Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2b1f2b-4615-4cad-8c26-6247ec30bfc8/1/feM_CE7LgSODxwJ1w4XUYZstox8.mft
File:                     feM_CE7LgSODxwJ1w4XUYZstox8.mft (raw, json)
Hash identifier:          vBWQnuUmCL12x1qOHL0M7VWqGIq8icpG6mv8MX6ud8o=
Subject key identifier:   CA:F3:95:32:A1:2D:62:87:70:88:C0:83:C1:79:A6:8B:91:3A:C9:6A
Authority key identifier: 7D:E3:3F:08:4E:CB:81:23:83:C7:02:75:C3:85:D4:61:9B:2D:A3:1F
Certificate issuer:       /CN=7de33f084ecb812383c70275c385d4619b2da31f
Certificate serial:       019E2813DB531960F4CF4DDAFD803BDD5374
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/feM_CE7LgSODxwJ1w4XUYZstox8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/2b1f2b-4615-4cad-8c26-6247ec30bfc8/1/feM_CE7LgSODxwJ1w4XUYZstox8.mft
Manifest number:          18
Signing time:             Thu 14 May 2026 20:00:50 +0000
Manifest this update:     Thu 14 May 2026 20:00:50 +0000
Manifest next update:     Fri 15 May 2026 20:00:50 +0000
Files and hashes:         1: 5Scl3zXAEvT9Imonr9uJSjo6tG8.asa (hash: 2kTmN9J7DNO7vHCgKZRb1obKROe/qCTKWR7Gio+rcvQ=)
                          2: feM_CE7LgSODxwJ1w4XUYZstox8.crl (hash: B9Z5PDeroEZ3nXoh3zOpryjanb00GgUvBVIu5VFBzx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/2b1f2b-4615-4cad-8c26-6247ec30bfc8/1/feM_CE7LgSODxwJ1w4XUYZstox8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/2b1f2b-4615-4cad-8c26-6247ec30bfc8/1/feM_CE7LgSODxwJ1w4XUYZstox8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/feM_CE7LgSODxwJ1w4XUYZstox8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 20:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:28:13:db:53:19:60:f4:cf:4d:da:fd:80:3b:dd:53:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7de33f084ecb812383c70275c385d4619b2da31f
        Validity
            Not Before: May 14 20:00:50 2026 GMT
            Not After : May 15 20:00:50 2026 GMT
        Subject: CN=caf39532a12d62877088c083c179a68b913ac96a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:89:0b:ac:fd:6c:4c:94:f0:26:44:a6:f7:fb:
                    53:38:b2:3a:36:d3:e6:c4:53:53:41:84:a7:6d:51:
                    fe:e7:25:80:d1:59:12:a3:2f:3f:18:e7:72:cb:2d:
                    9e:4e:d4:a8:8e:22:4f:16:b7:62:b0:c9:51:b6:3a:
                    96:ec:75:14:d3:ec:e4:61:e9:6c:d2:ec:ec:6c:64:
                    2c:b0:84:fb:2a:f8:f0:51:0c:ce:26:c5:57:e5:0f:
                    19:f6:7a:d5:8e:9a:7f:ba:6e:80:ee:38:a5:ac:8b:
                    84:81:93:d5:d5:8d:d8:91:6f:1b:31:9f:1b:cc:f8:
                    9f:14:11:5d:76:a4:08:15:f7:31:6a:44:6b:f1:0b:
                    1e:7a:fb:d2:10:05:c3:08:c0:1a:fd:73:15:47:95:
                    73:af:f5:64:67:64:ef:30:4c:06:cf:a5:29:eb:bf:
                    33:ae:57:b2:96:82:ef:5f:fe:0d:a1:b0:ac:b7:69:
                    13:94:3d:3a:94:d4:5e:09:2b:51:6d:88:75:ef:e0:
                    d5:c2:1e:04:86:e5:d3:f7:9a:02:cd:e2:e7:37:5e:
                    5f:e5:6f:54:ea:03:90:21:8b:8c:7a:10:cd:bc:22:
                    6b:74:4f:21:fb:eb:31:5e:83:04:bd:4f:ca:9a:ab:
                    4d:60:e1:22:1f:df:95:1a:4c:23:bc:9c:95:fd:be:
                    22:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F3:95:32:A1:2D:62:87:70:88:C0:83:C1:79:A6:8B:91:3A:C9:6A
            X509v3 Authority Key Identifier:
                keyid:7D:E3:3F:08:4E:CB:81:23:83:C7:02:75:C3:85:D4:61:9B:2D:A3:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/feM_CE7LgSODxwJ1w4XUYZstox8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b1f2b-4615-4cad-8c26-6247ec30bfc8/1/feM_CE7LgSODxwJ1w4XUYZstox8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b1f2b-4615-4cad-8c26-6247ec30bfc8/1/feM_CE7LgSODxwJ1w4XUYZstox8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:82:85:8b:f9:53:62:8f:75:fb:65:65:08:fb:4b:5c:78:b7:
         ee:74:b2:74:4d:9e:e3:c5:93:c3:08:22:2e:b5:ff:a1:f3:04:
         5b:d4:ba:c9:a9:83:5f:86:08:f7:22:c1:99:16:f6:83:60:20:
         5a:88:23:d5:32:3d:f4:68:a7:b8:4b:3d:f5:13:d6:ec:d1:e5:
         61:69:16:74:f3:71:8b:24:7f:aa:b5:9a:3a:36:10:c2:e6:c7:
         e0:b2:4d:28:1e:b8:f6:61:cc:64:a8:3c:96:c8:d1:27:75:10:
         27:72:76:2d:61:02:2d:50:51:58:49:90:04:4e:03:e5:5a:7f:
         94:b5:a6:e9:3d:c9:1c:1c:5a:d8:ed:0e:f1:fc:48:5a:03:6c:
         88:8f:a1:ad:37:e4:36:d9:0e:c4:86:b9:cd:9e:02:8d:2d:0f:
         3e:a9:8c:69:83:a7:19:2f:ec:53:98:ca:c1:1c:3b:f6:1b:a4:
         a5:8a:38:e9:f9:d3:f9:a8:bb:96:a0:35:80:1f:4a:cf:36:dc:
         66:78:b7:c2:ed:5a:43:1d:87:8e:0e:a9:4a:f0:b6:ae:a5:ce:
         a2:aa:bd:89:b1:47:e1:86:22:a2:2a:32:47:07:1b:66:3b:53:
         79:98:d2:b3:e5:8d:4c:fa:69:75:05:32:90:cd:eb:b2:01:25:
         3e:3d:ad:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:14:36 2026 by rpki-client