Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
File:                     1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft (raw, json)
Hash identifier:          C6s0QBGxUu/CKQ8bu5wwZiQ7RMx9o+sLHhCkZ/w8qhQ=
Subject key identifier:   C4:1C:BF:B9:89:E1:DF:82:25:D6:8D:06:35:1C:56:A1:D4:89:42:90
Authority key identifier: FA:BB:49:E6:88:33:5A:B1:59:3F:9D:10:E0:06:EF:5E:9B:C8:BD:56
Certificate issuer:       /CN=fabb49e688335ab1593f9d10e006ef5e9bc8bd56
Certificate serial:       019E314DB7D97D44E48A2A9F9223C42685FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
Manifest number:          1911
Signing time:             Sat 16 May 2026 15:00:37 +0000
Manifest this update:     Sat 16 May 2026 15:00:37 +0000
Manifest next update:     Sun 17 May 2026 15:00:37 +0000
Files and hashes:         1: 1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl (hash: 6AXexqYTs9PL6yjL0/dMiLPr85/kog894vU5xevjMqY=)
                          2: Rho95ZWPheaVQQ9rPl1_APX-IdU.roa (hash: C+usd2BKZ4KTjGvMtB8Sy6rObSrr4wOsZ9I+pM/IkIQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4d:b7:d9:7d:44:e4:8a:2a:9f:92:23:c4:26:85:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fabb49e688335ab1593f9d10e006ef5e9bc8bd56
        Validity
            Not Before: May 16 15:00:37 2026 GMT
            Not After : May 17 15:00:37 2026 GMT
        Subject: CN=c41cbfb989e1df8225d68d06351c56a1d4894290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:17:e1:ad:92:5a:8e:0c:0d:00:e8:48:10:64:
                    50:b4:36:50:5c:1d:68:7d:04:66:6d:ea:33:42:57:
                    16:b7:e6:da:db:39:fe:bb:c2:8d:4f:2c:ab:42:78:
                    6f:ac:35:58:2f:f4:07:9c:35:3f:34:93:90:cc:c2:
                    bf:01:41:6e:0b:bc:8e:7a:67:63:44:7b:81:5c:c2:
                    44:e2:cc:a8:16:47:41:f4:58:7b:4f:7f:bb:a5:eb:
                    fd:83:5e:6d:10:b5:e1:df:07:0e:40:4c:dd:cc:18:
                    c0:90:46:00:a0:9b:47:8e:2e:0c:9f:75:09:95:cb:
                    c7:9a:77:d1:8a:47:e6:b8:fb:91:fb:b5:47:9e:cf:
                    51:05:fe:86:c5:1a:8c:9a:1f:47:3b:72:54:03:60:
                    27:8b:ec:e6:1b:d3:1b:ad:16:97:93:8f:15:06:bc:
                    d7:a5:8a:8b:e2:fe:47:6d:6b:79:68:5c:b2:ba:e5:
                    c8:9f:96:15:18:6f:53:a1:7e:20:4f:a8:c4:5c:7b:
                    c7:fd:15:33:ba:39:e2:eb:c5:9d:b3:9d:30:c6:87:
                    db:c9:fd:8f:f4:b4:db:65:a1:c4:fb:ac:45:80:79:
                    c3:44:1b:d9:15:31:93:f3:ff:1b:c9:7c:fa:13:dc:
                    44:1b:97:ea:2d:09:f5:4b:a3:e1:0f:e3:2c:86:d8:
                    f9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:1C:BF:B9:89:E1:DF:82:25:D6:8D:06:35:1C:56:A1:D4:89:42:90
            X509v3 Authority Key Identifier:
                keyid:FA:BB:49:E6:88:33:5A:B1:59:3F:9D:10:E0:06:EF:5E:9B:C8:BD:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:ec:54:21:d2:22:b4:bc:65:d9:3f:b8:ec:12:2c:fc:a6:23:
         ba:57:c4:aa:5f:bf:bc:69:72:69:28:48:62:3b:98:94:b7:4d:
         3f:6d:97:9b:61:0b:b4:a1:b2:86:b4:14:f4:66:f6:e7:27:27:
         9c:1f:7d:20:70:a3:c0:3b:b8:80:80:85:ad:00:44:56:d5:e2:
         eb:6b:a6:c7:5f:be:61:97:9e:b3:43:9f:31:05:9f:14:8c:20:
         f5:38:ab:bf:90:28:31:64:77:48:57:12:ad:4a:07:cb:64:a0:
         54:d9:48:a1:62:25:56:6e:f8:3b:d4:bd:1d:15:bc:ce:4e:1a:
         80:1d:50:b3:0a:59:8d:e7:77:d0:7b:6d:13:ce:05:63:9d:bc:
         73:3c:b5:73:64:31:f5:94:48:70:5b:56:92:1d:36:0a:ea:ee:
         90:7c:5c:09:19:d8:b6:31:80:7d:ac:f0:57:56:06:ed:0b:10:
         4e:80:80:2e:58:3e:08:39:f7:d9:09:65:b0:e0:e1:53:36:c7:
         48:16:d6:70:9c:e7:e2:c7:dc:51:a5:bc:46:e8:dc:d2:8b:32:
         ee:e8:8c:4f:26:7a:6e:c4:21:c7:07:95:2e:d2:61:6f:41:bd:
         15:05:9f:8a:f2:c6:4b:85:ab:83:50:c7:f0:33:2f:ab:55:24:
         c2:61:f5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:55:32 2026 by rpki-client