Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
File:                     _0j7nPF97Oat2wju_ZvuhCweK2A.mft (raw, json)
Hash identifier:          Z1QqoX+NB3zRpxqHD+BZbDK/l93uW+WXXKNQrUeM99c=
Subject key identifier:   79:24:81:8F:C0:14:15:7C:76:C1:6F:AD:5B:BB:0E:98:24:D6:8A:0F
Authority key identifier: FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60
Certificate issuer:       /CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60
Certificate serial:       019E30E087CC40C307DEF0314D5ADA3CD27C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
Manifest number:          1912
Signing time:             Sat 16 May 2026 13:01:21 +0000
Manifest this update:     Sat 16 May 2026 13:01:21 +0000
Manifest next update:     Sun 17 May 2026 13:01:21 +0000
Files and hashes:         1: 4XcJfnMEQwRMn36H0whqZmqgRz0.roa (hash: 3cAlArq6y9UICoHc8IZifo9HP9trBfeMANvUPBi0r6k=)
                          2: _0j7nPF97Oat2wju_ZvuhCweK2A.crl (hash: 3PLbmKdWYZ0K0wQYMj5c/KOim449zjbwSkHyv+bRcCI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:87:cc:40:c3:07:de:f0:31:4d:5a:da:3c:d2:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60
        Validity
            Not Before: May 16 13:01:21 2026 GMT
            Not After : May 17 13:01:21 2026 GMT
        Subject: CN=7924818fc014157c76c16fad5bbb0e9824d68a0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:99:e0:44:bd:de:c6:77:9a:bb:b3:bd:dc:93:
                    3e:19:a6:9d:ad:72:c5:1d:44:68:12:d0:6a:fb:8d:
                    e1:e2:fa:90:5d:37:4c:30:15:07:93:cd:c2:cf:75:
                    27:fa:bf:06:c9:e7:fd:8d:27:78:29:94:f5:b2:9c:
                    4f:c4:fe:e1:f0:9f:b0:57:e7:a9:3c:4f:e1:c2:32:
                    f8:56:f0:3b:38:10:d2:2e:bd:51:ca:58:9a:7e:ef:
                    94:2c:31:16:76:40:5c:e6:34:68:c5:ae:cf:ae:39:
                    91:78:1c:13:d2:bd:7f:b0:e1:9b:6c:10:a0:fc:92:
                    22:c8:18:67:70:5f:39:81:b1:8d:48:dc:a6:7d:1f:
                    4f:51:dc:67:d1:09:46:2b:b9:9c:dd:27:dc:b2:fc:
                    98:35:76:f0:54:8c:36:86:4c:b7:30:f9:f8:ec:05:
                    54:91:29:34:ef:ea:bc:69:12:e3:96:86:23:35:ae:
                    f6:20:92:71:78:65:a4:93:2c:59:dc:f7:e3:55:36:
                    d3:d0:87:fc:93:8f:ce:7f:1a:83:90:f8:aa:33:2b:
                    78:af:b6:33:ff:12:85:8b:7a:f8:de:12:13:5a:d1:
                    20:bc:c3:16:28:a9:c8:ef:db:d7:f6:64:52:5f:04:
                    a5:07:19:d5:ce:2c:f2:bb:b6:3b:aa:36:2c:cc:93:
                    03:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:24:81:8F:C0:14:15:7C:76:C1:6F:AD:5B:BB:0E:98:24:D6:8A:0F
            X509v3 Authority Key Identifier:
                keyid:FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:aa:2c:cf:8c:be:ee:a7:79:31:ac:73:7a:bd:a2:dd:0e:da:
         82:f5:02:03:74:52:0a:10:00:c4:fd:ed:ef:67:ae:d8:21:4a:
         bd:4d:25:78:b6:41:e4:14:ca:1d:a2:f6:2e:ba:76:f8:52:e6:
         a4:f9:02:4f:52:21:c9:af:10:39:db:d7:03:f9:4c:cb:d7:dd:
         81:d4:93:8d:b1:8a:7e:b4:eb:ef:17:a9:01:d5:3a:9a:91:0b:
         62:5c:a3:de:a0:c9:56:ae:4e:2d:ea:96:2c:46:27:a7:6d:5f:
         f6:6b:8b:ab:52:5b:28:b2:1f:0c:31:96:2d:b8:5e:2c:96:51:
         df:03:b9:e2:cc:33:50:83:bf:16:7e:f6:e8:12:37:e0:01:db:
         45:58:90:b3:9e:89:cc:3a:ce:2d:00:9e:b9:a5:34:19:24:00:
         63:80:92:71:e4:2a:82:93:bd:0b:47:04:9a:ed:7c:94:60:e6:
         6e:88:61:f0:38:d7:62:a0:c6:80:2a:e6:d9:49:43:2c:89:9d:
         a4:b8:84:1e:83:a2:6e:15:52:df:d2:92:83:76:45:db:3b:f9:
         ee:82:6c:4b:f9:f8:6f:ba:cd:fb:9f:01:66:41:34:ea:ae:44:
         48:ad:75:88:7a:fb:1a:27:21:80:a7:21:7d:0c:bb:76:52:82:
         65:00:c4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:02:09 2026 by rpki-client