Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
File:                     MZ7ds2aRntdfRmDPsOC25fxAFhM.mft (raw, json)
Hash identifier:          bv7nE0AJH7qXE/rgMxKX8Rbq1NYrhxk0sljksmZnM0M=
Subject key identifier:   5C:58:7E:B1:C4:3E:02:B0:81:8F:18:A5:72:0E:EA:48:09:F2:23:05
Authority key identifier: 31:9E:DD:B3:66:91:9E:D7:5F:46:60:CF:B0:E0:B6:E5:FC:40:16:13
Certificate issuer:       /CN=319eddb366919ed75f4660cfb0e0b6e5fc401613
Certificate serial:       019E21DB03FFD4175E0CAC51BD6C7A797D0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
Manifest number:          0FDA
Signing time:             Wed 13 May 2026 15:01:01 +0000
Manifest this update:     Wed 13 May 2026 15:01:01 +0000
Manifest next update:     Thu 14 May 2026 15:01:01 +0000
Files and hashes:         1: MZ7ds2aRntdfRmDPsOC25fxAFhM.crl (hash: tL6T4yUrOWXXFjkDldmfr3CqkuBsm7o6n5vXufL86z0=)
                          2: _0u7vnHZdg310nUrSqnTSu55Or4.roa (hash: xOaMS4kje5xsRAQ6hRbBK0m2M3+HpCRiKnXrVnEapA8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 14:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:21:db:03:ff:d4:17:5e:0c:ac:51:bd:6c:7a:79:7d:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319eddb366919ed75f4660cfb0e0b6e5fc401613
        Validity
            Not Before: May 13 15:01:01 2026 GMT
            Not After : May 14 15:01:01 2026 GMT
        Subject: CN=5c587eb1c43e02b0818f18a5720eea4809f22305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:71:97:09:9c:78:cb:c7:b1:d7:9d:08:95:22:
                    28:34:da:2c:94:ce:62:ff:48:3c:54:3d:ad:14:43:
                    b9:0d:16:82:83:5e:6d:6b:55:ab:fe:6e:dc:c7:4f:
                    b5:ce:9e:87:ea:02:c1:ed:33:4d:fa:10:dc:07:e2:
                    e4:01:c6:ed:da:bc:d6:68:10:0c:e3:33:64:57:09:
                    65:fa:44:2a:e3:21:c3:5f:7d:38:a3:91:29:4e:76:
                    27:12:3b:44:c8:a3:48:f5:a2:42:db:95:0b:15:e1:
                    c7:2d:a3:9d:8b:3d:28:e4:96:9f:2a:f6:2c:a0:64:
                    71:65:96:86:a4:fe:b7:1c:71:52:b7:78:07:14:26:
                    2f:23:36:29:cf:0c:17:61:c7:15:15:3d:13:86:07:
                    63:49:3c:db:86:6c:96:4d:14:64:a7:38:19:a4:3c:
                    a9:00:c0:6b:ef:45:03:4e:a4:4c:37:d1:de:e1:47:
                    3b:3e:12:b9:3e:1f:3f:3f:35:10:4b:16:98:96:75:
                    d2:d9:d9:ad:fa:f5:d1:7f:29:a3:25:53:5c:a0:94:
                    8e:2e:b3:f0:3b:b0:3e:92:79:b7:e0:e2:8d:39:8f:
                    17:15:be:20:fd:b1:3a:b6:5f:69:b1:57:b1:3a:fa:
                    7d:57:1c:af:86:62:d1:49:c1:12:18:48:53:a6:f2:
                    48:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:58:7E:B1:C4:3E:02:B0:81:8F:18:A5:72:0E:EA:48:09:F2:23:05
            X509v3 Authority Key Identifier:
                keyid:31:9E:DD:B3:66:91:9E:D7:5F:46:60:CF:B0:E0:B6:E5:FC:40:16:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:01:85:d3:70:01:c5:8f:97:b9:4f:db:86:66:ae:6c:f0:4d:
         f2:ee:93:c9:91:29:46:45:c2:ee:ff:31:fe:5c:ef:13:98:b7:
         25:cd:87:a0:0d:ed:c0:3b:63:f1:0f:dc:66:6f:20:c2:de:ba:
         d5:d4:f5:5d:70:1c:24:9d:d1:c6:2c:b0:37:98:9f:56:1a:ca:
         60:20:2e:75:82:b7:62:40:89:23:2e:d0:a5:77:99:5a:92:3b:
         fe:d8:9d:40:24:b8:f3:3f:f8:8c:3d:ac:fd:5d:39:f2:56:2c:
         e3:57:b6:34:7e:7a:53:54:76:94:14:68:92:3b:f1:1b:d5:55:
         3a:47:54:cb:cd:82:9e:7b:60:da:3d:d9:55:97:7d:84:ef:8d:
         34:1c:61:94:c1:62:f8:8b:7c:4f:fe:f5:19:6d:62:1a:a5:96:
         e1:a7:9a:4d:5d:a9:84:73:61:56:cc:6f:4e:28:dd:36:7f:de:
         5c:7f:c2:c8:a8:76:23:f3:01:9e:63:97:69:e5:c3:de:12:6d:
         9c:c9:a9:a0:33:6d:f0:6e:41:7e:ee:54:51:e2:19:3e:c3:8f:
         39:38:be:08:be:f2:2f:9e:0a:b0:a9:b0:ac:e9:8f:ac:f9:7e:
         89:09:21:b8:af:e7:7e:dc:78:6e:d7:85:29:5a:12:2b:7f:f0:
         9a:a4:ec:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 22:20:12 2026 by rpki-client