Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
File:                     27mAEFNsQG6o89ZlWUwijXbrEP0.mft (raw, json)
Hash identifier:          IyHvsIPWfKQaf5Dt0wTeO6TMeSq+1CJ1zmbm5+UYFZE=
Subject key identifier:   FD:C8:C0:25:F0:DE:38:F4:98:0E:4F:55:86:7F:48:D0:D5:78:7D:D4
Authority key identifier: DB:B9:80:10:53:6C:40:6E:A8:F3:D6:65:59:4C:22:8D:76:EB:10:FD
Certificate issuer:       /CN=dbb98010536c406ea8f3d665594c228d76eb10fd
Certificate serial:       019E2B4C7F71B6FBAFBC1399D366F83DA126
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
Manifest number:          1392
Signing time:             Fri 15 May 2026 11:01:34 +0000
Manifest this update:     Fri 15 May 2026 11:01:34 +0000
Manifest next update:     Sat 16 May 2026 11:01:34 +0000
Files and hashes:         1: 1-js5TVA1UkNXfyekBabOXD4itsk.roa (hash: YJD1GIjXCe4Si+mr4oD2BuzeRVKbRLslRw6eTMykWZk=)
                          2: 27mAEFNsQG6o89ZlWUwijXbrEP0.crl (hash: 3d+uYkn1DEDwc5PWAo/LLFNUz/lJQ/CMTr0WoXYbfoE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 11:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2b:4c:7f:71:b6:fb:af:bc:13:99:d3:66:f8:3d:a1:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbb98010536c406ea8f3d665594c228d76eb10fd
        Validity
            Not Before: May 15 11:01:34 2026 GMT
            Not After : May 16 11:01:34 2026 GMT
        Subject: CN=fdc8c025f0de38f4980e4f55867f48d0d5787dd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d2:55:62:df:d4:ff:db:d4:25:6f:b7:6b:fa:
                    8a:94:a6:65:a9:bd:2b:b2:9e:16:52:65:86:e6:f9:
                    b6:ff:19:4e:5f:f1:7e:81:af:5d:2e:7a:a2:76:61:
                    b7:8c:50:63:50:cf:f9:42:a8:b7:bd:36:ba:db:c3:
                    20:37:ff:13:b7:01:cb:a1:ed:18:c7:c3:f9:b7:a1:
                    16:35:8d:a1:89:6e:27:54:d3:eb:92:26:7c:65:14:
                    48:07:75:de:52:83:93:9b:40:d4:30:cd:84:39:b0:
                    5b:82:28:40:57:9e:b3:be:1c:ad:69:2e:6f:e1:f6:
                    e8:08:e4:dc:d5:8d:15:59:bf:aa:04:58:ab:d4:87:
                    62:73:1f:ac:6c:ff:a0:48:19:65:ce:9e:30:a4:6f:
                    2b:84:d2:ba:e3:d2:4f:c7:5b:3a:02:7a:b6:92:9b:
                    bc:c2:04:a2:7a:ce:62:92:93:43:ac:c8:15:5b:3f:
                    18:70:f0:c9:dd:39:1f:d9:c9:d6:94:db:61:2e:a3:
                    b2:89:d9:84:1f:d1:5c:55:da:0f:fc:23:11:6c:07:
                    c5:90:06:ec:8e:80:6f:4e:d1:c9:4d:f4:1e:70:73:
                    45:6a:df:7c:1a:9f:ed:e9:25:b4:06:dd:a7:6d:d8:
                    74:1e:3f:3a:ad:7c:86:e5:aa:ef:94:cb:14:0d:f1:
                    b0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C8:C0:25:F0:DE:38:F4:98:0E:4F:55:86:7F:48:D0:D5:78:7D:D4
            X509v3 Authority Key Identifier:
                keyid:DB:B9:80:10:53:6C:40:6E:A8:F3:D6:65:59:4C:22:8D:76:EB:10:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:09:3d:3d:87:6d:03:25:27:92:e0:e7:c9:be:37:7a:90:e6:
         a0:7a:7b:4a:42:6e:0f:88:89:c1:86:c8:47:ed:0c:30:9d:6e:
         3b:a3:1a:d0:69:7d:04:c3:bc:3f:7e:73:c8:ff:cd:a0:c9:7f:
         ea:98:4a:7d:7c:a2:2c:f9:3b:51:28:08:13:e3:8f:4b:11:fb:
         d0:4f:7c:10:2b:8f:59:35:a4:45:6b:0f:68:ff:3c:c5:9e:6d:
         41:96:d7:79:0c:74:ba:68:18:e7:43:0b:e6:50:77:70:a8:82:
         30:fe:8d:df:bb:10:a9:c8:47:64:38:54:03:40:7b:db:e2:f7:
         79:e0:e4:ea:7c:b7:db:53:24:f8:d9:06:98:e5:78:2e:1a:4e:
         01:db:8d:15:d4:ab:b9:b4:41:c3:78:5d:c9:48:6e:8c:80:a7:
         fe:e7:38:af:5e:f7:09:dc:63:3e:ba:43:a7:77:c1:6e:e5:9b:
         78:97:ca:e1:a3:7e:5b:e0:17:09:28:98:96:23:2c:25:32:90:
         fb:30:b8:e8:e3:26:37:f0:d0:9f:82:91:69:b8:f2:cb:09:ed:
         cd:71:3b:ce:5a:ce:d3:2a:99:29:99:34:6b:08:6a:f2:3c:fc:
         8e:ba:83:5f:5e:58:be:74:e1:d7:88:0c:4f:7a:4c:39:11:0c:
         fd:00:1d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 13:28:09 2026 by rpki-client