Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft
File:                     0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft (raw, json)
Hash identifier:          RKQeMcj/66O2sjZnTmmxOrx+3Aox2VSMzOc94UdP8Ak=
Subject key identifier:   88:29:66:88:D3:36:99:53:F7:D3:94:D5:F3:DA:73:45:E6:1D:9D:1A
Authority key identifier: D0:40:79:BB:70:70:ED:0E:EE:A3:A1:A4:67:C7:94:62:BC:C5:45:5F
Certificate issuer:       /CN=d04079bb7070ed0eeea3a1a467c79462bcc5455f
Certificate serial:       019E2FCDA3095DF8E464C65B3D0F0E980A42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft
Manifest number:          1421
Signing time:             Sat 16 May 2026 08:01:06 +0000
Manifest this update:     Sat 16 May 2026 08:01:06 +0000
Manifest next update:     Sun 17 May 2026 08:01:06 +0000
Files and hashes:         1: 0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl (hash: qUNu3RMyRnE6HhVu45CH8qvaijh/RFnvhD7ejcbmHfw=)
                          2: 2a-ajfpkZAsjReLLQ1xduA5jH68.roa (hash: lQdPyjxms9XmoRw9yTquBchApgiBDYUsw2V+v//4ubw=)
                          3: 3qWiv8aUt9sce-sZcGdmrNaNLPY.roa (hash: fDS2D0rIZulEuzsnb+BYc++UCvsn6GakJSLWm65oY60=)
                          4: 5o_jXKDrMZ_VUtAMAA1b61XpZY4.roa (hash: cW/aLAiDeErlaNGgC/UoOefJEPVaWg9YZ9ILa/HwLxQ=)
                          5: iCg9tDwj1vgv7l4zkfBWYVXyBYs.roa (hash: +sR86m8s5uPTFwMcLKL+T0A/ZDbNibZcTed4QGQkB+U=)
                          6: m-4Bzgn_XA7AnDHyUCDMxv4tjws.roa (hash: AQFWIEldUOojspkBOhlpdbyceFMGqpqRnivtz2V3WHk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 08:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:cd:a3:09:5d:f8:e4:64:c6:5b:3d:0f:0e:98:0a:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d04079bb7070ed0eeea3a1a467c79462bcc5455f
        Validity
            Not Before: May 16 08:01:06 2026 GMT
            Not After : May 17 08:01:06 2026 GMT
        Subject: CN=88296688d3369953f7d394d5f3da7345e61d9d1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0f:f0:ec:eb:57:c9:ac:53:c9:ca:85:83:f9:
                    db:89:2b:2e:6c:a0:35:5d:64:f3:36:04:c4:e1:a7:
                    0e:24:49:d3:90:d8:9c:44:fe:8c:d7:d4:8a:30:63:
                    e6:54:57:00:72:93:62:13:d7:26:5c:0e:04:c5:88:
                    8f:f4:6c:8e:30:8e:5d:4f:cd:f5:d7:d7:f9:6b:4c:
                    ab:c0:4c:00:33:6f:26:db:14:43:45:28:e8:38:82:
                    0c:55:89:ba:b8:55:c7:45:18:ae:4e:12:e5:a7:6b:
                    40:9b:73:34:8d:68:1b:11:17:ab:56:30:61:9f:d3:
                    66:22:74:cf:8d:e5:61:72:77:33:1b:34:1f:c8:67:
                    42:30:e9:59:e2:24:57:a3:c3:93:75:1c:f6:bf:87:
                    5e:04:6a:ec:aa:06:d1:d2:c4:8f:90:bb:33:d7:10:
                    fd:46:2b:36:04:fa:f0:0e:ea:e2:ea:2f:99:fa:eb:
                    95:bb:ca:0f:25:cd:a7:15:bb:7f:e1:11:85:9a:10:
                    b4:06:f8:23:27:21:d8:61:fe:f6:23:b4:5d:f1:e8:
                    31:57:45:d2:6c:02:7b:80:26:86:d9:f5:1c:35:31:
                    8b:a7:0d:76:f3:4e:07:f3:92:0a:d3:5f:30:2c:77:
                    b7:b1:ad:05:78:95:a6:58:e7:a8:8e:10:4c:44:73:
                    01:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:29:66:88:D3:36:99:53:F7:D3:94:D5:F3:DA:73:45:E6:1D:9D:1A
            X509v3 Authority Key Identifier:
                keyid:D0:40:79:BB:70:70:ED:0E:EE:A3:A1:A4:67:C7:94:62:BC:C5:45:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:f3:1c:0b:8d:50:ae:da:0f:bb:61:ec:5b:28:2f:23:57:de:
         6b:25:aa:39:00:63:0e:a2:ac:79:66:27:db:95:32:bc:12:16:
         ed:f7:7f:a2:10:05:9b:0f:cf:01:e1:75:02:1e:54:fa:d4:d7:
         9e:0b:24:66:10:c4:c9:e4:67:09:0f:e5:c6:40:01:38:af:6f:
         a7:14:32:c2:96:41:2b:ec:a4:29:42:44:28:82:ab:25:da:5e:
         1a:1b:c6:b0:95:42:78:4f:19:4d:6d:e4:98:41:d8:8a:2e:4f:
         07:ce:cd:6b:a2:f8:51:ad:98:75:c5:8f:4c:41:8e:1a:ab:cc:
         5a:5d:0c:14:4c:6d:b5:2e:54:12:20:08:8c:d9:d8:c6:c7:ac:
         29:ca:7f:0c:89:3d:e0:34:3f:06:1e:e1:91:41:a3:d9:c7:29:
         ba:83:ba:52:d4:79:c2:bd:81:84:53:d1:3a:71:d8:40:8b:12:
         64:d7:f5:74:88:3e:b8:fd:99:91:43:38:72:69:8c:13:ad:ca:
         98:2d:eb:7d:98:9b:29:76:97:0d:4f:be:fa:01:0f:44:8f:5f:
         f1:9d:ed:57:01:1b:28:fb:21:f1:dd:ea:18:32:9e:6b:ff:0d:
         f2:89:33:c8:8f:c1:36:0b:41:4c:9e:f8:b0:96:2d:47:32:92:
         2e:e1:4e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:13:12 2026 by rpki-client