Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.mft
File:                     DvFUKKS1vl5z59IoK1HIGa6jj5s.mft (raw, json)
Hash identifier:          DgvZswsayH3aWvk+Hsx8I3Hp6V/xrkvNfSmc4Ml5hS4=
Subject key identifier:   C7:C7:D5:0A:10:C7:F4:6B:2F:71:08:66:27:86:B8:65:3A:BD:B7:A7
Authority key identifier: 0E:F1:54:28:A4:B5:BE:5E:73:E7:D2:28:2B:51:C8:19:AE:A3:8F:9B
Certificate issuer:       /CN=0ef15428a4b5be5e73e7d2282b51c819aea38f9b
Certificate serial:       019E303BB8C6A5CFAA568A2447D5C1FE3206
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DvFUKKS1vl5z59IoK1HIGa6jj5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.mft
Manifest number:          130A
Signing time:             Sat 16 May 2026 10:01:20 +0000
Manifest this update:     Sat 16 May 2026 10:01:20 +0000
Manifest next update:     Sun 17 May 2026 10:01:20 +0000
Files and hashes:         1: DvFUKKS1vl5z59IoK1HIGa6jj5s.crl (hash: g+6uudO2aykSuNCJjOLcP7jLk7N4LI5mYSpHU80FZFs=)
                          2: N-AM4196SXnGQPm10SOwk3Kk_fQ.roa (hash: +8w6gH3OBa7d0A6n/57m2bB3Ovd8KSYObWMM+h3ENfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DvFUKKS1vl5z59IoK1HIGa6jj5s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 10:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:b8:c6:a5:cf:aa:56:8a:24:47:d5:c1:fe:32:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ef15428a4b5be5e73e7d2282b51c819aea38f9b
        Validity
            Not Before: May 16 10:01:20 2026 GMT
            Not After : May 17 10:01:20 2026 GMT
        Subject: CN=c7c7d50a10c7f46b2f7108662786b8653abdb7a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5e:c8:bb:2c:ff:4e:3f:16:6c:56:97:94:d1:
                    38:5e:aa:c2:e2:0f:a9:ab:08:62:51:64:13:f5:b5:
                    e9:08:31:9e:53:b6:35:43:39:58:58:ba:59:90:57:
                    cb:8e:39:3d:66:53:50:22:f4:82:6e:9a:61:2e:fd:
                    06:83:31:87:18:bc:8c:34:7e:53:d7:03:3d:aa:59:
                    84:e8:7b:dd:df:6c:52:06:23:dd:05:a3:f7:3f:64:
                    e5:5e:05:13:58:a2:cb:96:29:af:ee:86:2e:85:82:
                    16:f7:65:ca:1e:77:be:6f:48:3c:32:fd:c4:e5:c4:
                    0d:4c:30:06:44:69:b8:0d:ee:b4:85:99:72:17:89:
                    72:67:86:d6:66:c8:9f:7a:c0:77:3c:16:53:fb:a6:
                    c2:cb:ef:e5:2c:d3:de:a4:c9:94:b2:cf:67:5a:04:
                    f4:9e:ed:40:fa:85:d8:eb:6c:76:39:43:e6:5c:1d:
                    7b:c2:ea:f5:eb:f9:f0:92:05:d4:f1:30:3e:8e:4c:
                    57:70:9a:5b:ec:fd:66:7d:6e:c6:14:32:6d:5f:61:
                    0b:67:5e:67:bf:23:55:8e:4a:8b:45:09:6b:e8:6a:
                    57:9c:2a:6c:1e:a6:dc:f7:46:e1:de:3a:e4:bd:fb:
                    01:e1:e1:7a:e0:93:0b:be:41:b4:fe:4a:d8:df:9f:
                    ef:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C7:D5:0A:10:C7:F4:6B:2F:71:08:66:27:86:B8:65:3A:BD:B7:A7
            X509v3 Authority Key Identifier:
                keyid:0E:F1:54:28:A4:B5:BE:5E:73:E7:D2:28:2B:51:C8:19:AE:A3:8F:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvFUKKS1vl5z59IoK1HIGa6jj5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:09:73:5c:67:1b:3c:ac:18:3e:d0:47:92:f2:5b:7f:a0:6b:
         31:3c:7d:79:f9:ac:7b:3a:a4:25:4a:36:fb:a9:f5:24:28:59:
         71:5e:c8:ae:be:dc:26:eb:82:e6:22:5b:83:11:fa:26:3e:d7:
         cb:04:61:f5:c9:1e:cc:3c:df:61:fa:2c:34:09:9c:dc:f0:7c:
         17:e2:b6:4e:06:9b:91:dd:ee:7d:98:2f:ef:1a:65:07:f7:dd:
         c2:76:78:b7:74:69:68:2d:76:6c:91:23:69:bd:dd:8b:dc:ff:
         4c:7f:31:b2:22:55:f1:17:44:04:88:39:b5:1e:de:b9:e8:07:
         23:ff:05:df:ec:e3:09:68:ca:c6:03:06:2c:f6:61:1a:c6:a8:
         88:45:70:39:4f:06:c8:45:c8:3e:b6:4b:eb:a9:63:8a:cb:80:
         85:e5:5f:e8:c8:5a:62:a0:d0:5d:c0:2b:15:ad:0f:a9:27:a2:
         5c:dd:58:0d:ad:cc:de:85:24:fb:d5:1b:9f:00:bf:9e:ef:88:
         8b:77:9a:0e:bd:3f:f7:df:22:8d:01:2c:3f:17:b6:a9:76:ae:
         8a:16:ba:20:ad:a3:7c:53:2f:01:ad:58:36:9a:f3:e8:0d:96:
         45:3d:38:0a:dd:66:33:3a:2c:a3:e5:34:59:53:56:16:77:84:
         9f:da:3c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:32:44 2026 by rpki-client