Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
File:                     DZHf1FaDQonB_QOg_vG1Kl79HZE.mft (raw, json)
Hash identifier:          QmqvFCejlCQSDaSi+Ie1lX7aQt9JjzhrM6CgMjhxFXo=
Subject key identifier:   78:5C:B3:66:3B:AE:81:25:CA:FD:44:35:61:68:C1:B8:16:76:8F:1C
Authority key identifier: 0D:91:DF:D4:56:83:42:89:C1:FD:03:A0:FE:F1:B5:2A:5E:FD:1D:91
Certificate issuer:       /CN=0d91dfd456834289c1fd03a0fef1b52a5efd1d91
Certificate serial:       019E307251D8C81FEAC1704606DE8458F644
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
Manifest number:          1177
Signing time:             Sat 16 May 2026 11:00:58 +0000
Manifest this update:     Sat 16 May 2026 11:00:58 +0000
Manifest next update:     Sun 17 May 2026 11:00:58 +0000
Files and hashes:         1: DZHf1FaDQonB_QOg_vG1Kl79HZE.crl (hash: iZo6sqNxnT9DgPvan94vBN4kl6FunLJ4rOEaEjVgrUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:51:d8:c8:1f:ea:c1:70:46:06:de:84:58:f6:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d91dfd456834289c1fd03a0fef1b52a5efd1d91
        Validity
            Not Before: May 16 11:00:58 2026 GMT
            Not After : May 17 11:00:58 2026 GMT
        Subject: CN=785cb3663bae8125cafd44356168c1b816768f1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:04:d9:4f:4c:fd:57:77:7f:b2:bf:bb:36:6f:
                    d3:5e:8d:2c:4f:33:90:1b:f1:24:50:52:ae:e1:fa:
                    14:46:b8:26:bf:47:9b:48:2f:2a:30:9a:28:e2:32:
                    cb:38:c5:e3:36:d6:10:82:87:92:d9:f0:e7:48:2b:
                    ec:59:f8:7e:e0:99:50:d7:ac:58:61:f4:46:2b:53:
                    ec:1a:b4:c3:c7:18:3a:29:95:a7:49:cd:4e:b7:05:
                    b5:4e:35:06:27:a8:26:02:6f:fe:38:24:ef:ce:6a:
                    c6:96:58:90:6b:11:48:68:37:c2:a9:a6:a8:15:5c:
                    cd:87:54:44:28:5b:f2:70:11:25:2d:12:8f:d5:e3:
                    ac:61:ad:4d:6e:3b:64:18:f5:6a:6b:a5:69:e5:45:
                    75:2b:30:c6:4a:99:64:f6:dc:3e:74:36:51:50:01:
                    b0:b9:6e:b7:10:9c:7e:0c:ae:5e:1e:e6:ea:08:a1:
                    ae:ce:5b:a0:ba:4a:6a:8d:81:53:0f:d5:ff:84:34:
                    9c:28:5d:a8:ee:3e:4a:3d:77:cb:21:ff:c0:3e:f5:
                    4f:91:e3:29:89:c5:e7:dd:72:0f:f3:6b:d9:70:7b:
                    db:4f:a2:15:b1:37:e7:64:2d:f6:e3:43:fc:b3:b0:
                    6c:f5:4c:79:6a:06:9d:f9:90:01:11:64:45:4a:21:
                    78:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:5C:B3:66:3B:AE:81:25:CA:FD:44:35:61:68:C1:B8:16:76:8F:1C
            X509v3 Authority Key Identifier:
                keyid:0D:91:DF:D4:56:83:42:89:C1:FD:03:A0:FE:F1:B5:2A:5E:FD:1D:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:bc:08:53:a3:66:6f:e6:19:f5:c4:9a:b6:52:cc:b3:50:1b:
         26:9a:d3:8d:af:bd:90:c5:19:4d:e1:14:d9:22:b7:bf:84:fd:
         db:1c:04:ec:4d:00:3c:cd:80:30:ac:7c:14:4d:11:14:f8:27:
         10:5e:4c:8d:8a:07:1e:03:03:b8:29:67:a4:ff:c1:07:4f:7c:
         aa:59:19:0f:3b:10:35:69:19:24:f8:78:83:b0:82:b9:f5:1f:
         c1:b6:60:14:47:aa:e3:b7:8e:13:46:a2:66:87:30:6f:44:ed:
         f2:3c:68:44:a3:08:ba:70:65:66:8d:04:40:8a:32:45:d3:9b:
         52:ba:a5:21:e0:a4:d0:30:1c:76:d1:6c:66:61:0d:35:b1:e8:
         26:aa:fd:c1:a2:5c:ce:32:a7:ba:8d:c3:4e:cc:fa:2e:4e:c2:
         2c:bf:65:ab:6c:ec:22:49:47:37:f7:7d:13:52:72:83:e2:1b:
         c3:80:2d:eb:5b:a7:8b:45:85:7b:b5:80:77:bd:e2:ee:c2:7a:
         36:ce:b2:52:ae:e2:37:9a:ea:11:ed:2d:ad:1d:c1:28:4f:ac:
         16:bd:ad:34:9d:ee:dd:10:44:61:6c:ec:2f:01:6f:7c:00:99:
         12:e2:8f:00:28:bd:ff:53:5c:06:2e:38:02:23:48:68:5f:17:
         38:7d:57:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:05 2026 by rpki-client