Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft
File:                     0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft (raw, json)
Hash identifier:          8YvQliTC5Ul+m22CiPgAaxpCGVObDUpAorJtzA11Mbo=
Subject key identifier:   4B:A7:2A:B2:D4:3F:28:85:3F:FA:8A:35:24:00:58:B9:FD:23:7D:67
Authority key identifier: D0:95:36:43:95:CC:FD:85:43:97:73:58:FA:9B:71:F9:27:15:44:F6
Certificate issuer:       /CN=d095364395ccfd8543977358fa9b71f9271544f6
Certificate serial:       019E31173F19F9514F0691EC6CA098D47A4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft
Manifest number:          10DB
Signing time:             Sat 16 May 2026 14:01:07 +0000
Manifest this update:     Sat 16 May 2026 14:01:07 +0000
Manifest next update:     Sun 17 May 2026 14:01:07 +0000
Files and hashes:         1: 0JU2Q5XM_YVDl3NY-ptx-ScVRPY.crl (hash: 5V+sDgCQdIwy39+1vqeQzAptUNSbpKapbVygdw1IFRE=)
                          2: bwUes-crYnDaWmfkSgjmaGPderc.roa (hash: X7axPRZQ+Fy3248GsJnvoTWbu+uAo3jc8nap7n2R83o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:3f:19:f9:51:4f:06:91:ec:6c:a0:98:d4:7a:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d095364395ccfd8543977358fa9b71f9271544f6
        Validity
            Not Before: May 16 14:01:07 2026 GMT
            Not After : May 17 14:01:07 2026 GMT
        Subject: CN=4ba72ab2d43f28853ffa8a35240058b9fd237d67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:75:7a:cc:bb:30:11:60:b8:fd:61:94:12:c2:
                    e4:13:2e:b0:a1:91:6f:53:9f:23:e4:ab:6a:47:85:
                    a7:90:fe:e8:c5:4d:a7:56:c8:77:ea:ff:ac:bd:65:
                    ac:40:3e:3a:bd:5d:37:f2:cb:bc:0c:7d:74:48:c0:
                    9d:a3:e6:d0:a2:99:6d:50:97:5a:1e:4e:b4:aa:4a:
                    c0:c6:73:21:62:2f:ce:f3:b9:7c:71:01:44:4c:37:
                    19:9a:67:99:3a:85:3c:f0:04:f9:bb:63:9a:7c:ec:
                    23:7a:35:e3:97:de:ee:f9:84:32:93:b6:5b:92:23:
                    fc:01:1c:1a:25:c1:ff:d5:24:c9:c8:bf:b3:67:39:
                    24:15:3e:76:36:f7:91:8d:97:06:01:e6:59:10:aa:
                    1f:df:c3:55:a9:2c:5c:19:9f:42:60:83:8a:7d:cf:
                    b4:de:e6:69:f8:d1:45:8f:bc:28:64:e4:28:c3:90:
                    30:1c:8a:79:86:25:39:e0:e5:53:43:a5:15:f1:54:
                    92:24:0c:c5:77:be:6f:10:37:3f:3b:5b:89:60:19:
                    c6:8d:f6:ac:d9:57:e8:15:9f:36:53:26:7c:bd:79:
                    29:32:48:55:ac:d0:c4:9c:5e:05:fd:3c:72:2e:10:
                    fd:d3:61:f3:ea:b8:7a:f0:38:13:cc:cc:9f:0e:f9:
                    68:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:A7:2A:B2:D4:3F:28:85:3F:FA:8A:35:24:00:58:B9:FD:23:7D:67
            X509v3 Authority Key Identifier:
                keyid:D0:95:36:43:95:CC:FD:85:43:97:73:58:FA:9B:71:F9:27:15:44:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:7c:33:d0:c3:90:c3:03:74:86:26:2a:c0:51:e7:5c:b6:2a:
         f6:ea:a6:9c:94:8f:cd:5a:e2:7c:8e:0d:b3:16:ad:04:01:5c:
         de:2f:fb:cd:aa:f6:5f:9d:05:b2:fe:66:2c:52:d6:7c:ba:6e:
         9a:1b:01:b4:6f:32:3c:57:3e:6b:3d:61:75:a4:26:47:22:02:
         72:ef:28:be:6c:99:96:46:67:0f:f8:e6:c8:fc:e6:7f:20:f2:
         9a:d3:88:c2:9b:f7:d3:10:5b:5f:94:21:e8:de:71:18:4a:50:
         46:69:7a:b5:d6:53:7a:2f:9a:cd:31:6d:4f:c1:86:91:a7:72:
         a2:f5:aa:be:66:3a:e0:9b:a9:65:74:33:4c:1c:23:40:b0:6b:
         0d:b1:94:49:0c:cc:a0:3a:5d:5d:36:7f:4f:59:e2:6f:75:29:
         d4:9c:88:75:88:6c:b8:d9:ae:8a:46:4c:03:8c:79:c1:cf:0b:
         f6:88:0d:29:38:26:bb:b1:76:18:c2:59:f0:0a:49:a5:d6:78:
         ce:fb:ca:de:9e:76:ac:fa:5c:4c:c0:8e:17:f0:a5:64:c9:2e:
         a8:2c:66:ed:a1:c3:1d:22:13:d6:47:83:1f:e5:38:de:75:3c:
         e1:75:f3:f4:57:ce:c7:fc:2b:2a:41:cf:44:7b:37:53:7f:9d:
         e7:16:e4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:20 2026 by rpki-client