Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/166b33-f79d-4308-ad07-5b7b9570099e/1/CMe2W6ZlnidXB3PFCFWHVOtJDd4.mft
File:                     CMe2W6ZlnidXB3PFCFWHVOtJDd4.mft (raw, json)
Hash identifier:          ejIE/UFJOF7lEAQ+ouJRUBvkKjTlUt6FrSYLcLaVEEA=
Subject key identifier:   A2:29:A3:BC:F4:C3:BF:0E:5F:43:D4:5C:FD:65:36:C4:0F:F6:9A:E4
Authority key identifier: 08:C7:B6:5B:A6:65:9E:27:57:07:73:C5:08:55:87:54:EB:49:0D:DE
Certificate issuer:       /CN=08c7b65ba6659e27570773c508558754eb490dde
Certificate serial:       019E1BD8EFEC7979CB89E962A34B3E58897B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CMe2W6ZlnidXB3PFCFWHVOtJDd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/166b33-f79d-4308-ad07-5b7b9570099e/1/CMe2W6ZlnidXB3PFCFWHVOtJDd4.mft
Manifest number:          0275
Signing time:             Tue 12 May 2026 11:01:02 +0000
Manifest this update:     Tue 12 May 2026 11:01:02 +0000
Manifest next update:     Wed 13 May 2026 11:01:02 +0000
Files and hashes:         1: CMe2W6ZlnidXB3PFCFWHVOtJDd4.crl (hash: py58dOtg6bQxXB09UDHsEor67lbEFGKaTCIRaHjq0yw=)
                          2: SRXdpHT57ULX4WKXkvYrazem0ic.roa (hash: ee1vZ+vWObcfNj4Y7l+2NN7pUFsGmvTOn9r3vlBcOP4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/166b33-f79d-4308-ad07-5b7b9570099e/1/CMe2W6ZlnidXB3PFCFWHVOtJDd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/166b33-f79d-4308-ad07-5b7b9570099e/1/CMe2W6ZlnidXB3PFCFWHVOtJDd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CMe2W6ZlnidXB3PFCFWHVOtJDd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 11:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1b:d8:ef:ec:79:79:cb:89:e9:62:a3:4b:3e:58:89:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08c7b65ba6659e27570773c508558754eb490dde
        Validity
            Not Before: May 12 11:01:02 2026 GMT
            Not After : May 13 11:01:02 2026 GMT
        Subject: CN=a229a3bcf4c3bf0e5f43d45cfd6536c40ff69ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:43:7d:44:34:2d:d6:8d:d3:15:17:2c:5c:21:
                    a0:c4:4a:6a:3d:a3:38:8b:ce:e9:2b:b0:39:eb:7e:
                    bf:3d:7c:19:8d:ad:16:a5:d2:b3:45:f8:eb:f6:78:
                    16:e4:a1:7c:03:4f:65:f1:d8:d9:8f:90:d0:c6:7a:
                    9a:ed:29:2f:c8:dc:31:b9:57:e5:43:00:ba:ed:ff:
                    6b:89:cc:dd:9f:a1:60:f3:f5:56:0a:5d:d5:f3:b3:
                    2c:5b:b7:11:85:78:9a:ff:55:23:aa:52:c6:26:19:
                    0a:e1:e3:d8:18:a2:c4:64:c0:c9:f0:5b:f4:e7:b5:
                    be:1f:61:65:e7:fb:2d:b5:51:73:6b:d7:06:99:f4:
                    e3:03:66:1d:3d:36:d4:b2:6a:39:01:f0:d3:ce:bf:
                    00:cd:37:8e:48:43:21:89:f2:6b:8f:0f:6b:25:3c:
                    8e:14:5c:a5:24:82:43:f6:54:a0:af:46:d2:8c:d2:
                    9b:9e:44:f4:c2:44:69:4e:98:e1:c0:bc:5f:27:49:
                    dc:f7:d7:7d:c9:48:ae:86:bf:36:67:f3:57:c6:95:
                    22:37:fc:72:51:72:4e:a0:fe:13:44:7c:55:3d:3f:
                    ad:bc:70:7e:0e:35:ff:81:70:21:ff:75:7b:dc:da:
                    2d:f2:1a:f9:66:0c:8d:47:83:e9:ee:ab:7e:b3:a9:
                    c5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:29:A3:BC:F4:C3:BF:0E:5F:43:D4:5C:FD:65:36:C4:0F:F6:9A:E4
            X509v3 Authority Key Identifier:
                keyid:08:C7:B6:5B:A6:65:9E:27:57:07:73:C5:08:55:87:54:EB:49:0D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CMe2W6ZlnidXB3PFCFWHVOtJDd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/166b33-f79d-4308-ad07-5b7b9570099e/1/CMe2W6ZlnidXB3PFCFWHVOtJDd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/166b33-f79d-4308-ad07-5b7b9570099e/1/CMe2W6ZlnidXB3PFCFWHVOtJDd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:dc:cf:ab:12:cf:1e:53:d4:c6:6c:ec:c9:f1:11:d1:6f:fc:
         77:b7:a5:49:8f:21:0a:1d:95:c3:90:78:49:34:35:17:a3:b8:
         6d:ea:29:95:dc:c1:63:13:92:8f:14:d9:54:9c:12:b9:0e:d6:
         3a:a4:e7:a7:36:e5:9b:fd:7e:f7:ad:59:d1:f1:71:54:4e:0d:
         5a:f7:09:e4:93:c5:a7:07:70:04:7c:c4:7f:04:fd:e6:bb:8a:
         1a:1c:44:d3:a6:94:bc:95:57:93:4a:db:c9:9d:50:d9:de:93:
         bb:12:f7:0d:66:97:fd:71:3a:cb:d5:68:cb:5b:76:3e:fc:78:
         2c:33:71:4b:82:15:55:19:25:02:80:66:9b:35:15:06:ac:88:
         f0:1c:3b:b6:df:7e:ff:26:e6:63:e4:bc:ff:f8:c7:35:a5:2e:
         65:90:e2:55:5b:f8:bc:47:23:3a:fa:83:c9:2e:41:36:08:be:
         74:81:d3:09:50:91:81:94:45:61:1c:6e:0f:9a:7c:f1:eb:f1:
         8d:f1:af:6b:d4:2b:9e:b6:b7:37:a5:76:f0:08:20:6b:56:43:
         ee:51:5b:0e:f9:6d:3d:ab:00:3d:fb:4b:97:bb:83:c3:94:46:
         72:fd:23:32:3c:40:9c:c7:ce:0a:2c:a3:bc:20:47:14:fd:31:
         9c:3d:1f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:58 2026 by rpki-client