Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.mft
File:                     DLvQEU2XGWdQ1IxeElbtBVpeniw.mft (raw, json)
Hash identifier:          sgx9edhYLI4Uawq8o1w4JkkzGHvwILVk/8QX+7BO0oQ=
Subject key identifier:   C4:28:61:18:9A:AB:ED:41:6B:F3:D5:E9:38:F7:E7:FA:8B:06:22:45
Authority key identifier: 0C:BB:D0:11:4D:97:19:67:50:D4:8C:5E:12:56:ED:05:5A:5E:9E:2C
Certificate issuer:       /CN=0cbbd0114d97196750d48c5e1256ed055a5e9e2c
Certificate serial:       019E30E04EA4671C7A4080B4DEA86E44CC01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DLvQEU2XGWdQ1IxeElbtBVpeniw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.mft
Manifest number:          0D68
Signing time:             Sat 16 May 2026 13:01:06 +0000
Manifest this update:     Sat 16 May 2026 13:01:06 +0000
Manifest next update:     Sun 17 May 2026 13:01:06 +0000
Files and hashes:         1: DLvQEU2XGWdQ1IxeElbtBVpeniw.crl (hash: 5Liy8AUWhgvZfJhPIyXDAK5BieEceJrkTApitQNq8Zw=)
                          2: zTRd4Rg7f52eGJE9IBoR1ppNzbw.roa (hash: 1Wo48c+UEPKDWWzPD4uCsXMeUU5ZpLq6o6j7k+pojVE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DLvQEU2XGWdQ1IxeElbtBVpeniw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:4e:a4:67:1c:7a:40:80:b4:de:a8:6e:44:cc:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cbbd0114d97196750d48c5e1256ed055a5e9e2c
        Validity
            Not Before: May 16 13:01:06 2026 GMT
            Not After : May 17 13:01:06 2026 GMT
        Subject: CN=c42861189aabed416bf3d5e938f7e7fa8b062245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:df:7b:b2:fd:f6:73:47:d3:c7:85:d6:8e:0e:
                    3b:45:29:f8:a3:0b:66:b6:83:b9:2b:5b:af:7c:e9:
                    52:12:2b:b4:a9:c1:01:3c:9c:31:ab:f7:6d:97:86:
                    07:0d:1a:85:bd:4a:52:bc:f0:f6:91:a4:54:86:15:
                    1a:5a:67:6c:29:f3:10:88:15:81:7e:97:90:47:9e:
                    4d:fc:b0:a6:b8:71:ed:83:97:bf:a0:48:97:52:c7:
                    ae:87:ef:4a:f4:18:a3:9a:ad:01:02:22:55:a0:49:
                    9c:65:c2:17:f5:78:4a:c2:33:b3:35:a2:ca:4c:80:
                    f8:67:24:32:92:ef:9e:b8:ec:10:4c:2e:1a:31:b1:
                    1b:0c:84:8b:e5:9b:a9:82:58:03:4c:5e:9b:cc:46:
                    e8:bd:7a:68:1b:c5:28:2e:38:51:a1:fb:32:43:9c:
                    c5:48:2e:7e:eb:7f:78:f4:e7:13:6a:69:b8:ad:f6:
                    63:01:5a:dd:5c:5d:c0:c5:9f:7b:12:85:60:6b:c1:
                    c8:f0:84:63:dc:5c:2b:09:7e:ef:73:03:b4:b3:60:
                    d2:bc:5e:4c:6b:27:4a:29:ad:ac:bc:23:a5:fe:49:
                    3c:59:2e:e7:0f:15:f6:1d:25:1a:7a:b4:ea:7e:09:
                    6d:7d:cd:30:d0:0e:58:c9:21:ff:64:eb:5d:37:47:
                    9a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:28:61:18:9A:AB:ED:41:6B:F3:D5:E9:38:F7:E7:FA:8B:06:22:45
            X509v3 Authority Key Identifier:
                keyid:0C:BB:D0:11:4D:97:19:67:50:D4:8C:5E:12:56:ED:05:5A:5E:9E:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DLvQEU2XGWdQ1IxeElbtBVpeniw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:5b:f1:ac:e7:e6:f1:5b:3d:d5:57:3c:ed:f7:fe:40:f0:9e:
         60:7c:2b:b8:2a:fe:dc:8a:7a:6a:d5:bb:10:46:7c:a7:c1:96:
         7c:30:69:dc:9d:19:b4:5c:fe:a5:d0:28:a0:50:52:41:7f:20:
         36:95:d6:6f:64:33:94:71:c2:9b:ad:e9:c9:07:03:d4:63:c9:
         3b:06:60:6d:41:36:db:a1:0b:7e:e5:ce:f9:0b:42:55:cd:41:
         6e:e2:ff:c7:ef:7f:17:4f:0a:37:6f:55:bb:0b:96:df:60:43:
         ab:8c:a9:e2:c1:a7:40:b0:0f:be:fa:ed:c3:21:f0:40:af:5b:
         65:5a:01:ac:b2:92:b8:b4:22:e7:22:fb:d4:0e:9a:50:cc:77:
         1b:54:6b:35:ca:b6:8b:5b:61:01:40:0e:38:f0:00:f4:03:60:
         6a:a6:1b:68:c8:f4:09:09:ba:00:3a:a9:87:78:65:c6:dc:89:
         26:c2:4b:3a:58:e1:ea:0f:84:cd:a3:10:0b:5a:01:e3:da:12:
         48:ec:c9:d5:ed:0d:25:ab:8b:16:56:ea:98:fd:fb:b3:74:f3:
         bb:8c:9f:0c:a9:79:b8:56:17:d2:bb:93:8b:7e:18:a8:aa:2a:
         e1:98:a9:38:61:60:33:5e:46:dc:78:9e:4e:5b:d6:32:f9:3b:
         50:af:6c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:40:00 2026 by rpki-client