Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
File:                     IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft (raw, json)
Hash identifier:          F7Kq6IxZTczUDyQMJSzJ2MSWEyK03F2s5yhRVUzPYqM=
Subject key identifier:   0D:98:D0:F5:B7:B5:C5:AD:FB:C0:22:FF:4B:BD:21:1D:24:36:64:E9
Authority key identifier: 20:65:CE:D8:29:C0:11:CD:B5:AB:B3:81:C1:64:78:2D:ED:16:27:E0
Certificate issuer:       /CN=2065ced829c011cdb5abb381c164782ded1627e0
Certificate serial:       019E3073092A72501B7DC6E6AC91EE215FD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
Manifest number:          0629
Signing time:             Sat 16 May 2026 11:01:45 +0000
Manifest this update:     Sat 16 May 2026 11:01:45 +0000
Manifest next update:     Sun 17 May 2026 11:01:45 +0000
Files and hashes:         1: IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl (hash: ZCx4A51fidV5YccHWwtDTv9hM/2i0xvCDmkCUo1bZf4=)
                          2: fmfMKVUT1v23IOfvxsOu3DSMyz8.roa (hash: u2kyNqDKTbLApMvC0LB9zT5i0g/bvpJwVbX+TwLXl+g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:73:09:2a:72:50:1b:7d:c6:e6:ac:91:ee:21:5f:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2065ced829c011cdb5abb381c164782ded1627e0
        Validity
            Not Before: May 16 11:01:45 2026 GMT
            Not After : May 17 11:01:45 2026 GMT
        Subject: CN=0d98d0f5b7b5c5adfbc022ff4bbd211d243664e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:0c:b7:62:62:7e:99:2c:4a:16:5c:03:bd:fa:
                    48:01:44:65:0f:a0:8a:dc:5b:7b:39:0f:67:5d:d1:
                    fa:eb:09:1a:de:8d:0e:24:db:6b:f1:d0:fa:0d:9a:
                    d7:a5:4d:c7:ad:5d:3c:f9:e3:fe:d2:8f:a5:1f:10:
                    a5:e4:df:52:25:a4:e2:cc:40:74:65:eb:5e:b4:f7:
                    db:7e:e8:bd:5b:9c:8e:29:bc:a8:63:c6:dc:63:96:
                    ca:e8:74:48:0e:41:bc:85:31:8a:81:05:73:5e:ba:
                    16:3c:fc:75:99:33:e4:3e:06:64:93:7f:b0:d5:3c:
                    de:14:0f:65:db:02:ba:57:5a:e8:12:84:fe:37:8e:
                    6a:1d:5f:b6:a7:dc:0d:8a:d6:cc:79:a2:01:36:66:
                    df:ea:c1:33:36:1d:c5:4c:1d:d0:ae:ce:2f:d0:fd:
                    d4:22:17:52:04:78:fb:42:54:0c:8a:5b:72:53:29:
                    41:12:5a:ee:c5:08:48:84:cc:48:c6:b8:61:a9:17:
                    04:33:ea:66:8d:f0:1b:db:5c:46:2b:70:6a:82:37:
                    db:33:fd:2e:a5:35:2a:18:0f:c8:55:27:b6:c4:dd:
                    1d:df:99:fe:53:e0:fb:59:b0:20:fb:03:84:7d:ba:
                    e5:fa:eb:ee:52:fc:4c:70:b8:c4:f1:40:60:6c:3d:
                    bc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:98:D0:F5:B7:B5:C5:AD:FB:C0:22:FF:4B:BD:21:1D:24:36:64:E9
            X509v3 Authority Key Identifier:
                keyid:20:65:CE:D8:29:C0:11:CD:B5:AB:B3:81:C1:64:78:2D:ED:16:27:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:db:b3:00:71:38:7e:ae:a5:07:d3:fc:e8:64:96:c8:03:ad:
         80:da:79:69:73:5a:06:f0:2d:ea:0d:73:bc:7d:da:8f:b3:97:
         e6:1b:6c:ca:27:1c:28:89:97:57:2e:86:f9:3d:11:f3:6f:ee:
         a3:9d:a0:d8:31:49:7e:49:49:c3:a2:55:6f:f5:3c:52:65:bb:
         98:a6:ff:1e:9e:a0:a8:17:db:65:a6:d4:8b:5c:8b:74:b3:1e:
         a8:b6:58:18:88:cf:7d:20:04:6d:51:ac:c7:bb:9e:7e:9c:23:
         e5:61:7e:b2:f0:ea:ae:96:44:06:bd:56:87:a2:01:cc:3e:b2:
         67:2b:85:d4:a6:19:8d:ec:a4:e0:74:b9:f4:cb:b4:33:8d:26:
         27:ef:46:8d:e7:bc:35:76:ac:78:e1:4f:76:22:86:c5:1b:e6:
         6e:0f:7a:fb:b4:4a:5b:3d:4e:f9:6e:84:46:71:93:b3:90:0d:
         ba:09:a1:0a:84:9a:0d:9d:e2:e1:2f:9f:56:0d:1b:bf:cc:cf:
         d6:59:7d:c0:09:14:9d:bb:24:ca:d5:55:a2:e0:b3:57:41:99:
         0c:8c:bc:f9:90:65:79:30:a7:a6:3b:4a:78:81:c1:d6:b5:87:
         57:92:e4:5a:0c:85:33:fc:6f:e8:86:71:4b:7d:9c:ce:9a:34:
         1e:68:ff:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:29:06 2026 by rpki-client