:dc:88:06:79:4b:08:42:
                    73:6f:16:29:76:25:b9:07:75:08:f0:5f:0b:76:d0:
                    0a:d4:cb:e6:f8:20:b4:e2:24:12:9a:f7:84:cc:a9:
                    76:a5:11:2b:1a:e5:a2:1c:f9:cc:51:d2:b2:86:66:
                    ca:97:f7:61:f9:26:02:7a:48:ac:18:73:4f:bb:da:
                    e3:6a:6d:37:d9:ba:e1:a8:0d:90:91:a2:4c:e9:93:
                    79:0a:d9:ee:bf:f1:09:c2:49:73:ad:e9:57:37:a1:
                    0b:a3:1e:b6:ce:c3:50:34:d5:c7:e8:c0:8a:75:c2:
                    10:8a:79:0a:eb:b3:9a:c0:e3:32:f3:77:81:b5:27:
                    b3:ea:e6:a3:79:0c:01:1e:03:24:28:23:04:c9:0d:
                    9a:fc:d7:5b:88:d8:b4:64:1c:95:24:a3:ff:cf:95:
                    df:23:41:7a:c3:63:5d:ef:09:06:03:20:9a:33:f5:
                    42:03:bd:e6:1c:de:53:53:5a:b6:6c:23:f4:a6:31:
                    0b:dc:7e:2c:67:3a:06:2d:dc:33:4a:03:f2:3f:3e:
                    d6:67:7a:5f:d8:2f:10:29:cd:c2:34:c6:21:5d:cf:
                    c8:59:55:83:aa:35:91:bb:47:b8:dc:7f:32:70:f8:
                    47:ab:a1:46:83:c3:74:23:33:80:1c:b1:d5:15:e6:
                    01:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D3:AC:08:A8:94:21:6B:A6:9F:73:22:E0:39:B2:1A:EE:C6:9D:EA
            X509v3 Authority Key Identifier:
                keyid:0C:44:F3:E2:4B:BF:C6:04:8E:5F:FA:50:C3:DC:E3:64:FF:C0:12:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:ca:80:79:1c:f1:f2:78:7d:a2:1f:a3:53:94:6a:91:19:95:
         a4:27:62:ef:92:c9:6c:03:60:9e:fd:e7:cd:cb:6d:cf:de:c4:
         b3:c0:e4:f2:24:3d:b6:5a:03:7c:52:41:f1:b0:76:5b:86:11:
         a8:7c:21:56:34:fb:e3:69:b5:53:a6:d0:c0:7b:ea:2b:7d:b6:
         5b:61:67:3a:3f:d8:e8:de:a7:0d:b8:f4:55:dd:28:b1:98:c1:
         eb:3a:9e:75:f9:05:bf:6a:00:32:b1:3a:4e:2b:92:a7:8d:2c:
         0d:82:dc:8b:48:ac:b6:7f:db:f2:d6:b2:9c:e4:87:72:d6:e4:
         0d:e5:33:b0:03:e6:8e:38:be:27:65:1d:c6:d6:f8:aa:ad:8d:
         d8:4b:1a:07:69:ef:dc:da:bb:d0:b8:e4:4c:38:36:9f:1c:b4:
         cd:44:57:b7:40:97:e0:e5:35:52:7d:64:98:17:2b:50:18:55:
         1d:4f:0e:55:87:1e:37:56:7e:b7:a0:f4:3e:7a:af:fc:a7:31:
         d7:4a:99:c2:86:37:6e:8e:38:2f:ed:c3:fb:41:c6:e1:0f:6e:
         ee:b4:84:69:8a:1c:75:ab:f7:85:9f:9c:25:fb:66:18:fb:7d:
         ba:e2:9b:ed:51:71:48:8f:93:47:39:5b:e8:8a:d5:cf:4e:44:
         c5:1d:1c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:35 2026 by rpki-client