Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
File:                     MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft (raw, json)
Hash identifier:          MKFxt7NB5YkICurKv/HZEJpMctS8NL6vmJ6/llwiqDE=
Subject key identifier:   B5:FB:04:FE:DD:4C:C4:77:1A:BC:D6:32:9C:4A:79:C8:41:24:4F:27
Authority key identifier: 31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8
Certificate issuer:       /CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8
Certificate serial:       019E30E0656CE1F3423D337B72753AFFF6F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
Manifest number:          1642
Signing time:             Sat 16 May 2026 13:01:12 +0000
Manifest this update:     Sat 16 May 2026 13:01:12 +0000
Manifest next update:     Sun 17 May 2026 13:01:12 +0000
Files and hashes:         1: BdXkp0jd5mZ59rClK2iWtZn7TxU.roa (hash: wSBDoJL04+StGfAFdruIEpNNi0ajEzoFpxeVenzGlJw=)
                          2: MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl (hash: hgois4wA9tGLLhilkJFr9dcNxg75F9KttwlbEXcZgB8=)
                          3: Ub3tAkijTEomarmcHC-ibZ-_4M8.roa (hash: hcloHlblwC5XYEC0b+lqycBvnVcEB4S5jMgnNfRAPfE=)
                          4: aASlAO3ULJvYcCaFwZuTImiJ--8.roa (hash: 3IcV0cUF4DbrPmFVcmO8nyEBwkVXv6EWYEXI+8Y8SiM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:65:6c:e1:f3:42:3d:33:7b:72:75:3a:ff:f6:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8
        Validity
            Not Before: May 16 13:01:12 2026 GMT
            Not After : May 17 13:01:12 2026 GMT
        Subject: CN=b5fb04fedd4cc4771abcd6329c4a79c841244f27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:07:d1:37:08:bf:7d:65:e4:31:91:56:28:c2:
                    60:e5:cc:50:be:31:e6:db:ec:6f:00:6d:78:c4:f0:
                    c2:38:b8:5d:2e:04:2c:8c:18:17:2f:73:a2:4d:0a:
                    18:a8:a6:fd:78:0b:1b:cd:08:77:c8:00:60:74:23:
                    90:1a:a8:d7:22:68:a4:a1:49:b1:a0:f2:de:09:46:
                    1f:a4:33:c0:43:8b:40:89:1c:32:90:87:70:bc:97:
                    17:1f:0d:28:8c:75:c4:c0:f4:f2:82:2e:f3:c8:13:
                    e8:80:6b:3d:33:6b:c1:25:96:ab:3a:e4:2f:6a:e0:
                    04:b9:71:8d:21:50:b2:82:95:63:9f:96:09:32:05:
                    bf:5c:b2:43:8d:d8:80:8a:21:bf:63:98:5f:3e:d0:
                    f5:cf:7e:35:15:cb:fc:eb:10:08:e0:27:97:85:59:
                    85:71:79:1c:17:b1:9c:f7:4f:83:4e:93:69:65:6b:
                    89:d9:d4:59:9d:21:59:60:b4:4e:e8:bf:23:09:6f:
                    f7:e2:52:23:b8:4f:72:5b:63:2e:5c:a8:18:b0:0a:
                    18:9a:bc:9b:bc:30:dd:1f:87:9d:a0:1e:e6:6e:fa:
                    ed:c6:17:ba:5f:98:02:39:05:90:98:d8:cc:2a:55:
                    5b:a0:a5:2a:30:3e:db:ea:0e:4c:77:78:a5:a0:b1:
                    8b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:FB:04:FE:DD:4C:C4:77:1A:BC:D6:32:9C:4A:79:C8:41:24:4F:27
            X509v3 Authority Key Identifier:
                keyid:31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:1a:7d:84:d6:a3:d9:94:0e:5b:48:d2:fc:a1:01:9c:cb:8c:
         8a:18:8c:b6:72:a6:16:c1:b1:d0:17:c2:84:ee:f9:84:44:14:
         84:cc:8e:c5:98:c6:7e:91:0f:b1:ee:04:81:23:1c:bf:45:c7:
         ae:16:3c:bb:7d:3f:c0:7b:49:7f:5d:b7:23:59:94:21:d2:7a:
         0b:31:d1:7e:4c:b1:83:f8:64:c0:12:c8:68:35:68:e8:2e:cb:
         3b:45:e7:45:1a:9d:db:48:70:25:d7:3b:8b:c3:b0:41:ff:fe:
         b0:bf:d3:be:a2:63:35:74:a3:5c:38:66:ba:f7:27:b4:79:af:
         3d:ab:b5:3e:32:4a:03:ae:5c:26:44:16:83:9b:e0:b9:5c:80:
         8b:eb:51:71:b5:43:5e:08:58:47:1d:62:99:cf:78:c6:46:21:
         25:5b:fd:2e:07:68:af:ca:3b:f9:ce:b6:31:d6:20:cd:ca:e8:
         09:d9:ab:fe:19:6f:f4:6f:a7:e8:7f:fd:cd:95:45:c4:7f:1b:
         84:ae:06:bc:5c:8d:59:3a:39:4e:e6:25:96:cb:ff:9a:5d:15:
         82:27:37:5e:7f:1c:11:a6:56:8d:34:58:b5:b5:ec:04:86:4f:
         54:86:40:b3:98:7e:d7:b0:50:78:a1:2e:49:eb:a3:5d:25:e8:
         c4:0e:1b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:01:29 2026 by rpki-client