Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft
File:                     SdhmPTuWngJTom1UJb7hxdRDs2E.mft (raw, json)
Hash identifier:          4meLlHbSxgB/VpVL97ebi85Cy2QS9FuTD/HVU8hvWfk=
Subject key identifier:   3F:85:C3:1F:CB:BC:E4:06:6D:83:95:A8:DB:0A:66:49:B7:8B:74:EB
Authority key identifier: 49:D8:66:3D:3B:96:9E:02:53:A2:6D:54:25:BE:E1:C5:D4:43:B3:61
Certificate issuer:       /CN=49d8663d3b969e0253a26d5425bee1c5d443b361
Certificate serial:       019E30059C8638B23AAEE0379D2F0D33006F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SdhmPTuWngJTom1UJb7hxdRDs2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft
Manifest number:          0A6E
Signing time:             Sat 16 May 2026 09:02:14 +0000
Manifest this update:     Sat 16 May 2026 09:02:14 +0000
Manifest next update:     Sun 17 May 2026 09:02:14 +0000
Files and hashes:         1: SdhmPTuWngJTom1UJb7hxdRDs2E.crl (hash: iCdIlToesVmPxzLcRCGEefyOH8vC+9JuY+fkb1G+THA=)
                          2: ss_i7POqldkDP31KMdlVrzarBdE.roa (hash: WvsAUlRR+NRLn32GVVcoWQROpDNnn7tmpssNx6BwiVE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SdhmPTuWngJTom1UJb7hxdRDs2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:05:9c:86:38:b2:3a:ae:e0:37:9d:2f:0d:33:00:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d8663d3b969e0253a26d5425bee1c5d443b361
        Validity
            Not Before: May 16 09:02:14 2026 GMT
            Not After : May 17 09:02:14 2026 GMT
        Subject: CN=3f85c31fcbbce4066d8395a8db0a6649b78b74eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:22:a7:46:95:73:73:1b:35:15:cb:c5:a6:11:
                    57:32:49:2c:c3:4c:c8:c8:9c:cd:9b:a7:b4:ad:78:
                    e5:8e:a3:8a:cd:15:4c:34:48:37:78:f2:1e:e0:8b:
                    49:a1:c5:35:1a:67:f6:4f:7f:ec:82:0a:5b:2d:3d:
                    52:d4:e5:92:20:be:18:54:17:83:d6:f0:c1:8b:42:
                    87:3a:05:06:de:b1:55:c0:92:82:1d:70:ca:9a:e3:
                    79:db:df:f5:8c:f9:dd:ea:97:5e:c9:61:85:e2:09:
                    f0:cb:0b:90:5d:ec:35:c4:ce:f1:84:89:dc:90:a2:
                    55:18:eb:f7:44:ee:92:6f:62:1c:d2:00:73:ef:78:
                    33:14:53:ba:0f:e0:4f:ee:32:c2:8b:84:c5:47:8b:
                    5f:36:a1:80:74:03:ad:11:61:e6:4e:60:c7:72:df:
                    e2:ec:7d:fc:43:91:0c:47:57:d1:eb:67:a3:11:6e:
                    26:bd:3c:5d:06:f2:b5:5c:b6:00:64:5f:39:27:63:
                    3a:75:9f:aa:e8:cc:a3:36:4f:15:7d:b6:fc:1d:84:
                    e3:93:2d:b4:52:af:ba:44:75:d6:68:bc:f2:45:8a:
                    bf:9a:e0:37:ae:d3:72:83:2b:05:c4:f4:58:ea:23:
                    a4:91:4a:cb:c6:a8:ec:f8:01:65:0a:d7:4d:e6:d7:
                    2b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:85:C3:1F:CB:BC:E4:06:6D:83:95:A8:DB:0A:66:49:B7:8B:74:EB
            X509v3 Authority Key Identifier:
                keyid:49:D8:66:3D:3B:96:9E:02:53:A2:6D:54:25:BE:E1:C5:D4:43:B3:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdhmPTuWngJTom1UJb7hxdRDs2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:00:c4:0f:1b:3b:12:3a:e4:ce:83:39:b5:23:40:4e:ec:68:
         69:3c:ba:ee:9c:56:e2:cc:66:fb:5f:04:9e:fd:02:5f:00:d0:
         12:f6:27:12:d3:59:83:9f:8e:6f:81:f5:a3:6d:ea:64:97:a0:
         8e:09:90:1d:0a:cf:de:ad:04:77:2b:38:dd:6e:7c:23:f3:de:
         82:95:33:77:bb:38:e5:63:3b:ef:77:3c:14:55:d5:07:ad:0f:
         ba:0f:c6:24:a1:f2:ac:cc:f2:ff:42:f1:54:ad:b0:ce:04:7f:
         a2:84:1b:5f:92:63:a0:c2:f4:73:be:7a:54:04:64:e7:20:ee:
         a6:6e:2a:2b:ed:a8:5f:d3:01:4c:63:33:66:1f:3d:73:69:12:
         1b:d8:3f:50:67:23:03:28:95:f9:b7:28:88:1e:06:dd:d4:74:
         54:d6:46:57:84:69:7d:dc:5f:f9:ae:85:c9:e5:31:cb:62:57:
         ad:d9:51:d0:aa:c1:79:49:84:bc:4d:5a:55:8a:a8:35:85:59:
         71:01:15:a8:ff:1f:df:81:f8:45:42:1e:22:0b:73:0e:e8:a2:
         b3:a7:ea:71:6b:4c:84:60:6f:df:77:19:aa:fb:12:42:07:ef:
         0a:88:83:32:a9:96:02:64:92:90:f2:e2:c6:89:81:62:43:28:
         e8:fb:1b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:30:44 2026 by rpki-client