Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
File:                     1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft (raw, json)
Hash identifier:          TTLL9+o6eYE7atsHgtso8OjcaAPXKSjLo2QHD9bsCoI=
Subject key identifier:   05:B6:83:11:C9:C2:EE:49:18:53:31:38:DA:5B:43:DC:55:F4:12:ED
Authority key identifier: D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4
Certificate issuer:       /CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4
Certificate serial:       019E3185410B5218CCA912709E73E6B863E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
Manifest number:          0E40
Signing time:             Sat 16 May 2026 16:01:16 +0000
Manifest this update:     Sat 16 May 2026 16:01:16 +0000
Manifest next update:     Sun 17 May 2026 16:01:16 +0000
Files and hashes:         1: 1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl (hash: Wxud0gmt5k5TqB0QDwP28I3FEL12TglKjW9gk9feO5I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:85:41:0b:52:18:cc:a9:12:70:9e:73:e6:b8:63:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4
        Validity
            Not Before: May 16 16:01:16 2026 GMT
            Not After : May 17 16:01:16 2026 GMT
        Subject: CN=05b68311c9c2ee4918533138da5b43dc55f412ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:90:08:55:9f:76:4e:f6:ec:2d:b3:bd:e7:4b:
                    d9:96:73:d3:f3:a9:08:1f:8b:97:ec:2f:ba:2c:e7:
                    89:de:a6:35:ec:00:1e:7e:36:87:16:06:7d:35:08:
                    cd:9e:99:5a:d9:00:66:b4:6b:be:bf:57:a9:fc:b6:
                    86:f3:19:a7:82:43:c4:17:49:78:e5:3e:c1:3e:55:
                    05:54:8e:98:77:03:97:8b:a3:99:46:9d:60:ea:59:
                    e3:ff:33:bd:a4:84:44:a2:7c:0d:40:26:2b:de:d4:
                    93:b7:99:59:e6:ec:e6:65:ab:72:7c:7a:51:f5:7a:
                    2c:2b:1f:43:20:f2:16:dc:aa:5a:16:96:15:ea:b1:
                    cc:4b:3f:21:23:c2:24:58:05:4c:9f:f1:d4:90:fe:
                    6c:4d:98:72:e1:79:5c:dc:02:6c:41:97:c5:8f:6e:
                    c5:19:ff:02:fc:96:0d:e2:d5:54:19:36:f7:28:fc:
                    9a:d1:4d:13:5e:ef:7c:ba:7a:2a:6f:df:48:b3:06:
                    08:a7:b2:b1:34:a4:ec:13:1e:4f:e1:12:5b:86:84:
                    68:89:fd:23:ae:a5:96:0a:e6:81:68:7e:70:8f:a4:
                    ab:74:ef:da:b5:8e:d3:63:e2:fb:f2:73:a2:f8:6e:
                    9d:05:bd:5b:16:3a:b1:17:f7:ae:cf:3a:f0:a4:42:
                    00:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B6:83:11:C9:C2:EE:49:18:53:31:38:DA:5B:43:DC:55:F4:12:ED
            X509v3 Authority Key Identifier:
                keyid:D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:fb:14:6a:e8:b2:30:2a:fd:f2:81:04:1a:3d:21:1e:47:dd:
         8d:6a:37:31:79:31:e2:6f:0c:f9:ff:98:55:f0:0d:6b:91:1b:
         a2:3b:fc:7b:7a:c5:d4:8a:cd:58:42:33:d6:cc:7e:58:b5:ed:
         59:52:3c:36:a7:69:5e:26:3d:7b:fa:46:24:68:b5:a8:e2:2b:
         8d:1d:f3:b2:7a:10:02:17:f7:67:b7:14:95:5b:8a:e1:6b:e5:
         da:95:cb:04:d2:2e:29:59:f8:1e:55:74:a8:2e:fd:cf:97:e8:
         c9:6d:3a:c8:82:f1:d6:18:a8:fc:bb:53:cd:1d:2b:f6:b7:e5:
         35:a0:30:d1:2c:ab:39:0c:0f:a7:b7:a7:78:d8:a3:cb:ea:30:
         01:c6:95:c5:d3:04:93:5a:4a:52:44:4a:24:2f:01:28:e0:8d:
         02:87:98:14:2a:20:17:26:91:69:b0:68:48:6f:f3:03:a0:12:
         f6:b3:2a:dc:46:ac:cd:c3:6b:e9:0f:cd:29:d9:87:f1:d2:de:
         da:40:93:97:47:18:d8:d9:df:2b:c2:09:a5:97:93:41:21:24:
         c7:1c:94:79:a6:5a:fc:70:f2:fd:9e:41:a1:9f:c8:12:09:0d:
         60:af:fa:28:0a:ce:85:9c:20:eb:a8:39:8b:94:86:0b:8a:3a:
         5e:c3:5a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:40:43 2026 by rpki-client