Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.mft
File:                     WArULGTE9V_s54skJwcf5mhMIMk.mft (raw, json)
Hash identifier:          vMpGqF0RzD6Jdt0kcT9/VOuhtxpk9J9G1MdghZZ4L5o=
Subject key identifier:   27:2C:0A:E7:D8:48:00:6A:F6:59:B1:FC:B9:60:E2:25:A4:60:2F:E6
Authority key identifier: 58:0A:D4:2C:64:C4:F5:5F:EC:E7:8B:24:27:07:1F:E6:68:4C:20:C9
Certificate issuer:       /CN=580ad42c64c4f55fece78b2427071fe6684c20c9
Certificate serial:       019E31BC40E024CFB805E74DE7D43B55F2B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WArULGTE9V_s54skJwcf5mhMIMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.mft
Manifest number:          1912
Signing time:             Sat 16 May 2026 17:01:21 +0000
Manifest this update:     Sat 16 May 2026 17:01:21 +0000
Manifest next update:     Sun 17 May 2026 17:01:21 +0000
Files and hashes:         1: WArULGTE9V_s54skJwcf5mhMIMk.crl (hash: E0Mx3VuC9/z+TONICdCALjjjaBDw8ygdGKBLQldo3IY=)
                          2: hjtitcU8d-FLJ62seFiGxMChEI0.roa (hash: zPnqOgCOOliYSlkJeU3JzTfIehQxkqyATNcPPm5JpBo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WArULGTE9V_s54skJwcf5mhMIMk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:bc:40:e0:24:cf:b8:05:e7:4d:e7:d4:3b:55:f2:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=580ad42c64c4f55fece78b2427071fe6684c20c9
        Validity
            Not Before: May 16 17:01:21 2026 GMT
            Not After : May 17 17:01:21 2026 GMT
        Subject: CN=272c0ae7d848006af659b1fcb960e225a4602fe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:41:0c:b1:d2:9f:0b:88:93:25:00:18:7e:59:
                    0c:28:5f:39:c0:e8:98:d5:95:3c:4b:8e:1a:82:29:
                    5b:08:35:a9:ec:4b:6c:de:2c:26:64:31:59:da:e3:
                    9e:10:3c:0e:f2:d4:7d:e3:00:c2:b9:bc:9b:83:12:
                    65:ad:ff:ba:25:f0:f7:d3:a3:05:ee:1d:3a:86:b6:
                    66:84:7b:da:de:5a:5d:14:4e:23:77:66:1d:40:ef:
                    8d:41:73:91:a5:31:f8:0e:2a:09:84:1a:a7:6f:af:
                    a2:09:5a:23:69:3d:fd:0a:d4:89:ae:d4:40:ef:7f:
                    1b:47:b3:b7:50:1b:5e:cb:30:b7:1b:bd:67:3b:90:
                    d3:ce:60:e1:6b:53:83:ce:2d:7c:63:03:3a:f8:7f:
                    b9:f0:ba:62:04:43:72:23:cc:0b:2e:13:0b:f0:b9:
                    c8:27:bd:a8:4a:01:40:4a:1c:70:c9:89:aa:8b:53:
                    41:a6:91:bd:dc:46:85:9d:b5:92:5d:36:12:0c:0b:
                    8c:ff:2a:37:a4:32:81:9a:1f:14:a2:5b:37:19:c3:
                    a6:1f:81:14:9d:6f:c4:a1:be:74:e8:51:16:b3:7b:
                    1e:fe:1d:ac:6e:df:78:e1:47:d2:db:3d:7d:a4:dd:
                    bc:bd:5b:73:a2:a3:a2:83:6e:d9:11:c5:e5:6c:90:
                    ad:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:2C:0A:E7:D8:48:00:6A:F6:59:B1:FC:B9:60:E2:25:A4:60:2F:E6
            X509v3 Authority Key Identifier:
                keyid:58:0A:D4:2C:64:C4:F5:5F:EC:E7:8B:24:27:07:1F:E6:68:4C:20:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WArULGTE9V_s54skJwcf5mhMIMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:b6:4d:fa:f4:70:5c:eb:0d:65:00:c5:cc:26:1f:b8:e0:f0:
         f7:8c:98:6d:4f:3f:30:4b:01:04:d1:38:4f:ce:a0:09:b1:2f:
         13:6c:f5:5c:cf:7f:37:93:04:b9:04:f8:01:06:a6:c6:3a:24:
         75:b1:69:05:ac:31:3b:7a:db:b2:f2:3c:ea:43:fc:2b:c5:fa:
         6f:2c:c0:bb:be:47:64:73:30:eb:ad:0f:bb:a3:92:17:a3:85:
         05:24:e3:07:fb:9c:f7:7e:71:bb:cd:ba:a2:42:47:f2:e5:19:
         b3:a5:be:a8:b1:2e:19:f3:83:05:ec:d3:e5:2b:59:40:1f:be:
         a4:54:a7:bc:b9:5d:45:ff:b9:4d:3b:05:ff:9a:1c:cd:48:f8:
         2d:70:f7:37:02:42:c4:e5:a5:e2:b8:23:ce:97:5f:c4:95:02:
         78:ca:7a:01:be:4a:f0:e6:3a:24:f1:65:fd:24:8a:1b:5c:c5:
         1f:61:45:2e:61:7c:62:c0:cc:a8:ef:95:86:3f:66:2d:de:e6:
         6d:0a:3b:34:18:c6:c5:1c:08:38:9d:af:e8:4d:53:cd:30:6c:
         57:cc:fe:3a:5c:a5:8a:b1:12:24:4f:7f:4d:39:b7:f5:ac:1e:
         9e:2c:de:30:ec:1d:d1:aa:5e:e1:bf:be:c6:90:c3:cc:01:1a:
         e2:3d:c7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:13:21 2026 by rpki-client