Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft
File:                     tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft (raw, json)
Hash identifier:          HABo2fAsyuyUrIdj0ZvGMSqxICx5UnwJDm5LVn7UfUQ=
Subject key identifier:   CC:60:A4:7C:19:58:7C:3F:B3:29:D5:11:DA:16:72:34:4B:14:4F:E7
Authority key identifier: B5:6B:5B:54:DE:CF:43:E9:64:F4:BE:6D:30:4E:48:0A:38:6C:B7:94
Certificate issuer:       /CN=b56b5b54decf43e964f4be6d304e480a386cb794
Certificate serial:       019E0B5344D73706A6D610E8D1B96CA50979
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tWtbVN7PQ-lk9L5tME5ICjhst5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft
Manifest number:          018C
Signing time:             Sat 09 May 2026 06:01:06 +0000
Manifest this update:     Sat 09 May 2026 06:01:06 +0000
Manifest next update:     Sun 10 May 2026 06:01:06 +0000
Files and hashes:         1: tWtbVN7PQ-lk9L5tME5ICjhst5Q.crl (hash: H69oFWfGxhUD3FQ7ucJyU89KlpUj+d0lyfBbEB458yA=)
                          2: wc35MgYGPiVoITK8dBRVt7Icluk.asa (hash: A16HGxaZ77Lcix1Lc05fm2biWcgZ/EQMJRjj60DKa2U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tWtbVN7PQ-lk9L5tME5ICjhst5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:0b:53:44:d7:37:06:a6:d6:10:e8:d1:b9:6c:a5:09:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56b5b54decf43e964f4be6d304e480a386cb794
        Validity
            Not Before: May  9 06:01:06 2026 GMT
            Not After : May 10 06:01:06 2026 GMT
        Subject: CN=cc60a47c19587c3fb329d511da1672344b144fe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c9:20:26:74:52:86:fc:ea:86:ca:05:8a:cf:
                    8d:6b:38:91:9c:29:6a:2b:f2:3d:25:27:5d:44:3f:
                    08:77:f2:2d:e7:4b:81:3a:4d:f3:06:b3:2f:74:a7:
                    fc:c5:50:04:8a:cc:14:0d:b9:01:93:91:8d:97:3e:
                    da:29:c4:3e:cf:78:b0:e7:cb:ad:d0:54:e0:c9:6c:
                    d9:16:70:ab:dc:a4:7e:53:5d:32:f8:68:cd:86:87:
                    db:ba:a9:ed:fd:0f:e5:99:17:6b:4a:7d:ff:47:92:
                    5c:63:9e:16:e0:67:ae:a7:4d:88:fa:0b:8a:bb:2e:
                    8c:e8:90:c5:42:22:39:7d:a9:75:fa:de:84:4d:83:
                    50:9f:dd:69:e3:b5:60:db:60:04:06:76:dc:93:e2:
                    fe:7f:0e:5d:16:c8:ee:27:45:f9:16:b8:bc:f1:2f:
                    af:9c:16:19:fd:cd:62:be:4b:12:e1:4f:b1:53:e0:
                    fe:5a:8a:9e:7a:65:98:fc:e8:33:d7:c0:de:f6:0c:
                    d0:e1:02:55:1d:80:2e:67:29:a8:a8:7b:c3:18:ce:
                    6e:e6:a2:38:fb:6f:53:7a:e7:72:c7:86:11:48:17:
                    44:14:b9:72:e4:33:23:d4:03:3a:89:b8:20:6d:5a:
                    14:70:a1:94:7c:a1:ad:d2:2c:89:f4:7d:64:0a:f0:
                    d0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:60:A4:7C:19:58:7C:3F:B3:29:D5:11:DA:16:72:34:4B:14:4F:E7
            X509v3 Authority Key Identifier:
                keyid:B5:6B:5B:54:DE:CF:43:E9:64:F4:BE:6D:30:4E:48:0A:38:6C:B7:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWtbVN7PQ-lk9L5tME5ICjhst5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:59:12:db:f4:21:2b:d1:27:38:43:2b:3f:55:f7:fa:2d:a5:
         bb:03:d4:de:fb:8c:02:a8:3b:c6:56:76:52:fd:f5:ae:26:4c:
         18:12:10:58:18:67:9f:93:df:50:9e:7b:96:17:6b:e4:e6:1c:
         3c:67:a0:a6:c9:43:8b:4d:d1:22:19:19:72:63:96:74:70:46:
         ad:8a:50:e0:a7:04:3d:58:b9:c5:b9:4e:31:20:e5:13:d5:8e:
         df:30:9e:45:f7:6b:77:2e:47:22:02:cf:bd:e6:42:c4:54:22:
         8d:6b:92:0d:a4:a6:6b:f6:fe:51:eb:7d:07:32:e1:fd:2b:6b:
         72:96:79:e3:0d:99:af:e7:b1:eb:3f:42:03:9e:6e:c2:a0:08:
         51:ed:73:b8:5b:db:c7:30:a8:e0:0d:79:13:b6:2c:5d:9e:d6:
         1e:41:b5:ad:03:85:77:a4:5e:b8:76:1d:71:bf:a5:68:7d:64:
         5d:54:1e:5f:24:d3:b4:57:0b:87:b4:4d:0e:28:fd:69:58:ca:
         d3:46:a3:84:2d:4d:8d:53:19:f2:87:dd:71:73:94:64:51:e2:
         c7:b3:76:c8:b7:48:4e:47:3b:d0:c1:e0:6d:e4:9e:d3:d7:31:
         ed:8e:27:86:d8:7a:d8:43:af:3d:51:cc:c4:7b:33:67:24:b9:
         a1:db:4f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 12:04:41 2026 by rpki-client