Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
File:                     PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft (raw, json)
Hash identifier:          H71k3pa/c1pqNZwTKZIOPuDdkjTMwfo6A/m2et/EEY8=
Subject key identifier:   92:AB:E8:55:16:73:54:88:B7:95:E8:1B:44:C9:1E:AA:B2:C2:01:3A
Authority key identifier: 3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F
Certificate issuer:       /CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
Certificate serial:       019E2ADDD0168382E85E1162F3447CD84F67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
Manifest number:          0F12
Signing time:             Fri 15 May 2026 09:00:40 +0000
Manifest this update:     Fri 15 May 2026 09:00:40 +0000
Manifest next update:     Sat 16 May 2026 09:00:40 +0000
Files and hashes:         1: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl (hash: y7S+LA1eXYVpTOh23bU24mqAUj/4P04sd9qBRUEr9ls=)
                          2: bJ6xJt6ZdP1j5xV1ifbFjOZCpCg.roa (hash: CuOWPy4R5sb9VUo/TuOTu1jjmvwMnXC2ruvyuim2IiY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 09:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:dd:d0:16:83:82:e8:5e:11:62:f3:44:7c:d8:4f:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
        Validity
            Not Before: May 15 09:00:40 2026 GMT
            Not After : May 16 09:00:40 2026 GMT
        Subject: CN=92abe85516735488b795e81b44c91eaab2c2013a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f0:a6:ee:ff:7c:fe:f3:74:b3:f1:77:9e:fb:
                    39:16:2c:66:6c:ca:7a:b2:12:c5:ce:d1:c2:bd:fc:
                    8f:15:ec:2b:74:86:6c:ea:bd:44:c0:4b:4d:cc:c8:
                    9d:40:87:a8:81:34:0d:95:36:bf:41:dc:e7:00:20:
                    5e:84:42:be:37:8b:2f:27:2d:54:2e:8b:66:cb:79:
                    1d:a0:9a:d2:c5:c4:2f:06:9c:3e:a8:03:24:91:b5:
                    d7:58:a5:9a:bb:bd:6f:84:6b:5b:88:c1:6a:84:0d:
                    9b:5b:a1:76:f0:14:da:38:33:f7:94:df:9e:a3:29:
                    d6:3a:bc:c0:1b:d4:dd:b3:b5:05:73:4f:2c:78:a1:
                    13:b2:d2:ac:cb:56:84:af:65:a3:b7:80:53:08:65:
                    c3:c2:59:2a:fb:8e:c6:7f:ab:a5:8b:cc:67:3f:1f:
                    b3:05:5d:bf:68:eb:e8:bb:0d:54:b1:04:b3:f2:1c:
                    87:e7:6c:eb:96:b8:64:f5:6f:84:69:6d:9d:0a:58:
                    08:0f:80:d5:69:eb:60:65:75:b7:28:01:97:85:f9:
                    2f:ad:78:08:9c:62:a4:d2:af:ee:ec:61:73:ac:df:
                    2c:6c:1a:22:19:66:6b:4c:96:a3:9c:3d:b1:1b:01:
                    1b:ef:5c:ea:89:f1:cf:d7:3e:30:73:77:90:4c:d8:
                    35:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:AB:E8:55:16:73:54:88:B7:95:E8:1B:44:C9:1E:AA:B2:C2:01:3A
            X509v3 Authority Key Identifier:
                keyid:3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:f9:b9:3a:c4:34:d7:ef:a0:ae:86:ab:c1:73:66:68:45:91:
         6b:6c:e2:96:35:a0:7a:54:32:13:44:9d:78:82:e5:cc:66:41:
         ab:1a:2e:d8:b1:a1:38:57:1f:dd:de:2b:76:b5:38:17:27:e1:
         ea:f2:41:e8:ea:58:6d:a9:c3:30:c9:d4:6b:57:57:1b:a2:bf:
         49:4d:ee:40:41:61:1e:f5:ee:78:b8:57:d4:c7:f5:fe:e3:85:
         f5:ae:2c:ed:a0:8a:af:0f:ed:69:e5:f0:65:f4:0a:00:69:49:
         08:9c:8b:ea:af:01:93:23:90:3e:97:ef:d5:1e:cf:74:b1:3a:
         ae:46:e6:f8:71:74:e8:24:48:a4:62:48:6f:8b:7d:6f:cb:a4:
         bb:5c:06:c3:27:b1:7a:a8:6f:d7:3e:1b:8e:0b:b1:31:d1:39:
         02:de:a3:43:10:34:c6:c9:00:db:ca:c1:46:89:2a:2b:f6:76:
         cc:e3:59:9f:30:bf:b8:7b:61:b9:e3:3c:97:0d:b5:14:f3:43:
         1d:df:32:84:fb:4d:cb:9c:b7:6b:81:c3:35:37:a8:3c:78:98:
         c4:b2:a0:3d:3f:d5:34:c1:58:82:ae:98:1b:d6:04:26:d9:1e:
         ae:2d:e7:e0:51:be:7e:0d:cf:19:03:46:38:59:a3:3f:14:d9:
         69:7a:4a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 16:33:33 2026 by rpki-client