Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.mft
File:                     V4DOZAV5R263qnPBnLdOvt_daCs.mft (raw, json)
Hash identifier:          8O074ie5Kst2JqRfiDuh7BIw8pR5j553XSspm2XP1wA=
Subject key identifier:   3D:ED:D1:8B:E7:36:37:72:8D:D4:31:AC:28:E2:58:20:52:6E:F5:67
Authority key identifier: 57:80:CE:64:05:79:47:6E:B7:AA:73:C1:9C:B7:4E:BE:DF:DD:68:2B
Certificate issuer:       /CN=5780ce640579476eb7aa73c19cb74ebedfdd682b
Certificate serial:       019E28EF899F0EC80AE6784A03079E13D7FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V4DOZAV5R263qnPBnLdOvt_daCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.mft
Manifest number:          103F
Signing time:             Fri 15 May 2026 00:00:47 +0000
Manifest this update:     Fri 15 May 2026 00:00:47 +0000
Manifest next update:     Sat 16 May 2026 00:00:47 +0000
Files and hashes:         1: RDCVzu3arsvwfYZ10d3OBxjdU-Q.roa (hash: BRLaihFLCVYFLpw45+cqT3ozkSzNaiRjjdbnkvsoEfo=)
                          2: V4DOZAV5R263qnPBnLdOvt_daCs.crl (hash: VkOHoEgGdGUoIKSrNl568V70hkWbVmYxaer1vtkKZa8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V4DOZAV5R263qnPBnLdOvt_daCs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 00:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:28:ef:89:9f:0e:c8:0a:e6:78:4a:03:07:9e:13:d7:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5780ce640579476eb7aa73c19cb74ebedfdd682b
        Validity
            Not Before: May 15 00:00:47 2026 GMT
            Not After : May 16 00:00:47 2026 GMT
        Subject: CN=3dedd18be73637728dd431ac28e25820526ef567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:54:9c:1a:98:0d:71:d1:89:7e:f8:de:7f:09:
                    85:da:5e:0e:4e:75:7b:26:4d:f8:a6:d9:94:b4:fd:
                    a2:c6:47:44:91:5d:eb:41:b2:b7:b9:d1:c9:ef:84:
                    70:40:8d:96:ce:40:d9:16:2f:e9:85:7b:9c:fa:fa:
                    ff:a4:d0:c3:81:fe:5d:94:76:66:7a:c1:e9:df:e6:
                    ea:d1:80:61:43:bd:16:6f:37:45:58:1a:95:be:9a:
                    0e:b7:84:01:da:b0:37:29:51:20:a8:9c:34:68:fa:
                    c9:95:f2:0f:6e:3f:8b:03:e8:b4:50:9f:88:b1:ab:
                    eb:b3:7f:fd:af:9c:18:25:3e:50:b9:bc:ae:93:e6:
                    88:56:77:67:c1:3a:10:3d:d2:3e:4d:98:09:05:33:
                    28:41:09:dc:58:1a:4c:99:78:4c:94:c2:3c:b9:be:
                    4d:b1:4f:f6:7a:9f:f4:68:63:da:08:f5:8a:eb:01:
                    36:e3:c5:54:2c:1a:1b:3e:2a:e2:0a:58:e1:ba:f7:
                    ec:bb:07:3f:4e:0f:a1:27:70:08:d3:3b:62:ee:05:
                    14:b0:b4:18:74:5a:84:a9:9a:99:50:4d:a3:17:ea:
                    95:0e:6f:05:13:31:b6:cc:ef:97:89:d9:c3:fb:e6:
                    f2:f1:1a:80:43:61:e3:4f:c8:67:34:b6:b1:24:74:
                    10:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:ED:D1:8B:E7:36:37:72:8D:D4:31:AC:28:E2:58:20:52:6E:F5:67
            X509v3 Authority Key Identifier:
                keyid:57:80:CE:64:05:79:47:6E:B7:AA:73:C1:9C:B7:4E:BE:DF:DD:68:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V4DOZAV5R263qnPBnLdOvt_daCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:8b:df:b6:33:05:0d:72:16:8e:a8:17:a3:44:a7:0d:06:24:
         c2:13:2c:f3:95:06:67:1f:ed:72:73:29:f9:53:09:e6:67:b1:
         a8:a2:c6:a2:f9:64:be:5d:4c:c6:99:c6:d4:83:02:2c:72:40:
         1e:b9:60:2e:b1:a4:78:97:20:b0:b6:67:0b:30:e4:0d:58:01:
         27:24:46:7e:19:95:f5:34:3b:c0:ea:87:88:4d:15:df:9a:27:
         19:80:3a:2b:05:1f:22:47:5b:c2:32:f6:46:98:21:7d:68:c2:
         99:3e:23:a6:3e:22:25:31:4c:6c:42:21:21:2e:bc:0e:aa:c8:
         22:ed:28:bb:be:6a:ff:79:d7:e2:f4:42:c8:c7:77:bd:f9:74:
         2e:10:b3:8c:a2:50:64:04:d6:28:31:00:fc:ca:80:e6:1a:d4:
         07:88:07:4f:df:4a:b2:53:2e:ef:27:2e:cb:76:0d:b6:7a:38:
         fa:7f:46:29:69:da:dd:3d:1c:cb:9c:c6:d1:09:ff:35:90:a2:
         ea:1f:be:8d:61:60:4d:62:8c:f0:59:79:dc:5d:e6:18:4e:7d:
         79:de:d0:16:cd:81:dc:53:12:87:d0:6d:db:b9:f8:c6:29:33:
         52:cd:4a:a5:7d:9d:50:00:03:63:bf:78:87:ea:a2:1f:6e:52:
         8a:dc:9a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:01:44 2026 by rpki-client