Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
File:                     DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft (raw, json)
Hash identifier:          yvOiA6sBI5ruxugMYycx8QReR6FWIzJ7jYPs0mMlw8o=
Subject key identifier:   73:B1:54:0C:01:E9:89:B0:A3:64:E9:F3:43:E6:19:52:FD:F4:BC:CB
Authority key identifier: 0C:4F:99:5F:41:92:20:F5:87:42:67:D6:8C:C1:43:72:F0:CD:F2:93
Certificate issuer:       /CN=0c4f995f419220f5874267d68cc14372f0cdf293
Certificate serial:       019E303BD8A5E66E8FB576885E4C44C3AA44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
Manifest number:          1912
Signing time:             Sat 16 May 2026 10:01:28 +0000
Manifest this update:     Sat 16 May 2026 10:01:28 +0000
Manifest next update:     Sun 17 May 2026 10:01:28 +0000
Files and hashes:         1: DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl (hash: jO/feF9gUni4vNUaV467h1yyiDJ7NXwvjqn7WZs8KaE=)
                          2: qopqpOjSigcAgnh4q3o38zGjwNA.roa (hash: EBQgdsC6JJfdJnKh94uu6CL6R7A3pzSO9sS4FBZtJ/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 10:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:d8:a5:e6:6e:8f:b5:76:88:5e:4c:44:c3:aa:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c4f995f419220f5874267d68cc14372f0cdf293
        Validity
            Not Before: May 16 10:01:28 2026 GMT
            Not After : May 17 10:01:28 2026 GMT
        Subject: CN=73b1540c01e989b0a364e9f343e61952fdf4bccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9b:4d:6c:3b:e7:af:06:13:48:cb:02:1f:3b:
                    e5:da:17:ac:d6:c3:f8:73:a5:a0:85:bb:22:e9:62:
                    a9:a2:df:3a:d9:05:1d:b1:1b:57:70:0b:3e:5f:9e:
                    31:69:d4:92:6f:0f:70:12:99:b7:ca:8e:4e:af:ca:
                    df:49:96:2f:43:bb:cd:70:f6:bd:98:a1:83:0f:80:
                    6d:a5:d3:3a:18:7e:ce:b9:73:c5:f1:7c:55:33:bd:
                    e1:51:9e:1c:72:b2:f1:d8:80:46:34:c7:e0:a0:a4:
                    2e:93:3f:93:da:3c:41:a5:77:63:a7:4f:dc:dc:ec:
                    63:96:ae:30:08:ea:53:72:35:27:e3:09:f2:5e:29:
                    7b:90:11:a4:25:72:c6:e1:94:d8:2d:5f:23:05:ab:
                    be:24:19:3d:31:ab:1e:ad:d9:88:25:1c:42:bb:e2:
                    19:61:90:e8:9a:bf:f2:6e:e1:e8:31:84:19:27:22:
                    d4:e8:3f:d7:0e:c3:01:a2:97:ea:93:e2:56:7b:da:
                    75:6b:9c:46:83:fa:d4:41:87:da:b1:a6:c3:eb:b6:
                    06:e8:d1:5e:34:23:3c:ae:7c:82:52:ba:60:da:52:
                    4b:6a:a3:5d:cc:24:22:f1:12:9b:50:65:34:db:d7:
                    fa:a6:28:d1:c3:3d:c2:55:1b:22:d4:4e:4e:f5:c3:
                    dd:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B1:54:0C:01:E9:89:B0:A3:64:E9:F3:43:E6:19:52:FD:F4:BC:CB
            X509v3 Authority Key Identifier:
                keyid:0C:4F:99:5F:41:92:20:F5:87:42:67:D6:8C:C1:43:72:F0:CD:F2:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:38:60:42:93:26:0e:be:2d:46:3d:70:47:90:dc:84:33:3e:
         18:5e:3d:a4:12:e2:d8:dc:b2:9d:30:0c:34:ce:0f:22:7a:56:
         5d:75:02:0d:0e:98:88:4f:3a:10:65:1f:88:f2:24:bc:91:84:
         1d:4b:3e:6f:3e:37:2e:03:f0:7f:f4:1e:ca:7e:bb:ff:00:41:
         c0:0d:39:20:6a:3e:15:34:39:ef:c2:64:5e:b5:e2:a6:ca:1a:
         04:0b:12:16:17:fe:7b:12:27:5c:af:aa:38:41:85:83:d9:92:
         ea:c2:be:c9:45:75:82:df:26:e5:6b:5b:7b:cc:46:9b:36:26:
         46:a0:92:0d:d6:0f:63:4a:58:47:2a:94:5a:57:f1:1f:74:12:
         9b:ca:42:24:94:1b:d5:61:81:1f:9a:c6:40:64:a9:d0:d5:d7:
         e1:40:1f:f6:7f:38:1a:4f:ac:8c:5f:51:76:02:f6:b1:76:82:
         6c:4d:f4:a4:0f:aa:cc:4a:53:95:d9:bd:7e:0f:4e:08:0c:b4:
         8b:e3:7d:14:5a:bc:3d:fc:db:38:c4:68:3b:f1:b9:be:4e:e0:
         78:5d:9b:7a:66:47:1f:04:e1:19:63:92:1f:58:28:fc:68:10:
         90:4d:31:eb:03:b9:36:55:ec:f7:97:71:ce:f9:50:b2:9c:cd:
         c3:d1:35:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:11:26 2026 by rpki-client