Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.mft
File:                     r-us3hVZeiga4rspMG3E2m3Pt14.mft (raw, json)
Hash identifier:          qY1esqqQoWZCF5ix34bTgbPS7Jo3dPWQmmwLMEeawls=
Subject key identifier:   6E:4C:8D:2A:13:C9:4C:67:61:48:1E:9D:1B:5B:4C:F6:97:70:32:DC
Authority key identifier: AF:EB:AC:DE:15:59:7A:28:1A:E2:BB:29:30:6D:C4:DA:6D:CF:B7:5E
Certificate issuer:       /CN=afebacde15597a281ae2bb29306dc4da6dcfb75e
Certificate serial:       019E2926AB48EF4B9B68BE438C2C17584ED5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r-us3hVZeiga4rspMG3E2m3Pt14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.mft
Manifest number:          0121
Signing time:             Fri 15 May 2026 01:01:00 +0000
Manifest this update:     Fri 15 May 2026 01:01:00 +0000
Manifest next update:     Sat 16 May 2026 01:01:00 +0000
Files and hashes:         1: jdSx0T-sdrzr500OOr7Atdy3Z4E.asa (hash: nbjDNb/jtcCfwpceFtypmGiC8RlKHHL0LGrtqS6ZCo8=)
                          2: r-us3hVZeiga4rspMG3E2m3Pt14.crl (hash: qumaE8sx8kkOCUilSUNzi/C9DRq+j1fN7pQeig0n5Ks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r-us3hVZeiga4rspMG3E2m3Pt14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 01:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:26:ab:48:ef:4b:9b:68:be:43:8c:2c:17:58:4e:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afebacde15597a281ae2bb29306dc4da6dcfb75e
        Validity
            Not Before: May 15 01:01:00 2026 GMT
            Not After : May 16 01:01:00 2026 GMT
        Subject: CN=6e4c8d2a13c94c6761481e9d1b5b4cf6977032dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c8:e7:c5:cd:a4:c9:a1:12:6c:45:ba:cc:8f:
                    80:50:8c:29:bd:70:85:6f:8f:3d:91:c0:b7:07:ac:
                    fd:3b:30:a9:9c:ca:86:c8:ea:2c:93:e0:bb:2b:97:
                    d8:08:d9:cb:ef:ad:5c:45:94:3c:cd:cb:a8:07:4b:
                    8c:f4:7d:41:b9:49:13:c2:29:c7:be:4b:6c:fb:b4:
                    8b:26:94:a7:1f:55:8f:73:af:86:34:83:67:d8:42:
                    d1:8c:4c:b8:25:88:f9:fa:75:9f:84:a8:e2:a0:e0:
                    3a:ae:01:3b:61:60:51:c7:e2:5f:38:68:0f:f3:58:
                    14:4b:f1:bf:1f:a9:c8:ed:89:33:64:ab:98:a4:37:
                    a6:26:85:c4:1b:82:16:91:8a:49:84:54:6c:0b:9a:
                    b8:c4:6e:71:c9:6d:ab:23:bb:59:2e:76:b7:02:a4:
                    82:71:77:d8:6e:d1:43:6f:37:e1:f1:c5:58:34:75:
                    de:ad:9e:d7:84:99:c7:35:5b:ad:6a:10:db:ff:45:
                    24:a4:e6:73:17:14:b7:a2:dd:97:08:2d:55:c1:a2:
                    83:8b:b9:68:6c:d1:2c:67:77:c1:00:c1:9b:3a:97:
                    95:2b:2a:9a:82:1f:6e:73:bd:74:3b:98:8a:f8:d5:
                    85:43:bd:a3:cc:52:d9:3d:66:f2:a0:71:e3:82:73:
                    6b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:4C:8D:2A:13:C9:4C:67:61:48:1E:9D:1B:5B:4C:F6:97:70:32:DC
            X509v3 Authority Key Identifier:
                keyid:AF:EB:AC:DE:15:59:7A:28:1A:E2:BB:29:30:6D:C4:DA:6D:CF:B7:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-us3hVZeiga4rspMG3E2m3Pt14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:ba:98:f3:58:f0:92:35:54:f6:34:bc:cd:b7:8f:1f:89:1f:
         95:c8:2e:e9:ef:b8:62:e0:3d:78:c8:ed:98:1c:12:9b:10:5f:
         7d:be:83:b4:5a:b0:96:f0:43:49:97:83:dd:04:c1:e3:41:5a:
         06:d4:e0:12:9a:f7:f4:ed:1e:63:96:59:7f:eb:b7:04:c3:97:
         10:de:a1:f9:b1:b9:7c:10:d6:67:de:0c:ab:73:69:6b:c6:86:
         b4:a7:8f:b6:31:78:e8:e3:2d:67:66:e1:19:c4:6e:96:92:2d:
         59:03:12:fe:81:82:92:70:77:89:13:43:c8:06:89:ad:b1:88:
         24:c8:42:a9:1e:0c:ac:b4:78:6a:d4:85:99:09:af:39:71:9f:
         f2:1e:7d:4a:9c:78:4d:b5:52:28:ce:cc:71:4e:b5:bc:b5:7c:
         36:85:a4:08:a9:e3:68:97:5c:ed:8d:7f:3c:ac:da:1b:80:1d:
         f0:76:c2:08:e1:02:66:f7:8b:2b:1f:57:56:de:b0:37:81:59:
         71:c8:ac:6f:86:ad:08:1a:1a:9d:68:fd:43:cc:16:75:5a:18:
         1c:48:36:b1:c8:f0:be:c2:2a:12:0a:56:b2:b6:e3:44:37:6c:
         01:0f:e9:9b:0b:62:b0:60:5c:18:f8:1a:eb:ad:2c:31:8f:44:
         b2:d0:ab:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:20:30 2026 by rpki-client