Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
File:                     0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft (raw, json)
Hash identifier:          8IWIPlofhz0wutiLCmbOgs7RxYlm+5lyc2FVDQdPG9s=
Subject key identifier:   4F:C2:7D:36:DD:B1:8A:56:A8:D2:B4:CA:20:0A:87:F7:5B:3C:C7:24
Authority key identifier: D1:F5:19:64:ED:E1:2B:4C:03:67:3D:23:CD:44:C8:37:53:15:F4:5A
Certificate issuer:       /CN=d1f51964ede12b4c03673d23cd44c8375315f45a
Certificate serial:       019E303B8EE582CF765922F03183EACE313A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
Manifest number:          07FB
Signing time:             Sat 16 May 2026 10:01:10 +0000
Manifest this update:     Sat 16 May 2026 10:01:10 +0000
Manifest next update:     Sun 17 May 2026 10:01:10 +0000
Files and hashes:         1: 0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl (hash: iLRX2J174PS6MzeMexALlaXzFUBD3koYofUeFY6Gk0M=)
                          2: 52vGIgF_J_Asx19FSu6STOs_QMg.roa (hash: xY9pMIRGzl+uM1dvYOEuT8LCPUA3npSztO/OviUhhIM=)
                          3: IzcYqEKfKuwNhHLJur3EDi9lWaw.roa (hash: sjPuefHqm4cFePa12ziRIiRgNdagNnui52rpNQ+dDiU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:8e:e5:82:cf:76:59:22:f0:31:83:ea:ce:31:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f51964ede12b4c03673d23cd44c8375315f45a
        Validity
            Not Before: May 16 10:01:10 2026 GMT
            Not After : May 17 10:01:10 2026 GMT
        Subject: CN=4fc27d36ddb18a56a8d2b4ca200a87f75b3cc724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:aa:4e:7b:db:fc:86:56:52:a0:10:e3:16:69:
                    32:c4:af:ae:5e:09:08:a9:38:b3:9d:5c:13:76:45:
                    ff:45:f5:c9:d2:fe:8d:c7:b5:9e:39:cc:72:ac:87:
                    f0:c0:97:98:5c:e7:86:72:b7:7f:f8:7c:7d:74:c4:
                    c3:a8:06:c6:01:54:a1:79:79:db:ee:b0:7b:19:c2:
                    2b:ec:2f:6e:b5:b4:9b:e0:60:49:7f:ac:af:2c:b2:
                    e2:70:ae:0f:18:dc:c7:2d:27:d8:2d:c4:88:c3:25:
                    41:20:32:cf:ed:2c:c3:ab:49:e2:02:08:80:9c:a3:
                    3f:69:71:f9:56:b8:49:3a:6e:07:e0:7f:d6:85:63:
                    a5:6e:0a:b4:23:57:be:08:2d:91:d1:c1:79:33:18:
                    54:56:ca:dc:aa:02:87:13:24:5f:9b:84:90:85:1e:
                    1f:df:63:bd:ea:3c:e6:0e:4b:a5:89:4a:de:95:23:
                    f7:75:b1:97:4e:58:53:f4:75:3f:00:4a:00:d0:f2:
                    a2:ad:98:2a:88:5a:7f:c2:14:7d:fd:42:5c:c7:ee:
                    21:8d:ff:14:ff:08:f4:09:bc:f6:bd:27:ac:73:05:
                    e3:f5:71:44:68:d7:8f:a3:ec:9b:4e:2c:8d:74:02:
                    13:c8:23:1f:88:90:f1:cb:be:36:61:44:4d:db:83:
                    31:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C2:7D:36:DD:B1:8A:56:A8:D2:B4:CA:20:0A:87:F7:5B:3C:C7:24
            X509v3 Authority Key Identifier:
                keyid:D1:F5:19:64:ED:E1:2B:4C:03:67:3D:23:CD:44:C8:37:53:15:F4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:cf:81:b4:93:ab:e6:8c:bc:11:20:7d:eb:a3:27:bc:9d:b7:
         d8:31:3e:f8:45:34:62:58:ba:62:da:7c:10:2f:0a:b9:23:bd:
         57:36:1a:83:41:6f:eb:5b:4e:56:c4:7c:61:fe:2f:64:14:4d:
         97:20:b6:38:8e:b2:3d:df:b8:e1:5f:b3:91:3f:d2:82:9c:b5:
         ab:c1:fe:88:20:08:8a:f0:37:27:51:88:fe:de:ad:51:93:d0:
         27:57:97:aa:1f:09:fe:e3:50:e8:74:e2:d4:e0:74:63:b5:81:
         80:c5:76:56:5e:ae:9a:a0:4b:0a:ad:09:50:82:83:f8:c8:eb:
         b3:8f:be:62:45:8e:4c:81:42:8d:71:26:f1:65:2b:f0:68:9f:
         8e:29:58:bf:23:90:04:e4:52:b6:8f:92:f6:11:96:39:3d:83:
         0d:7e:e5:ac:8c:c4:4c:78:cb:ef:11:82:21:5a:03:32:bd:62:
         2f:ca:cf:5c:cd:50:88:1a:37:c2:1b:d5:a5:c3:07:3d:0a:85:
         80:7c:89:e4:9d:e0:eb:97:91:94:84:d6:7e:51:42:04:24:00:
         61:86:c8:9f:aa:70:50:ca:82:72:2c:d6:9a:7f:38:8c:60:9d:
         39:86:28:3d:47:17:a0:be:a3:40:a8:70:3a:e5:05:95:73:b3:
         22:98:59:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:52 2026 by rpki-client