Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
File:                     1Fib0sD75-LYWSzuaHGSu7V5efc.mft (raw, json)
Hash identifier:          pXVxhqZ6uSui4MjB/81JOlv8Zh7kOMJs2/i+5QpPApA=
Subject key identifier:   A3:60:85:6C:49:EC:E1:C2:74:D3:17:1B:19:5B:B3:28:D8:3D:F7:E7
Authority key identifier: D4:58:9B:D2:C0:FB:E7:E2:D8:59:2C:EE:68:71:92:BB:B5:79:79:F7
Certificate issuer:       /CN=d4589bd2c0fbe7e2d8592cee687192bbb57979f7
Certificate serial:       019E2F96A05E13066BD669C49DEAC802834D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
Manifest number:          05D0
Signing time:             Sat 16 May 2026 07:01:00 +0000
Manifest this update:     Sat 16 May 2026 07:01:00 +0000
Manifest next update:     Sun 17 May 2026 07:01:00 +0000
Files and hashes:         1: 1Fib0sD75-LYWSzuaHGSu7V5efc.crl (hash: So78dHE19SeNKW7Ag3B2PfewwFMYQGAR285Iqyve4gA=)
                          2: hX56E-sl6aHlAsJVpCUmggT-itQ.roa (hash: zGrp5qWxfaDDtjYhp74VIMRhcorx1N2/XDFt+aUjFhY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:96:a0:5e:13:06:6b:d6:69:c4:9d:ea:c8:02:83:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4589bd2c0fbe7e2d8592cee687192bbb57979f7
        Validity
            Not Before: May 16 07:01:00 2026 GMT
            Not After : May 17 07:01:00 2026 GMT
        Subject: CN=a360856c49ece1c274d3171b195bb328d83df7e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:11:a7:ed:08:89:3d:4b:30:c0:99:4d:07:cf:
                    55:4e:c1:33:4f:77:69:9c:77:83:d3:74:e1:b4:e1:
                    37:57:79:01:82:2d:82:6a:95:e0:40:0f:d8:86:de:
                    ce:88:6a:0e:a9:a1:db:89:8c:0d:a5:29:3f:fd:b4:
                    74:8b:4c:da:87:7c:7c:99:92:a5:a8:91:89:0a:a0:
                    63:2c:e4:8f:3f:51:bc:4b:57:e7:17:6d:4b:c0:dc:
                    b0:6d:54:1c:bd:6e:3d:f7:17:f5:04:e9:f9:c7:68:
                    83:64:0b:78:8c:a2:0f:a1:74:f7:0d:bb:ea:7c:c3:
                    c3:ed:4d:c0:32:30:45:28:d3:a0:07:24:47:48:41:
                    2c:53:8c:0a:5a:86:39:7b:12:9f:0b:99:63:ca:b4:
                    d0:f0:76:31:8a:01:54:50:70:ff:32:85:3d:6d:d8:
                    d7:49:56:2f:2e:51:c0:92:b9:f1:14:34:3d:06:ed:
                    85:ae:67:57:8c:4b:7b:f4:ca:45:09:7e:84:f4:73:
                    99:25:33:70:49:f2:13:53:a1:b6:fc:02:64:54:bb:
                    06:0c:b9:9e:e7:2a:df:c0:65:2a:3a:b8:89:f8:46:
                    fc:b1:af:0a:27:3e:9a:7b:4e:83:b8:d4:c5:a1:8a:
                    a7:93:59:8c:54:5e:d2:5b:a0:31:03:ed:1b:fb:03:
                    2e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:60:85:6C:49:EC:E1:C2:74:D3:17:1B:19:5B:B3:28:D8:3D:F7:E7
            X509v3 Authority Key Identifier:
                keyid:D4:58:9B:D2:C0:FB:E7:E2:D8:59:2C:EE:68:71:92:BB:B5:79:79:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:73:bb:5d:ed:b8:c0:1c:d1:4f:c6:6f:8b:29:97:f3:4a:81:
         88:9a:a4:cd:73:e5:92:88:1a:39:f3:e1:02:de:2d:c0:1f:c4:
         31:ad:3c:51:3a:67:bd:a0:30:ae:0d:06:b0:3b:21:1e:86:93:
         9d:da:65:f5:08:8a:ca:0e:6e:95:5b:4a:13:fe:d3:bd:3d:45:
         68:95:31:be:eb:18:09:bb:00:69:99:a1:62:c7:55:a6:34:47:
         50:c6:d9:c8:97:dc:08:59:b7:11:aa:07:2b:48:64:d9:00:d9:
         f9:60:74:49:4e:5d:22:9a:66:5d:47:7d:5e:86:e4:a5:41:c2:
         0f:68:88:fc:35:71:15:f3:8a:1d:ec:a9:07:e2:8d:fe:08:0a:
         36:76:62:82:2c:14:fc:0b:33:df:df:5a:46:e2:cb:c8:dd:c4:
         dd:c5:5b:3c:f0:6f:82:8d:16:5e:f3:a5:02:c5:1a:81:97:36:
         51:d0:c3:ba:d3:6b:e3:96:be:98:5b:a1:d6:80:41:4c:81:58:
         ae:24:93:09:32:89:a0:5e:0c:86:51:d6:d4:6f:d2:56:11:b2:
         fc:31:04:98:b2:db:13:dc:b3:03:83:51:0e:8f:b5:ec:94:db:
         8f:92:ef:f3:1c:32:88:a5:17:5b:6b:75:f6:fd:1d:60:ff:c1:
         8f:27:8a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:14:35 2026 by rpki-client