Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
File:                     fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft (raw, json)
Hash identifier:          HZ+aV8V+B7CVveAgLRShxyaKabPFaVLOD9zOiWmO1IY=
Subject key identifier:   0D:D6:5A:2B:75:A2:9D:69:73:39:86:FA:29:92:2F:5C:7F:DF:2D:6F
Authority key identifier: 7E:4E:48:77:B4:64:E4:89:E8:E1:E6:1B:E5:7B:8B:BE:8E:50:E7:99
Certificate issuer:       /CN=7e4e4877b464e489e8e1e61be57b8bbe8e50e799
Certificate serial:       019E7CF2CC366E76AEE2A6F028575BD35FA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
Manifest number:          0B44
Signing time:             Sun 31 May 2026 07:32:27 +0000
Manifest this update:     Sun 31 May 2026 07:32:27 +0000
Manifest next update:     Mon 01 Jun 2026 07:32:27 +0000
Files and hashes:         1: E3jz9qmqTjg_zIJIvHv94CK6zsY.roa (hash: 0Lk+ZfoyEeeu5e++mGbGnXSf6tV5iYmorQKGtAl1EXE=)
                          2: GIL9uqecVqs2J_KF2ar2nbKLRYY.roa (hash: R/5DgAUg2cp6Uj0SCyngsXoMIJaoy6aqdVqAoNaJ2f8=)
                          3: fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl (hash: TCesoMWaHt74JtL7vo2RZXsTkzjPq3hpe0WSLlB7F3E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 01 Jun 2026 04:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:7c:f2:cc:36:6e:76:ae:e2:a6:f0:28:57:5b:d3:5f:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e4e4877b464e489e8e1e61be57b8bbe8e50e799
        Validity
            Not Before: May 31 07:32:27 2026 GMT
            Not After : Jun  1 07:32:27 2026 GMT
        Subject: CN=0dd65a2b75a29d69733986fa29922f5c7fdf2d6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:93:8d:22:92:92:76:82:67:3d:3d:bd:23:24:
                    fc:d2:00:79:db:04:61:30:37:0e:06:a1:23:e3:4d:
                    c9:6f:1a:bc:30:47:96:79:9f:d2:cf:eb:22:27:01:
                    f0:f1:5c:f8:04:ba:06:f1:62:8c:51:da:9c:0f:08:
                    2d:24:cc:fd:21:cb:f8:ec:0b:7f:e3:1b:5f:90:94:
                    bb:0d:4b:f3:ec:4e:88:ee:bd:22:91:90:ca:95:80:
                    49:15:c5:c1:03:3e:1e:9b:fa:36:1a:84:b5:59:40:
                    9f:44:58:13:e1:53:26:98:8d:b6:08:df:0c:4b:d6:
                    4a:2c:a3:5f:e2:70:d0:59:3d:87:10:b9:b8:95:a0:
                    28:b5:99:3a:56:6e:9c:fb:6c:59:42:3e:55:75:4a:
                    29:db:62:ef:94:e5:b3:2a:cf:7b:72:46:a2:6f:ce:
                    8a:df:04:cc:34:9d:d4:46:b8:3b:fd:c0:f1:ed:f5:
                    99:80:35:9d:d1:6c:d0:f7:fb:d4:f5:27:e6:a0:b8:
                    11:6e:e2:19:70:37:d9:7e:29:3b:ce:ab:c9:83:ae:
                    f2:2e:57:06:6f:62:77:b1:1a:72:04:fc:08:34:b7:
                    d7:d7:11:d5:12:6d:e5:f9:98:76:10:d6:c9:d2:78:
                    1a:f2:6e:9b:9c:6c:ae:e0:92:6c:a2:3d:86:16:b9:
                    1d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D6:5A:2B:75:A2:9D:69:73:39:86:FA:29:92:2F:5C:7F:DF:2D:6F
            X509v3 Authority Key Identifier:
                keyid:7E:4E:48:77:B4:64:E4:89:E8:E1:E6:1B:E5:7B:8B:BE:8E:50:E7:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:38:40:11:3a:b0:60:86:50:cb:95:e6:65:dc:bf:ff:f0:dc:
         37:f5:20:48:e6:25:3a:be:22:a7:a9:d4:0e:fb:bc:e8:b4:4e:
         d9:ef:42:90:9f:a8:00:9f:94:cd:71:d0:0e:07:ef:85:12:b2:
         27:c2:d1:d2:42:aa:58:10:40:f1:ec:88:af:82:36:fc:40:39:
         ef:bd:d1:88:e6:6e:19:9c:b9:17:a4:81:ea:6e:3d:73:59:ca:
         49:e4:ab:54:9c:d3:7d:58:f1:75:86:c1:17:7b:b3:c5:e1:b4:
         c9:eb:d9:23:c2:05:66:7f:69:6a:c7:a0:87:67:cc:3c:33:27:
         81:bc:4b:40:a2:1b:df:cc:7e:9e:e1:0e:74:be:da:be:12:4b:
         04:75:92:4a:c9:0f:86:36:cd:30:ba:7e:de:d2:01:0b:cb:cf:
         18:ad:53:bb:b2:90:39:35:04:79:71:de:0d:52:be:ed:6f:c9:
         65:d0:14:d9:bf:48:03:b3:fc:92:9b:0c:e7:c2:6e:d3:9a:e2:
         48:c3:a9:b0:98:bb:30:6f:2c:e5:2b:82:40:79:3a:a9:97:65:
         f4:9d:0b:df:e1:ce:0d:e1:af:10:4e:e9:f1:b9:6f:4f:c8:a6:
         99:71:9f:a0:8f:72:da:23:ec:b7:6d:91:9e:b7:cd:30:1d:52:
         6f:0f:67:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 10:44:51 2026 by rpki-client