Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
File:                     CiINqbbilYVbYn_qYQ4cthZGiUs.mft (raw, json)
Hash identifier:          w1jCojw9qLs14aIl6JQ85o49nA26weauqaAdPtZvpMQ=
Subject key identifier:   3C:26:56:C1:33:AF:50:A3:4C:84:7C:D0:32:69:9E:E9:C0:37:DD:4B
Authority key identifier: 0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B
Certificate issuer:       /CN=0a220da9b6e295855b627fea610e1cb61646894b
Certificate serial:       019E31178740B63781C4F86328B3A267DD2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
Manifest number:          1490
Signing time:             Sat 16 May 2026 14:01:25 +0000
Manifest this update:     Sat 16 May 2026 14:01:25 +0000
Manifest next update:     Sun 17 May 2026 14:01:25 +0000
Files and hashes:         1: CiINqbbilYVbYn_qYQ4cthZGiUs.crl (hash: F/Na+yaPdLk7sLmOkqVPVxJJDCJe04smB7gpiSuC1RM=)
                          2: rXLqqCZ5hf5h4ak7-J87ANzm0Nk.roa (hash: mVE+xG0sJPMu7e4f75e+8AtJaA+JDEMEjzG8yFMRLQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:87:40:b6:37:81:c4:f8:63:28:b3:a2:67:dd:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a220da9b6e295855b627fea610e1cb61646894b
        Validity
            Not Before: May 16 14:01:25 2026 GMT
            Not After : May 17 14:01:25 2026 GMT
        Subject: CN=3c2656c133af50a34c847cd032699ee9c037dd4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:69:78:7e:bb:20:42:02:3d:94:e0:1b:ab:8f:
                    46:9f:66:12:73:cf:2d:1f:fe:ab:4a:f3:27:d1:b5:
                    fc:6f:9e:85:5a:5b:17:51:54:b7:26:3b:4e:e3:f1:
                    03:27:3c:58:57:ae:82:1f:00:21:10:9d:bc:34:b3:
                    7c:d3:13:28:9c:e6:ed:20:e9:0a:bf:dd:40:48:04:
                    3e:d3:4d:1a:4d:ed:bf:95:a9:d7:a1:e5:8c:aa:8c:
                    57:46:12:99:4b:a4:5c:66:89:ef:24:46:e5:19:06:
                    5c:1d:e0:37:b3:e5:14:bd:29:ea:20:13:3c:3f:b5:
                    46:cd:5e:b4:61:a3:ed:79:4b:2b:08:94:ab:cc:d8:
                    5d:74:ae:4d:95:4d:f1:28:49:d0:df:5d:25:c1:07:
                    4f:ac:31:af:22:ca:49:41:79:1b:ef:f5:dc:53:3b:
                    b9:98:cb:b9:ab:76:39:30:e2:c3:17:ff:a4:13:3e:
                    b2:3b:da:13:4a:b9:f5:7b:72:fd:72:8e:86:b5:a0:
                    47:0a:9e:08:64:de:1a:95:09:f5:bc:3a:b7:5b:74:
                    15:66:22:88:4c:40:ab:c8:75:00:51:18:53:b3:34:
                    b9:46:ef:e5:76:fc:ac:11:f4:ac:28:18:09:09:99:
                    c2:8b:78:62:76:d6:37:db:c3:36:47:4a:34:5e:84:
                    fb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:26:56:C1:33:AF:50:A3:4C:84:7C:D0:32:69:9E:E9:C0:37:DD:4B
            X509v3 Authority Key Identifier:
                keyid:0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:22:07:f9:bf:3f:66:67:9c:10:05:21:03:d6:22:48:1d:1b:
         ba:45:47:6f:18:19:85:a5:7e:60:b3:00:46:1a:e9:b2:59:ac:
         ce:a2:3c:56:71:8c:bf:d3:11:5a:0e:67:b7:39:91:18:8a:2d:
         96:65:1f:94:2b:97:62:03:39:32:ed:4e:2d:7c:25:b6:3a:bd:
         87:cc:f1:87:36:72:74:4e:18:72:58:9d:c0:7c:f3:03:7d:20:
         1e:6f:ed:36:30:9f:40:5b:98:fa:0c:46:e1:28:e2:fa:1e:47:
         d8:58:cd:9b:9a:e8:e8:01:1b:1b:53:b1:47:78:fc:78:a1:1b:
         57:53:68:26:19:04:1b:ef:0b:12:75:18:bc:c9:05:19:e4:77:
         e9:1d:01:88:94:9b:f6:2d:8d:55:b8:aa:7f:8b:f9:da:ca:4f:
         ae:cf:87:69:66:50:cf:ca:18:07:50:b7:7c:94:5b:e3:14:6a:
         b8:f4:60:35:3e:58:15:91:74:f3:f6:04:5e:73:bb:a0:d7:9c:
         f2:c6:94:4c:cd:35:f1:34:2f:69:e3:87:8c:b6:45:ab:33:41:
         85:c6:32:0d:42:95:4d:a9:c7:79:88:56:46:44:dd:69:be:1d:
         f6:8d:b0:9f:e3:57:6d:2a:40:1c:da:ba:62:78:7a:eb:0c:a8:
         4a:a5:35:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:14:33 2026 by rpki-client