Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
File:                     CRRy5SBHtfd1PvFSbdo47UKL_kc.mft (raw, json)
Hash identifier:          winaWQPqqib97JxHaxMIsCUe8Abh3p6IUBBm8AphJUY=
Subject key identifier:   07:FE:9A:26:45:07:0E:CC:FC:A2:02:76:AC:3E:33:21:B6:EE:91:BD
Authority key identifier: 09:14:72:E5:20:47:B5:F7:75:3E:F1:52:6D:DA:38:ED:42:8B:FE:47
Certificate issuer:       /CN=091472e52047b5f7753ef1526dda38ed428bfe47
Certificate serial:       019E1D908D9AD73EB34648A3E44A5B9F34DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
Manifest number:          0FD8
Signing time:             Tue 12 May 2026 19:01:12 +0000
Manifest this update:     Tue 12 May 2026 19:01:12 +0000
Manifest next update:     Wed 13 May 2026 19:01:12 +0000
Files and hashes:         1: CRRy5SBHtfd1PvFSbdo47UKL_kc.crl (hash: AeE9qRB7WGT4IZsiwemHYWvSMYFIMTbkYJYMdmp/QLk=)
                          2: ECXIzFT9fepBNclb1K3f0soMTMI.roa (hash: kie5Trf/wMm9ar/CMryyHcm/iNefqFWM8mxR0DMVctk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:8d:9a:d7:3e:b3:46:48:a3:e4:4a:5b:9f:34:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=091472e52047b5f7753ef1526dda38ed428bfe47
        Validity
            Not Before: May 12 19:01:12 2026 GMT
            Not After : May 13 19:01:12 2026 GMT
        Subject: CN=07fe9a2645070eccfca20276ac3e3321b6ee91bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1c:41:0c:e5:06:1c:a9:9c:fe:51:82:52:e5:
                    b8:3d:5d:fa:b4:67:7a:d2:d6:21:1a:6b:78:d4:17:
                    fe:21:2c:b8:91:bd:ee:67:d2:56:55:4e:5b:d5:e8:
                    78:9d:85:9d:23:8d:8a:47:8b:81:cf:94:c1:1c:28:
                    57:ac:d6:a0:c1:6a:dd:73:a1:18:1f:d3:91:89:0d:
                    4a:a0:68:ad:dc:90:59:25:28:1b:dd:d2:a8:0b:b3:
                    c9:0a:02:62:32:dd:e3:c5:14:1f:32:ac:2e:4d:9a:
                    e3:a0:45:95:c7:03:82:2a:f6:08:98:f0:72:b6:6c:
                    71:70:12:02:b3:f8:30:28:84:26:2b:04:ce:a3:5f:
                    56:78:88:09:e9:0e:57:9e:e1:a0:c5:b7:7e:42:1d:
                    96:b4:75:fe:ee:53:fd:30:c9:e1:e1:29:9d:3c:27:
                    e4:db:95:64:fa:28:84:45:2b:93:30:c4:da:1e:85:
                    c8:c7:f4:11:f5:2a:af:a4:21:ab:41:9a:2b:fd:b6:
                    ce:60:54:a4:41:45:71:9a:78:06:3f:05:68:ce:01:
                    56:d5:bd:c8:41:65:0c:7a:e4:a9:b5:cc:ec:e0:c5:
                    3f:44:9b:2a:96:48:ea:f9:97:65:68:27:16:67:6b:
                    80:31:1c:5d:6f:d6:fe:e1:fa:36:90:4f:f2:f0:a3:
                    0f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:FE:9A:26:45:07:0E:CC:FC:A2:02:76:AC:3E:33:21:B6:EE:91:BD
            X509v3 Authority Key Identifier:
                keyid:09:14:72:E5:20:47:B5:F7:75:3E:F1:52:6D:DA:38:ED:42:8B:FE:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:04:75:63:3c:85:ae:44:b2:88:bd:47:c5:4e:26:84:40:e5:
         df:6f:a8:13:c1:e4:5d:a5:b9:16:0a:8c:ed:d4:08:09:10:d6:
         37:a3:a9:5d:14:c6:10:ef:99:c6:8c:f7:0d:b1:8f:a4:19:7f:
         ac:95:6a:8c:7b:32:c3:72:b5:41:65:1f:ea:a6:7a:7d:43:7a:
         3a:01:8f:81:52:ff:77:0b:fe:ca:31:9a:8e:9a:79:ae:b8:34:
         6d:d5:37:3b:e1:c0:d9:af:94:f4:94:08:ba:2a:74:be:85:42:
         3d:5c:07:6c:0f:97:1e:cd:27:e1:d7:a6:70:cd:b5:c6:ab:2a:
         da:72:81:3a:d4:61:b1:46:3b:9d:73:78:29:ce:e2:6e:e2:76:
         f2:b3:dd:e7:b8:33:99:e3:09:07:fa:37:16:50:02:5b:0c:64:
         3f:23:32:3d:3f:82:33:97:f3:f5:57:0c:dc:1b:2d:64:98:35:
         53:90:93:ba:35:9b:de:0b:ab:5a:7d:c6:0b:df:c3:7b:25:b7:
         63:66:7a:86:ed:fb:30:09:5b:5f:70:3b:24:60:bd:95:37:8b:
         41:91:45:4d:e5:67:9b:11:0f:f7:b2:98:37:a3:ab:90:4c:c7:
         a9:70:0a:a3:12:a6:eb:6c:8e:c7:04:ef:b6:81:bb:e9:44:08:
         42:0f:52:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:30:18 2026 by rpki-client