Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
File:                     Da7a5Z2cmvUe9UivsMlkOM73IRw.mft (raw, json)
Hash identifier:          quPouH3ahcwqV629DH5IPmSQXDkgr+il9BfIA5z04+0=
Subject key identifier:   F0:C3:7B:ED:37:42:9C:56:D5:E9:AF:F7:6C:8B:81:99:32:11:5C:2E
Authority key identifier: 0D:AE:DA:E5:9D:9C:9A:F5:1E:F5:48:AF:B0:C9:64:38:CE:F7:21:1C
Certificate issuer:       /CN=0daedae59d9c9af51ef548afb0c96438cef7211c
Certificate serial:       019E1CEB48A076D6C56FB1C38D03A9F2D1DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Da7a5Z2cmvUe9UivsMlkOM73IRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
Manifest number:          1902
Signing time:             Tue 12 May 2026 16:00:41 +0000
Manifest this update:     Tue 12 May 2026 16:00:41 +0000
Manifest next update:     Wed 13 May 2026 16:00:41 +0000
Files and hashes:         1: Da7a5Z2cmvUe9UivsMlkOM73IRw.crl (hash: fn8rIEpygl8eBdPYOXS58pO1ARLKA+xlQPzFm3rORK4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Da7a5Z2cmvUe9UivsMlkOM73IRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:48:a0:76:d6:c5:6f:b1:c3:8d:03:a9:f2:d1:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0daedae59d9c9af51ef548afb0c96438cef7211c
        Validity
            Not Before: May 12 16:00:41 2026 GMT
            Not After : May 13 16:00:41 2026 GMT
        Subject: CN=f0c37bed37429c56d5e9aff76c8b819932115c2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:26:4d:8b:d8:9d:c8:92:5e:48:75:2b:00:14:
                    1b:b8:df:c6:47:9e:73:f8:05:77:4c:bb:09:b4:3e:
                    e9:84:14:8f:14:d3:b5:c1:1b:ec:c1:90:3b:d5:3b:
                    d5:f5:0e:13:1a:96:ad:3b:bd:3d:2b:cf:fd:14:5f:
                    6b:5a:9f:aa:20:56:22:99:9e:f8:ef:fc:36:c9:ec:
                    a5:fa:27:b5:59:19:ac:4c:a8:f5:60:e0:5b:06:13:
                    fd:46:a5:b2:ec:0e:57:d6:ac:c5:31:2e:2b:50:bb:
                    cd:26:83:7c:06:98:b5:52:3d:e3:46:f1:20:3c:11:
                    23:c4:e3:68:2d:3c:23:e2:f0:15:53:80:c7:1f:47:
                    de:6c:c3:46:82:3e:4f:88:f6:11:bd:66:c2:6b:6a:
                    f5:af:3e:27:55:ac:80:13:bb:ed:c2:c8:da:a6:7a:
                    2a:d3:7c:80:aa:c5:72:12:a5:57:96:ba:f4:08:68:
                    28:27:57:16:0b:c7:51:e5:b8:29:a1:f8:12:72:59:
                    e0:c0:be:dc:d0:7d:6f:13:45:94:76:f5:1e:2c:8b:
                    42:67:57:e8:b5:e7:7e:85:a5:36:55:8b:a1:e3:37:
                    da:77:ec:c5:25:77:97:23:25:13:e9:5a:7f:11:c7:
                    25:e9:8a:a4:2c:7d:4a:f6:0f:f4:88:aa:e9:1f:30:
                    bd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C3:7B:ED:37:42:9C:56:D5:E9:AF:F7:6C:8B:81:99:32:11:5C:2E
            X509v3 Authority Key Identifier:
                keyid:0D:AE:DA:E5:9D:9C:9A:F5:1E:F5:48:AF:B0:C9:64:38:CE:F7:21:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Da7a5Z2cmvUe9UivsMlkOM73IRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:51:d1:18:89:b1:5b:bd:6d:9a:af:76:8e:57:c3:c6:fb:29:
         64:c1:d4:cf:6a:c6:c6:2f:62:3c:58:61:48:d3:07:55:74:ad:
         69:8d:6f:39:ad:10:f8:5c:93:03:ef:5e:68:ea:0b:68:75:5a:
         92:06:0b:90:87:f8:ca:25:76:63:31:d7:f5:18:68:fa:19:93:
         ef:3b:92:10:c9:1c:fe:5c:89:85:86:e2:5e:d3:e0:8e:aa:42:
         c5:0e:f6:4d:1f:4d:cc:c9:0e:8a:42:ef:a6:0a:95:ea:61:6d:
         4f:09:5d:c3:01:81:af:26:f9:31:57:3c:e4:f0:94:e3:e5:45:
         01:e2:ef:86:12:a2:89:74:f7:27:0c:36:51:d4:15:f2:b4:cf:
         11:3f:05:05:18:fa:92:4d:18:d6:b8:e2:d1:ff:35:29:b9:f6:
         c8:a5:67:3e:96:e1:8d:cd:29:4d:78:28:c1:71:47:a7:ad:02:
         31:70:20:45:b2:f5:e8:6a:d1:14:85:4a:27:3f:e3:1b:6c:2a:
         18:78:0c:ef:4e:c2:46:b3:4f:4d:b4:e8:7d:ae:21:e7:55:85:
         e8:ff:a2:c3:f2:ca:c6:ad:33:b6:1b:c2:8f:88:8b:6b:77:46:
         46:28:74:f4:19:28:2b:67:e7:82:97:8e:1c:bf:88:5a:3c:96:
         bb:fd:3a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:05:54 2026 by rpki-client