Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
File:                     D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft (raw, json)
Hash identifier:          749RT5JW1MY+HHp4K6xZxKlJfqfiSZnp/aKQDIff8KQ=
Subject key identifier:   60:2A:62:B6:73:63:CF:48:48:24:B9:2C:85:99:0B:9D:59:F0:0A:58
Authority key identifier: 0F:82:7A:5A:24:E7:71:CC:14:FA:69:BB:74:B3:E7:60:16:7B:02:6B
Certificate issuer:       /CN=0f827a5a24e771cc14fa69bb74b3e760167b026b
Certificate serial:       019E30047BBAFF6C7F7FB57FC21003088BBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
Manifest number:          0B65
Signing time:             Sat 16 May 2026 09:01:00 +0000
Manifest this update:     Sat 16 May 2026 09:01:00 +0000
Manifest next update:     Sun 17 May 2026 09:01:00 +0000
Files and hashes:         1: D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl (hash: wpQ7LWGVLXYPP+F7Zy3m+fNgQevVdLR5znNc0bGkITo=)
                          2: RZQiwmw-LTuvBT8bKGu9sePwQKA.roa (hash: 30MASV+eS5v/knDU6PvbB3wtKl60C43+n0OVN/QWwQs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:04:7b:ba:ff:6c:7f:7f:b5:7f:c2:10:03:08:8b:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f827a5a24e771cc14fa69bb74b3e760167b026b
        Validity
            Not Before: May 16 09:01:00 2026 GMT
            Not After : May 17 09:01:00 2026 GMT
        Subject: CN=602a62b67363cf484824b92c85990b9d59f00a58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f3:c8:58:d6:4a:1c:82:10:a6:3c:aa:6d:03:
                    d1:ac:ec:9c:d7:6f:60:cd:40:57:49:a2:f5:4f:85:
                    2f:b6:17:c9:64:54:a1:32:31:db:e7:2a:be:85:46:
                    54:49:c2:cf:05:4f:6d:81:aa:ef:4a:ae:75:20:c1:
                    75:f0:62:cd:06:dc:a8:57:ad:4a:89:b2:3f:f9:d0:
                    de:95:a1:bc:14:ae:3f:df:15:25:e1:f2:b3:ab:b6:
                    11:a5:12:b3:98:20:62:d2:23:33:d8:4d:6b:55:51:
                    80:49:9b:52:eb:d4:37:f0:dc:fd:5f:8f:7a:63:27:
                    6c:f0:90:17:c9:70:72:91:13:d2:d9:65:9a:56:32:
                    6c:22:db:91:2c:5f:95:dc:b2:9e:7a:aa:c3:63:5d:
                    f5:28:a8:cd:ca:95:0f:f9:ac:75:66:27:4e:3f:14:
                    65:94:0e:b9:12:f7:b9:07:68:d8:4a:f5:0c:26:54:
                    3a:08:70:51:63:7a:61:2e:90:a7:5e:7e:eb:5e:03:
                    62:59:6e:e3:11:a6:34:ef:0f:56:32:9f:95:12:9c:
                    ac:4a:ca:02:33:8b:e5:32:2b:0e:e0:5a:14:71:94:
                    4e:d4:57:bc:15:33:bb:97:d4:ee:cb:5e:be:e3:68:
                    ad:56:5c:b8:4a:6c:14:01:3e:d8:76:26:5e:8f:4f:
                    ef:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:2A:62:B6:73:63:CF:48:48:24:B9:2C:85:99:0B:9D:59:F0:0A:58
            X509v3 Authority Key Identifier:
                keyid:0F:82:7A:5A:24:E7:71:CC:14:FA:69:BB:74:B3:E7:60:16:7B:02:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:a5:4a:de:0c:8b:6d:ff:7a:39:50:2a:49:3a:ac:52:bf:51:
         2e:09:23:c6:bf:54:29:5d:dc:7d:0c:56:2e:0c:0c:26:36:44:
         d6:73:dd:bd:a6:ad:33:2e:b0:fc:bf:5a:da:f8:47:70:a7:60:
         4c:22:2c:5c:6c:3b:1c:24:2a:29:89:ff:aa:9e:76:37:fa:f2:
         1f:70:94:67:7f:cc:b6:08:74:3b:a6:c8:0e:2c:a7:fa:52:4f:
         ca:9d:5f:5a:64:1c:e8:d7:0c:e3:9c:98:1e:09:8b:f2:fd:b3:
         f5:02:50:e6:21:b3:d8:a2:c6:48:ea:a7:c8:b8:21:85:07:7e:
         64:4f:de:c3:fa:8c:fe:17:2f:b2:7a:d2:75:88:a6:fc:0e:54:
         10:52:db:07:ee:01:d0:0f:cb:b5:bc:61:5d:27:a1:cf:c0:73:
         86:21:e6:e5:32:b9:12:6f:76:23:ac:ba:be:c7:95:87:27:66:
         f1:45:40:1a:0f:54:d4:33:8d:fc:42:d4:e3:9a:73:24:49:6e:
         61:0c:1a:b2:d4:b6:0b:ba:69:ca:9f:da:fb:dd:e7:d2:c1:44:
         cf:27:a5:6e:3c:08:e5:0b:5a:61:10:43:2c:fb:e5:6f:d4:92:
         45:49:63:52:f8:8e:c2:8d:95:e3:db:c8:16:3a:5b:9b:cc:cc:
         e2:d6:71:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:23:51 2026 by rpki-client