Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
File:                     1Cq3jtp78B2VtZd07TRry_lqJoQ.mft (raw, json)
Hash identifier:          vxzU/noXniVY+G5d4hSXUlrkne7zbyfOyxY6jyslpIs=
Subject key identifier:   A0:90:26:FB:DC:E1:C4:96:F2:CB:F3:77:92:9A:42:C2:1D:4C:A0:4A
Authority key identifier: D4:2A:B7:8E:DA:7B:F0:1D:95:B5:97:74:ED:34:6B:CB:F9:6A:26:84
Certificate issuer:       /CN=d42ab78eda7bf01d95b59774ed346bcbf96a2684
Certificate serial:       019E2F96BB07D5C167849F7C3108E41B3697
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Cq3jtp78B2VtZd07TRry_lqJoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
Manifest number:          095E
Signing time:             Sat 16 May 2026 07:01:07 +0000
Manifest this update:     Sat 16 May 2026 07:01:07 +0000
Manifest next update:     Sun 17 May 2026 07:01:07 +0000
Files and hashes:         1: 1Cq3jtp78B2VtZd07TRry_lqJoQ.crl (hash: ETPngwWTTtc7LSZi25Tl60qAJv+8b2kjk6t5dChLn/M=)
                          2: 2yhdKHvPD6x57cR2KCiWvDWOuNI.roa (hash: P8G4fD653ANAlH3OwS5YzFRY2dEK5yZI+P33CF+4huY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1Cq3jtp78B2VtZd07TRry_lqJoQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:96:bb:07:d5:c1:67:84:9f:7c:31:08:e4:1b:36:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d42ab78eda7bf01d95b59774ed346bcbf96a2684
        Validity
            Not Before: May 16 07:01:07 2026 GMT
            Not After : May 17 07:01:07 2026 GMT
        Subject: CN=a09026fbdce1c496f2cbf377929a42c21d4ca04a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:df:14:f5:31:54:f0:a2:22:bb:6a:5b:2a:dd:
                    5b:54:a5:a2:b8:3a:b6:43:71:3a:51:e3:40:b5:00:
                    0c:94:37:45:58:1a:3f:23:47:8e:1f:c2:ef:73:8d:
                    26:aa:67:64:ca:4b:87:52:11:c5:91:94:f4:b0:8c:
                    8b:68:24:0d:02:28:27:6f:da:09:64:22:fe:c9:d6:
                    33:89:23:80:14:ec:de:bd:34:41:a9:87:fc:cb:1f:
                    b3:43:ef:eb:94:0f:92:42:49:2e:63:f9:13:c7:7a:
                    3a:c4:b0:11:43:38:fc:da:9b:1a:0d:da:69:ef:43:
                    9d:a2:6e:ef:b9:f1:1a:e8:8e:15:bc:64:e4:3f:11:
                    6f:53:0a:b3:8a:46:fb:17:f1:72:50:6e:2a:c3:1a:
                    b9:18:b9:b0:47:6e:02:b0:1c:47:6c:d6:51:63:0f:
                    04:80:9a:4c:a3:0b:cb:a2:ce:c9:e3:ef:3b:82:47:
                    cd:85:ce:37:67:71:f9:a6:85:92:75:c9:14:48:fb:
                    71:1b:e5:5e:3d:bd:48:0e:86:2b:2c:35:7c:94:38:
                    68:25:7e:c0:7d:88:96:dd:c8:0c:fe:d4:8b:82:44:
                    84:50:ed:8b:06:15:ef:af:61:f9:74:ee:cd:12:69:
                    2a:6d:30:20:21:70:85:18:f5:b4:a7:4e:6a:74:d9:
                    64:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:90:26:FB:DC:E1:C4:96:F2:CB:F3:77:92:9A:42:C2:1D:4C:A0:4A
            X509v3 Authority Key Identifier:
                keyid:D4:2A:B7:8E:DA:7B:F0:1D:95:B5:97:74:ED:34:6B:CB:F9:6A:26:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Cq3jtp78B2VtZd07TRry_lqJoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:a4:9e:2f:fe:dc:1f:19:00:a1:a9:d9:57:48:d4:3c:6e:4a:
         ed:9e:fa:ca:1c:17:0e:e3:b1:58:a8:9d:99:86:f4:e2:79:80:
         c5:a4:5e:18:8a:b7:bb:eb:90:21:58:19:20:73:6c:95:06:d3:
         fe:a4:2c:cb:1d:39:0e:19:d0:f8:ae:ce:47:5a:a6:0c:8c:e8:
         33:75:f4:3e:7a:6c:e4:cf:d1:67:0a:18:c2:6e:a0:f5:3b:9c:
         c9:54:f4:fd:03:7b:61:b0:31:ed:37:22:63:29:12:7e:b5:fd:
         b5:71:88:2f:77:b9:01:b4:d3:64:5a:67:2e:a3:7d:0c:29:42:
         f0:0b:90:47:94:d2:ef:79:cf:82:6f:26:67:44:a5:cf:19:31:
         da:f1:23:ba:c9:f4:f7:cc:60:92:56:0e:e1:df:9f:59:07:99:
         60:fb:0b:a9:64:c6:0c:bc:81:44:a3:d2:25:f6:5b:b3:77:a1:
         12:24:7d:25:15:fd:3d:d7:c5:ec:e2:41:33:4c:05:31:db:c1:
         26:83:45:7c:c1:a2:36:d9:45:f9:89:6b:07:91:18:a2:c3:b3:
         4e:ee:15:7c:4e:b2:ea:95:29:33:da:80:ed:ca:fe:55:00:65:
         f5:5b:8f:69:f4:df:7e:c1:a9:41:c5:99:88:3d:57:54:a6:39:
         a0:9c:c7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:40 2026 by rpki-client