Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
File:                     5wn3YuCC6tPW1-TK4p77tNEvV14.mft (raw, json)
Hash identifier:          g7m/t9lL/Lmo1PTdyGNX1XFq8vwyBuQe/iYEUYTOojw=
Subject key identifier:   8C:03:5F:A5:DA:AF:D8:12:5F:5B:A8:12:F1:A9:E4:E7:21:68:12:17
Authority key identifier: E7:09:F7:62:E0:82:EA:D3:D6:D7:E4:CA:E2:9E:FB:B4:D1:2F:57:5E
Certificate issuer:       /CN=e709f762e082ead3d6d7e4cae29efbb4d12f575e
Certificate serial:       019E30A949591137EE7947C110A8AA81FDAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
Manifest number:          0F67
Signing time:             Sat 16 May 2026 12:01:01 +0000
Manifest this update:     Sat 16 May 2026 12:01:01 +0000
Manifest next update:     Sun 17 May 2026 12:01:01 +0000
Files and hashes:         1: 5wn3YuCC6tPW1-TK4p77tNEvV14.crl (hash: NwIL0N3iDWbdN09yLwYZWluyNTm1mWSPaIKGCyhj4J4=)
                          2: WYQDjBxDm_OoBGcgcgmE7OCjFt0.roa (hash: eECr25yVYsujT6+QLvSz9j18MPQkn37aHPMM7Z3Jdzg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a9:49:59:11:37:ee:79:47:c1:10:a8:aa:81:fd:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e709f762e082ead3d6d7e4cae29efbb4d12f575e
        Validity
            Not Before: May 16 12:01:01 2026 GMT
            Not After : May 17 12:01:01 2026 GMT
        Subject: CN=8c035fa5daafd8125f5ba812f1a9e4e721681217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bf:58:86:cc:de:5c:30:75:41:b3:29:f1:37:
                    2d:da:00:2d:25:c3:64:7a:cc:e7:a3:0e:b2:76:34:
                    99:59:6e:64:21:01:1e:f1:96:fa:f4:a4:2b:0e:54:
                    e4:4f:c7:40:28:54:7f:6a:2e:c6:e4:82:7a:f7:86:
                    3f:b3:91:b7:99:b1:7a:c9:fa:c3:3f:fe:d2:00:d0:
                    25:53:b5:a1:db:bc:4b:9f:a2:d1:f0:ad:47:42:c7:
                    d5:59:d8:fe:c8:4e:8e:c5:93:c4:88:68:cd:e2:79:
                    b9:8f:7c:9a:10:2d:b6:c9:dd:54:dc:b5:3e:2d:f8:
                    82:23:09:d4:d6:51:5c:0e:e9:9a:35:ab:4a:ef:d0:
                    23:81:8a:87:5e:8f:ff:2a:bd:35:e7:c7:49:14:7e:
                    25:cf:6c:55:eb:7a:a1:84:e9:fe:fa:35:b6:6d:df:
                    49:24:f3:b8:b8:38:b9:74:d0:15:0d:8e:91:51:9b:
                    1e:1c:84:a9:33:f6:68:06:e6:a1:47:b9:14:4f:53:
                    0d:b0:82:51:e9:25:f7:eb:da:75:50:de:b4:f1:57:
                    2c:9e:1a:e2:bb:5a:da:dc:30:1c:8d:be:5e:eb:e1:
                    7f:de:03:58:a3:c7:88:95:91:27:0b:9d:4c:8f:d2:
                    be:01:54:c7:9e:d4:ba:10:a6:53:8f:05:f6:fe:9d:
                    6c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:03:5F:A5:DA:AF:D8:12:5F:5B:A8:12:F1:A9:E4:E7:21:68:12:17
            X509v3 Authority Key Identifier:
                keyid:E7:09:F7:62:E0:82:EA:D3:D6:D7:E4:CA:E2:9E:FB:B4:D1:2F:57:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:d2:e8:c6:d7:56:45:a6:b0:c1:9c:fa:46:49:2d:77:d1:05:
         0b:01:32:70:70:36:34:53:b1:0d:32:64:64:fb:cd:c5:af:a8:
         55:42:61:8d:7b:1f:27:b6:67:36:b7:90:a9:9d:93:0d:d1:7a:
         f9:11:bd:52:8c:12:7c:02:77:15:e7:00:c4:f9:b0:29:48:75:
         96:cd:58:c0:06:ec:d9:dd:71:76:ab:96:89:21:a0:56:de:f3:
         b9:48:0d:00:82:cc:30:63:13:82:f8:fa:19:0c:49:f3:bb:40:
         73:72:1b:e3:a8:9e:ac:d6:c0:44:01:d2:ec:82:b7:bb:8c:c8:
         2e:3f:5c:a0:be:ac:e0:77:b4:42:e6:69:a6:43:0d:19:9b:02:
         3c:71:45:90:8d:bb:b4:ce:eb:77:84:c4:4a:c0:23:0f:51:36:
         57:50:c9:44:90:92:89:ac:a8:c7:a5:d2:a5:9b:e8:a7:8b:f2:
         af:ec:ee:ee:5a:ea:5c:64:36:5c:7e:10:f0:49:d8:46:33:3f:
         43:61:3d:87:9e:7c:ff:f3:19:89:0b:2e:d7:ae:30:7f:40:82:
         f0:7e:d3:8b:54:ba:06:41:ef:3d:2d:54:27:07:78:04:7d:5d:
         ec:8d:f8:9b:cd:7a:8b:8a:7f:17:c7:be:f2:76:48:ad:e5:57:
         b8:ad:76:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:40:14 2026 by rpki-client