Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft
File:                     51ZNDMfaBfpYz72MKpQ1yzNizeI.mft (raw, json)
Hash identifier:          UDHkc/JqqmmmklU2po+hVP3qn4FDOLjtAmqeLPQAYEs=
Subject key identifier:   12:61:07:7F:EE:26:DD:59:25:73:76:5E:81:65:5F:BC:B7:46:2B:2A
Authority key identifier: E7:56:4D:0C:C7:DA:05:FA:58:CF:BD:8C:2A:94:35:CB:33:62:CD:E2
Certificate issuer:       /CN=e7564d0cc7da05fa58cfbd8c2a9435cb3362cde2
Certificate serial:       019E30A959C6519930D3F76E0F0DAB37D633
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/51ZNDMfaBfpYz72MKpQ1yzNizeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft
Manifest number:          08AA
Signing time:             Sat 16 May 2026 12:01:05 +0000
Manifest this update:     Sat 16 May 2026 12:01:05 +0000
Manifest next update:     Sun 17 May 2026 12:01:05 +0000
Files and hashes:         1: 51ZNDMfaBfpYz72MKpQ1yzNizeI.crl (hash: fTcWbzKyw3lrZ3M7cSRVwUrmEzu2M8qn+PfzO/4w3YM=)
                          2: n44f7QSdRCQiunlcmqHdl3w15uE.roa (hash: AjuubWqF9PqvZ/rZA7q3KWYt0VtrOQcS6lypZ6/PGG0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/51ZNDMfaBfpYz72MKpQ1yzNizeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a9:59:c6:51:99:30:d3:f7:6e:0f:0d:ab:37:d6:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7564d0cc7da05fa58cfbd8c2a9435cb3362cde2
        Validity
            Not Before: May 16 12:01:05 2026 GMT
            Not After : May 17 12:01:05 2026 GMT
        Subject: CN=1261077fee26dd592573765e81655fbcb7462b2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:81:f9:c3:4e:06:a5:f7:59:20:14:75:a3:97:
                    1c:8b:1a:bf:6d:37:cd:6b:dd:0d:c7:78:e0:a6:46:
                    03:b6:2e:93:4a:89:98:d7:2a:61:a6:34:95:5f:26:
                    f8:3c:03:fa:62:3b:b0:85:5a:33:92:08:53:3e:fd:
                    f0:8c:a3:dc:1a:a6:2b:71:a1:0d:66:34:42:d9:63:
                    89:a1:18:ca:12:a3:05:99:ee:67:75:94:cf:d9:d0:
                    da:9b:ef:b9:d4:a6:4a:38:7b:82:5b:90:9e:72:0d:
                    ae:3e:30:a7:fe:51:e1:d2:15:e1:e1:1d:a0:37:c9:
                    ae:1b:01:d3:38:dd:5c:31:10:dc:d3:60:d0:e5:e5:
                    d0:21:f7:09:23:fe:e2:39:a9:12:e9:77:e0:c4:d1:
                    e8:45:f6:f1:56:c7:d1:7b:f9:f2:5f:dc:6b:24:63:
                    ed:2f:a0:79:38:54:a0:1d:be:8a:84:ce:f9:5e:95:
                    1a:31:1b:39:46:ed:e0:1f:ab:11:35:9b:35:6f:d6:
                    15:7e:17:2f:2d:7a:09:25:eb:4b:1b:2b:06:74:1d:
                    41:56:34:7d:d2:58:ac:c1:3a:0b:6b:12:09:5c:61:
                    30:7f:bc:29:1e:32:9e:46:cc:7f:32:66:56:78:f3:
                    41:8c:8c:b1:45:34:25:87:e3:92:b4:da:9a:59:8f:
                    66:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:61:07:7F:EE:26:DD:59:25:73:76:5E:81:65:5F:BC:B7:46:2B:2A
            X509v3 Authority Key Identifier:
                keyid:E7:56:4D:0C:C7:DA:05:FA:58:CF:BD:8C:2A:94:35:CB:33:62:CD:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51ZNDMfaBfpYz72MKpQ1yzNizeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:dc:30:94:ce:5d:7f:8a:f9:b5:a5:6d:c9:f8:e7:53:99:eb:
         2e:bc:ee:c0:ff:37:cb:fa:bb:33:f2:25:fc:63:da:e1:02:e6:
         ef:2a:49:e8:4e:df:d5:f2:33:b7:34:db:2e:9a:66:87:c1:4b:
         84:14:f7:ac:04:b5:4e:31:1b:b0:8a:e4:95:b7:85:76:ea:1a:
         88:1a:80:3d:32:3b:6e:2b:32:55:04:20:11:fb:8c:10:e7:5f:
         58:0d:2c:dd:41:6c:57:8a:77:59:bf:a1:3f:bf:31:67:5f:0c:
         67:8e:e4:c0:03:9d:51:3a:1e:7a:0a:9a:dc:b1:c9:ab:8f:15:
         db:51:b4:9e:66:12:27:51:c3:f7:4f:7e:e2:2f:0c:74:ce:78:
         5d:d1:30:3f:3b:67:5f:19:f0:fe:90:a0:60:60:ed:ec:29:45:
         22:9d:50:2d:91:c2:c0:49:71:4b:ce:ac:d5:87:56:cb:b8:9c:
         4d:7c:75:97:1d:e5:f4:3a:28:a6:83:75:49:3e:d9:74:ba:33:
         05:b9:7d:bb:35:8c:70:1c:db:57:0c:e8:24:98:2b:d7:18:1f:
         11:5b:f2:93:b0:82:6b:b4:94:c8:f4:7f:33:b0:81:7e:82:0c:
         37:9c:97:df:6c:38:51:dc:6d:8b:ca:d9:e6:08:cb:eb:fd:d1:
         14:fe:b5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:37:29 2026 by rpki-client