Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.mft
File:                     E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.mft (raw, json)
Hash identifier:          aCw5yCFENOByzYMn9GF7YOah2EZLnUYqosW7kw+dlRo=
Subject key identifier:   51:3C:62:BD:B0:BA:EF:A0:71:7D:0D:50:C9:C7:9D:65:D5:25:88:FE
Authority key identifier: 13:40:10:E4:39:8D:FD:6E:19:F4:5B:51:3C:22:C1:EC:A3:33:11:F8
Certificate issuer:       /CN=134010e4398dfd6e19f45b513c22c1eca33311f8
Certificate serial:       019E30A91599ABA01A1C48277B5B786E530F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.mft
Manifest number:          0D60
Signing time:             Sat 16 May 2026 12:00:47 +0000
Manifest this update:     Sat 16 May 2026 12:00:47 +0000
Manifest next update:     Sun 17 May 2026 12:00:47 +0000
Files and hashes:         1: E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.crl (hash: haHL3phzgNtQaX0iTknu5TAiiRJBjYgtnn8Of88q7+g=)
                          2: M5rLBovi9FegD_6XfZI0UvOLj9A.roa (hash: Ncj1lwYIIUnFe3TFAOPydLTK9RtxEBu7QwiwQw7cVtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a9:15:99:ab:a0:1a:1c:48:27:7b:5b:78:6e:53:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=134010e4398dfd6e19f45b513c22c1eca33311f8
        Validity
            Not Before: May 16 12:00:47 2026 GMT
            Not After : May 17 12:00:47 2026 GMT
        Subject: CN=513c62bdb0baefa0717d0d50c9c79d65d52588fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0e:34:34:c1:20:6b:ca:b5:76:2d:8d:eb:0b:
                    96:f4:38:f2:17:5f:c6:37:ae:6d:5d:b3:cc:0b:0b:
                    b4:f2:d2:05:33:77:ee:dc:99:27:f6:9e:3a:c5:97:
                    19:ff:87:7e:ce:b3:45:33:89:41:2d:ad:b2:95:2f:
                    15:21:85:c6:fa:90:0d:ea:81:52:7b:c9:0c:db:bb:
                    15:16:72:48:67:48:fb:bb:68:18:46:b6:6e:b8:d5:
                    9d:91:1e:8d:d5:63:7b:3f:4c:11:21:71:01:55:35:
                    7b:8c:c5:08:e5:3f:e9:c0:ab:02:a1:3b:a1:99:b7:
                    7d:54:ad:40:a8:28:3a:1d:83:cb:17:20:a9:e1:a2:
                    5d:1b:49:d2:45:fe:38:da:b8:67:39:5f:d0:e8:13:
                    63:73:a6:8b:c1:41:c1:4c:c8:73:06:96:1c:b0:38:
                    63:06:1f:fa:27:78:b9:61:a8:64:38:66:46:1a:11:
                    74:80:fa:0e:43:3a:54:1f:3a:38:81:9d:a1:bf:a8:
                    65:15:77:43:d0:69:7a:d6:80:42:c6:48:26:f6:30:
                    77:b9:72:16:a3:59:c7:12:ed:ae:40:9c:4e:0e:4c:
                    8e:44:94:e1:75:df:ef:46:38:46:75:d6:57:77:0b:
                    d2:c2:ea:27:4d:f9:d7:9d:b1:c2:09:1e:b7:71:c9:
                    4e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:3C:62:BD:B0:BA:EF:A0:71:7D:0D:50:C9:C7:9D:65:D5:25:88:FE
            X509v3 Authority Key Identifier:
                keyid:13:40:10:E4:39:8D:FD:6E:19:F4:5B:51:3C:22:C1:EC:A3:33:11:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:f3:70:75:90:78:c4:25:17:e2:b7:f6:f2:ed:a4:d3:47:a0:
         c2:e2:13:26:28:2d:cc:12:ca:2a:2f:27:54:71:b7:3e:0f:74:
         c8:ea:2b:ab:b5:a9:a8:01:ce:b2:d5:56:0b:08:b4:72:a6:e0:
         9b:09:c3:de:4b:81:85:81:fa:e0:25:0d:0a:77:e8:c2:93:8a:
         cf:73:e7:0e:79:70:82:ac:1a:a9:f3:ce:29:29:ab:f0:40:a7:
         bf:17:a0:0f:93:57:0c:fc:70:ea:1c:98:72:b1:3e:11:43:5d:
         ef:4a:73:67:20:a9:9f:e3:9a:45:a8:a9:e1:34:c5:64:e2:1f:
         e3:88:83:0f:8f:6e:df:ce:df:9f:96:1e:88:1f:69:24:56:a0:
         21:fe:b3:63:41:0a:36:2b:49:27:4a:54:f0:99:a7:2b:5f:c8:
         69:cb:55:14:e4:38:50:10:a5:69:6d:06:66:6a:58:ed:ed:17:
         cc:db:3f:d6:77:b1:fb:7a:1e:14:93:96:ac:48:cc:16:48:82:
         85:14:4d:70:88:b5:fd:de:6d:fc:f3:2f:45:a2:48:fa:df:2c:
         4f:e8:30:77:66:a9:15:d8:a4:c9:0e:48:74:d5:14:11:2d:36:
         66:49:55:f3:da:fd:d1:ec:02:c3:87:a5:1f:98:13:c7:35:27:
         17:8e:c7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:26:51 2026 by rpki-client