Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.mft
File:                     pWMWxxKYMeBREHlTLe2B3BLIHaA.mft (raw, json)
Hash identifier:          3cf2m5PRGQtuyUvOE8uJPiGjISOYNzRKJo14wVMTl9Y=
Subject key identifier:   63:5A:C3:D3:53:A6:A8:89:10:D5:02:42:FB:17:02:29:50:65:47:DA
Authority key identifier: A5:63:16:C7:12:98:31:E0:51:10:79:53:2D:ED:81:DC:12:C8:1D:A0
Certificate issuer:       /CN=a56316c7129831e0511079532ded81dc12c81da0
Certificate serial:       019E32CE779820C3927F4EEA05F2D5EC7994
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pWMWxxKYMeBREHlTLe2B3BLIHaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.mft
Manifest number:          0F20
Signing time:             Sat 16 May 2026 22:00:52 +0000
Manifest this update:     Sat 16 May 2026 22:00:52 +0000
Manifest next update:     Sun 17 May 2026 22:00:52 +0000
Files and hashes:         1: ATXg03GR8zoML1xy7L80ZPtMT8M.roa (hash: nheIXMj5AVfyPJ0H/Ys4b1d8hSHkVKCMyhmzU1gBfCw=)
                          2: pWMWxxKYMeBREHlTLe2B3BLIHaA.crl (hash: ujM4EBzjjCPMkCO2oEGyxPGHKnr/NVpraiaaR3NiKs8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pWMWxxKYMeBREHlTLe2B3BLIHaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 21:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:ce:77:98:20:c3:92:7f:4e:ea:05:f2:d5:ec:79:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a56316c7129831e0511079532ded81dc12c81da0
        Validity
            Not Before: May 16 22:00:52 2026 GMT
            Not After : May 17 22:00:52 2026 GMT
        Subject: CN=635ac3d353a6a88910d50242fb170229506547da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:06:82:0d:34:af:87:c5:7d:6f:5d:62:f1:5a:
                    9d:c2:8b:bd:99:02:9c:b6:a5:39:fb:64:70:0b:6b:
                    1c:fc:ee:58:43:67:c7:80:aa:55:ae:59:e9:34:43:
                    7f:73:54:1e:30:2d:ec:c3:58:1c:aa:b0:a2:d4:2b:
                    19:2d:60:af:7c:66:c9:b9:36:16:27:31:5a:96:ec:
                    44:0e:b6:71:72:f2:5c:9b:4f:dd:57:3e:2f:33:9b:
                    8a:85:14:3d:6a:16:2e:39:39:80:9d:46:62:c0:d1:
                    48:a2:25:19:40:91:56:07:86:12:98:22:86:d0:59:
                    0c:d0:68:ef:1a:da:26:25:57:ab:7c:32:a8:0c:7d:
                    1c:95:d4:c3:e6:34:e5:dc:75:ba:f1:41:cb:b3:d7:
                    47:ec:74:7f:4b:ec:37:d5:7b:36:a7:d6:83:9e:99:
                    a4:cf:48:36:cb:6b:ac:13:5e:a8:ac:bb:33:7b:e0:
                    80:d0:1f:99:4c:26:84:3a:a5:21:d9:95:18:bb:a4:
                    95:76:47:36:49:34:28:9f:17:86:29:06:70:68:9a:
                    09:a7:e2:86:1b:ce:75:3b:f1:13:d0:f3:b3:b2:d6:
                    5d:b5:d6:1f:64:3a:83:e5:ee:da:12:b3:dc:d7:4c:
                    8a:73:e7:21:cc:ed:f5:e6:02:75:77:9e:35:0b:dc:
                    3a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:5A:C3:D3:53:A6:A8:89:10:D5:02:42:FB:17:02:29:50:65:47:DA
            X509v3 Authority Key Identifier:
                keyid:A5:63:16:C7:12:98:31:E0:51:10:79:53:2D:ED:81:DC:12:C8:1D:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWMWxxKYMeBREHlTLe2B3BLIHaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:4e:0f:67:ea:14:d0:ac:75:7a:f7:ee:6c:57:f2:91:69:f8:
         69:49:af:a6:6e:da:9e:84:59:9f:3f:38:86:b7:fc:63:ef:b9:
         ae:00:bd:6a:84:3f:9a:03:a7:51:12:5e:93:fa:e3:77:28:50:
         45:a2:5e:d5:96:05:69:1d:5c:5b:99:a7:2d:66:e4:3c:c7:7f:
         91:71:73:d9:68:f1:26:b7:14:97:a3:9a:69:3e:08:f2:25:7e:
         b2:7a:54:31:2d:90:b8:ac:6b:ee:11:28:10:e1:6f:4b:ac:1f:
         cb:49:8f:f6:7d:6d:a9:8b:cf:cf:44:9d:d0:7b:7f:d2:0c:93:
         1a:8d:72:13:ae:eb:9d:67:e9:d1:be:78:42:c3:0a:02:7f:75:
         b8:3c:01:b8:1e:c7:4b:1a:fc:8a:34:73:7d:05:45:5c:e3:eb:
         a0:3f:64:12:f9:0a:1b:4f:aa:36:38:29:be:4d:66:ce:1b:5b:
         8a:d5:04:ac:a9:42:05:bf:a3:1f:9d:15:97:71:1c:a3:9e:a2:
         a8:27:ea:8a:c8:86:10:a0:b1:61:87:f0:c4:bb:87:fa:eb:28:
         34:26:aa:27:dd:c6:7d:6c:7a:7d:41:8c:95:21:3b:fb:1f:e6:
         b3:b5:56:bc:87:89:f0:ed:6f:85:27:f3:16:20:eb:3e:ec:a0:
         62:8b:d7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 01:04:57 2026 by rpki-client