Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
File:                     0zWMPscfwZpqyYRrr03lmDY1cpM.mft (raw, json)
Hash identifier:          Yj0YmpzwsX3IMWzeRJx+NNO4glJJ90htQs9TaQWw4mA=
Subject key identifier:   55:90:2E:4A:18:53:CF:1F:7C:B2:7A:6A:FD:3A:9E:99:31:25:D1:CF
Authority key identifier: D3:35:8C:3E:C7:1F:C1:9A:6A:C9:84:6B:AF:4D:E5:98:36:35:72:93
Certificate issuer:       /CN=d3358c3ec71fc19a6ac9846baf4de59836357293
Certificate serial:       019E1F1157601E2EEF2EC564219A5EF663F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
Manifest number:          1898
Signing time:             Wed 13 May 2026 02:01:30 +0000
Manifest this update:     Wed 13 May 2026 02:01:30 +0000
Manifest next update:     Thu 14 May 2026 02:01:30 +0000
Files and hashes:         1: 0zWMPscfwZpqyYRrr03lmDY1cpM.crl (hash: XQnR/8TE8/MbMZj89wNKImmEVUcD9Xffzi0qXj4XW2k=)
                          2: kd2XyIAA-MPLC2WR1qBq8uj_YCs.roa (hash: Pu4TD0igNqCoga7095gS2kWNo5RYGEJpD46HuH2Gwbk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:57:60:1e:2e:ef:2e:c5:64:21:9a:5e:f6:63:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3358c3ec71fc19a6ac9846baf4de59836357293
        Validity
            Not Before: May 13 02:01:30 2026 GMT
            Not After : May 14 02:01:30 2026 GMT
        Subject: CN=55902e4a1853cf1f7cb27a6afd3a9e993125d1cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c2:0c:26:07:4a:27:7f:be:08:b0:38:08:62:
                    fc:f8:76:a2:94:a0:9e:43:48:5d:a5:cc:ca:00:e7:
                    dc:4a:b9:4e:4c:c5:a2:d4:f7:ea:37:67:07:8a:a7:
                    bb:e4:f5:28:fb:d9:24:75:8d:50:83:5f:c9:ba:2e:
                    5f:b4:15:b6:3b:21:99:94:13:4c:9d:fc:6d:e3:d2:
                    31:42:7d:ba:8f:8f:23:8c:3f:a2:b3:ed:45:a4:3a:
                    88:01:fa:b6:56:bb:4e:59:45:70:a5:4f:f6:15:38:
                    81:f4:61:a0:00:44:31:5d:88:e3:09:12:e0:df:dc:
                    02:80:a3:28:3d:3d:75:b2:ad:9c:9e:47:49:0e:70:
                    7a:bb:19:56:ff:84:97:31:00:61:9b:f8:01:20:8d:
                    47:3d:a2:ea:ba:cb:c4:d5:fc:20:30:a2:5a:7d:84:
                    53:33:a1:61:92:a6:a3:ba:01:a2:40:61:94:12:9d:
                    e7:9e:d7:ad:cd:da:47:a5:86:e8:fe:5b:9c:50:c7:
                    75:01:bc:60:c8:ec:ab:3c:1a:55:cf:91:70:13:c1:
                    05:5e:ae:7a:9e:e0:a5:ae:e5:d8:cc:e3:58:a2:96:
                    5d:3b:d9:63:1d:77:6c:fb:1b:7c:e0:aa:02:24:3c:
                    7e:18:12:1b:bd:d6:72:77:64:9b:49:97:f3:f8:9c:
                    6a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:90:2E:4A:18:53:CF:1F:7C:B2:7A:6A:FD:3A:9E:99:31:25:D1:CF
            X509v3 Authority Key Identifier:
                keyid:D3:35:8C:3E:C7:1F:C1:9A:6A:C9:84:6B:AF:4D:E5:98:36:35:72:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:83:07:a6:2c:22:8f:38:1d:15:6b:91:26:9a:cf:2f:71:e6:
         62:20:73:a9:fd:5f:96:3b:dc:b5:e6:bd:2d:ee:af:7f:a5:12:
         e9:42:eb:b3:eb:b5:0b:e1:55:6c:16:f0:02:62:27:1a:6b:34:
         0d:69:53:0c:7a:a5:28:3d:53:6c:4b:19:21:d8:03:83:a4:f2:
         db:0b:a6:1e:45:ec:7b:77:f5:16:96:6c:3c:b4:63:21:2b:ff:
         31:17:72:5e:c4:92:09:c8:77:9d:7a:c0:1c:d5:b0:af:6e:5f:
         e1:1c:dd:87:ce:65:6e:a5:41:2b:5f:21:1f:15:67:7b:f9:ff:
         8b:af:7d:59:6a:f1:7f:21:79:e0:37:5f:80:77:02:28:42:11:
         a4:5e:c9:a0:40:d7:93:ed:32:62:e9:3c:01:bf:60:c9:18:30:
         1c:ef:71:c4:a7:91:13:c3:ed:9a:3e:fc:63:a1:65:b8:e6:1f:
         41:73:29:91:23:c9:fe:58:b0:e2:be:96:b0:10:7e:0d:66:d0:
         e7:34:6b:d9:1a:65:63:e1:d6:29:37:80:48:d2:4f:fa:7e:ad:
         bf:6e:ec:38:1f:ba:ca:7c:e7:5e:f2:9f:8d:7a:ab:6d:64:f4:
         86:0b:0e:23:6c:69:4c:94:aa:76:d2:9d:61:02:22:c9:eb:8e:
         ee:11:b0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:49:39 2026 by rpki-client