Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft
File:                     RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft (raw, json)
Hash identifier:          cX1yc4PirxnKEZvPc+whQIMx4fwPLQ15F6a0XjBCNMI=
Subject key identifier:   35:53:6D:CC:F3:EB:71:C8:1A:E0:37:E4:E3:F4:5A:4F:EE:BF:FD:6B
Authority key identifier: 45:68:D0:A7:20:45:60:B6:35:6D:83:7B:BF:15:10:D9:63:6D:F6:3A
Certificate issuer:       /CN=4568d0a7204560b6356d837bbf1510d9636df63a
Certificate serial:       019E73D2627EFB85F40370FD7363528F3D91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft
Manifest number:          0797
Signing time:             Fri 29 May 2026 13:00:28 +0000
Manifest this update:     Fri 29 May 2026 13:00:28 +0000
Manifest next update:     Sat 30 May 2026 13:00:28 +0000
Files and hashes:         1: RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl (hash: 6jd/fOvAIM3ND+qcDmMCjwDpWF2FAdMrP1x4/MuLtoY=)
                          2: dksbh_tx3bU5Ok0WztbuReiYrpU.roa (hash: NSSCxFWQG/xHAi2bn2Rv8MYwRip8Bj4kZ82RJfLw3As=)
                          3: gRmXeW_g4XWlJoD-3VX4J1-7IpU.roa (hash: D7tJT81Ih/7yE0Ex5L+2xy+fHBPkeGvPOLXrDK+WOqg=)
                          4: miAb-8PhHCi43bUCI_hLnwDESQM.roa (hash: R+HHUuhd28D1d5kF4bYGuzan7r+ujmUekbJUkPeHQ9U=)
                          5: vrN1ckiG11RIjmLBs3NUdn3vLXw.roa (hash: r1+gve8otRlqQvYmhKMUDpHufcQSUz4Vi42HDaDr78E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 30 May 2026 13:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:73:d2:62:7e:fb:85:f4:03:70:fd:73:63:52:8f:3d:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4568d0a7204560b6356d837bbf1510d9636df63a
        Validity
            Not Before: May 29 13:00:28 2026 GMT
            Not After : May 30 13:00:28 2026 GMT
        Subject: CN=35536dccf3eb71c81ae037e4e3f45a4feebffd6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2f:fd:57:4a:1d:8b:1f:be:03:08:d6:07:8c:
                    2f:62:c6:7a:f8:50:70:13:38:0b:ef:86:32:ae:97:
                    dc:23:86:ec:e3:c3:b3:13:47:bf:41:d9:8e:ad:d7:
                    9e:2a:63:c2:a0:c4:0c:db:d5:62:8b:9e:13:1a:68:
                    64:72:d7:f1:c8:e5:63:29:bf:c7:2a:d3:65:14:45:
                    d5:9b:e3:79:1e:00:c5:2b:8e:10:08:c1:9a:d0:ee:
                    ec:57:4e:a8:e0:3a:c0:bb:9b:52:78:19:16:5b:e6:
                    ec:e4:86:55:68:67:23:12:c6:0a:5a:af:e8:d6:5c:
                    a4:a6:27:be:84:25:a8:20:af:5f:41:ba:bf:b1:13:
                    27:d6:28:3c:80:fe:63:8f:2d:83:00:f5:6c:5d:4b:
                    38:81:cd:a5:17:db:fb:8d:76:75:91:5f:d4:2a:4b:
                    0d:e3:1a:73:cb:67:1a:a7:d0:66:cc:72:da:7a:49:
                    9d:f7:a5:d6:a4:d9:eb:88:b9:be:9c:ca:6e:6e:d7:
                    33:3b:d4:cf:85:2e:61:d7:02:42:57:25:09:d1:f4:
                    01:60:46:5f:e4:1a:a0:a4:dc:1a:4b:aa:42:19:6e:
                    b9:42:10:cb:6e:42:25:eb:b0:1e:09:ef:8c:b5:74:
                    ba:b1:8d:61:fe:81:47:82:a0:cc:21:33:c9:6a:45:
                    7f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:53:6D:CC:F3:EB:71:C8:1A:E0:37:E4:E3:F4:5A:4F:EE:BF:FD:6B
            X509v3 Authority Key Identifier:
                keyid:45:68:D0:A7:20:45:60:B6:35:6D:83:7B:BF:15:10:D9:63:6D:F6:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:42:50:6b:90:50:d7:6d:c5:08:df:b0:0b:44:79:e8:cb:fa:
         de:0b:cf:d5:27:50:e3:82:9b:1d:a4:91:78:b4:f8:c1:da:bb:
         e1:47:72:bf:48:45:85:de:9d:80:f7:ff:6d:c1:69:35:ff:4c:
         ce:7d:e5:9f:36:42:87:f1:99:a6:80:45:0b:87:55:ab:a1:84:
         17:ea:a4:1d:24:2d:83:4b:53:cf:bd:f6:0f:56:d7:5a:ea:cc:
         a7:42:e6:b1:6d:cd:50:9c:5a:46:c5:59:2a:5f:b6:0b:da:e0:
         90:40:ee:cb:b6:33:3f:ac:ee:9b:52:82:db:74:cc:d0:bb:5e:
         b3:5a:48:cd:04:a9:34:e3:19:ae:f8:ab:b0:45:83:ac:fe:ea:
         8b:bc:c2:c3:82:df:bf:71:0e:b3:ef:09:c0:07:e1:f4:83:60:
         ca:03:39:d6:c0:69:d3:5f:56:97:de:a1:0c:57:43:03:6a:b6:
         a0:42:e7:34:df:70:4c:81:6c:99:c0:97:65:06:d7:b8:47:bb:
         3b:8b:b5:7d:f5:e0:31:5e:9c:b1:87:6b:83:78:8d:c1:34:3e:
         52:a8:16:18:46:b9:09:bc:6d:e3:fe:5b:1f:7a:78:bb:7c:00:
         d3:28:a1:7a:95:d5:11:39:10:b8:27:f4:e1:31:96:38:ca:d8:
         1d:f8:c8:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 20:11:26 2026 by rpki-client