Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
File:                     1cZc2ktjD3K_ZA0WtB9y9aD511E.mft (raw, json)
Hash identifier:          /geCLI3hrFIJh7ZJWzeJpjiJJpMP3DFVfdw0G0a1oFI=
Subject key identifier:   09:4C:C6:DD:7A:26:71:71:E0:4D:5A:78:02:6B:F4:4E:CB:91:68:6C
Authority key identifier: D5:C6:5C:DA:4B:63:0F:72:BF:64:0D:16:B4:1F:72:F5:A0:F9:D7:51
Certificate issuer:       /CN=d5c65cda4b630f72bf640d16b41f72f5a0f9d751
Certificate serial:       019E2F60181C8399394658BF664A45B5F9D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
Manifest number:          110A
Signing time:             Sat 16 May 2026 06:01:27 +0000
Manifest this update:     Sat 16 May 2026 06:01:27 +0000
Manifest next update:     Sun 17 May 2026 06:01:27 +0000
Files and hashes:         1: 1cZc2ktjD3K_ZA0WtB9y9aD511E.crl (hash: XELC0DjPaBb7jUF3dfq1CSbSM+ZTV6bGGfgA0bm0pYs=)
                          2: pNlley5H_9TvcEcVei0jRvY3Yrg.roa (hash: QEIb7mVWibyhq5IzgmoR4hHBvXp2za6yX/i3UZRSIgk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:60:18:1c:83:99:39:46:58:bf:66:4a:45:b5:f9:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c65cda4b630f72bf640d16b41f72f5a0f9d751
        Validity
            Not Before: May 16 06:01:27 2026 GMT
            Not After : May 17 06:01:27 2026 GMT
        Subject: CN=094cc6dd7a267171e04d5a78026bf44ecb91686c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:45:aa:27:2a:1e:aa:5d:71:65:93:05:61:f1:
                    48:98:2d:31:b1:d8:f0:4c:e1:f0:5f:75:d4:db:dd:
                    d2:dc:c5:97:cd:e4:a6:9a:ec:a7:97:cd:c8:86:36:
                    3e:f0:eb:0e:ce:ef:7d:a7:a4:d4:c0:79:30:7b:64:
                    0d:12:11:bf:43:58:20:22:a5:fd:48:88:3e:ac:76:
                    19:6e:90:23:c7:54:52:d4:3f:a7:87:0e:e6:ae:9f:
                    ea:ac:3c:56:a2:18:98:81:28:02:f2:34:7d:d1:0c:
                    8d:ea:3b:04:d6:51:db:43:8e:75:8e:aa:41:0f:31:
                    69:de:77:2b:89:d1:3d:6f:e6:87:be:e7:7a:71:9f:
                    02:21:ac:d4:47:7e:ea:0a:fe:3e:af:82:47:4c:4d:
                    e3:08:0a:d7:5a:f1:3e:79:5e:b0:f0:92:2f:d0:24:
                    60:bb:29:b3:a0:9b:ec:c9:cd:d0:c5:62:31:1d:6c:
                    71:4d:37:d4:2b:b9:2e:62:1b:6a:94:c5:c7:ab:45:
                    19:6e:57:d2:52:cd:08:53:a1:b0:54:2a:35:4c:8f:
                    55:32:5b:b5:06:05:87:00:d7:53:a7:98:8e:6b:92:
                    93:4e:fb:5d:9d:e1:fc:68:7b:e3:c0:20:45:17:78:
                    6f:1f:d3:2a:2d:6c:eb:81:b3:ab:9b:03:11:79:c5:
                    d2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:4C:C6:DD:7A:26:71:71:E0:4D:5A:78:02:6B:F4:4E:CB:91:68:6C
            X509v3 Authority Key Identifier:
                keyid:D5:C6:5C:DA:4B:63:0F:72:BF:64:0D:16:B4:1F:72:F5:A0:F9:D7:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:e9:87:35:74:4a:d6:bb:10:a5:a3:df:b9:fd:a7:47:c2:15:
         9e:75:41:41:0b:89:62:e9:12:8b:21:fc:1a:9b:f2:14:e3:f5:
         8c:0a:6e:8c:da:e1:99:20:5a:fe:0e:69:c2:32:1e:a9:de:8d:
         ca:a9:66:27:b4:92:80:8c:6c:36:fa:bf:1e:45:18:9b:1c:dd:
         4e:17:f8:c6:16:a7:c6:26:06:5c:1b:b2:63:ae:cb:1d:22:d1:
         02:7c:df:e0:3e:c3:37:2b:05:57:46:07:7d:cf:bf:67:d7:07:
         60:82:69:4a:40:0f:40:53:2a:0d:f4:3e:c8:65:03:8a:2e:10:
         be:47:71:f0:e2:87:16:59:37:e8:c3:29:15:34:42:75:3c:b2:
         95:65:94:22:cd:2e:78:48:f5:04:2b:b6:3f:60:9b:37:bb:97:
         51:e2:5d:64:d1:60:03:10:15:4e:12:a4:c0:21:93:fe:d7:44:
         d7:f5:15:b6:8e:f5:00:7b:d9:48:8c:01:b3:06:81:ca:b2:96:
         b4:aa:0a:7e:39:51:56:de:33:97:22:b9:d8:41:7c:d0:6e:a5:
         df:fa:d8:49:5e:56:4b:6c:88:9f:b4:1a:77:a1:7c:12:6f:29:
         24:2b:7b:ed:04:fa:41:b5:f8:05:1a:a6:8e:45:29:6c:c6:6a:
         2e:7a:d9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:45 2026 by rpki-client