Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
File:                     1-q6U9bfurTpdhIMHiAmi7_ooOA.mft (raw, json)
Hash identifier:          8O16R+FRXkf33GvtsrlgMykXCIi/tdH0GZSbB2mrYkM=
Subject key identifier:   BD:7D:1B:49:A2:F0:97:5B:4F:50:33:22:70:E0:93:4D:6D:07:4B:07
Authority key identifier: D7:EA:BA:53:D6:DF:BA:B4:E9:76:12:0C:1E:20:26:8B:BF:E8:A0:E0
Certificate issuer:       /CN=d7eaba53d6dfbab4e976120c1e20268bbfe8a0e0
Certificate serial:       019E314E5E87119C4DDADA028BFE42EC1F3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
Manifest number:          164E
Signing time:             Sat 16 May 2026 15:01:19 +0000
Manifest this update:     Sat 16 May 2026 15:01:19 +0000
Manifest next update:     Sun 17 May 2026 15:01:19 +0000
Files and hashes:         1: 1-q6U9bfurTpdhIMHiAmi7_ooOA.crl (hash: iCZgXWJJS34hqghbT+hpBfDMQ5AELFiaoPL9cN6L5YU=)
                          2: GgOMAQruAzmkXd3YxcVIPj0Q92A.roa (hash: aiEiFcDwOGmCZNV/ayFmXDTOeDIePLYyLtQ16GSKhHE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4e:5e:87:11:9c:4d:da:da:02:8b:fe:42:ec:1f:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7eaba53d6dfbab4e976120c1e20268bbfe8a0e0
        Validity
            Not Before: May 16 15:01:19 2026 GMT
            Not After : May 17 15:01:19 2026 GMT
        Subject: CN=bd7d1b49a2f0975b4f50332270e0934d6d074b07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:79:8a:0a:05:f0:3d:b1:aa:6d:f2:2a:2d:75:
                    cd:a7:f4:24:bf:14:59:49:d0:ba:68:5b:46:f6:94:
                    8f:a1:f5:94:20:48:c2:31:39:b8:23:ec:ae:8d:0f:
                    d5:60:80:a2:89:28:1b:85:4d:c7:54:3a:5b:ad:32:
                    a3:28:6f:1b:19:a5:cc:f5:e6:a1:8c:d7:43:84:bf:
                    ba:a8:a8:92:a6:b8:6b:aa:44:d0:4c:8d:e4:54:8a:
                    0e:e5:ba:35:6e:2e:32:06:3b:8f:11:3b:67:17:a7:
                    e3:14:1c:2d:e0:a9:bd:58:eb:b2:b6:c6:57:d2:bc:
                    85:61:11:0a:f6:dd:62:06:49:cc:a5:56:d2:40:ed:
                    0b:fe:4e:10:b6:32:64:75:a2:c2:11:27:43:ca:23:
                    1f:36:2d:c7:c1:97:61:2a:58:8a:f7:51:4e:c3:77:
                    88:d9:21:92:35:b1:2c:16:14:cd:75:98:b0:87:d9:
                    4d:a2:55:93:f3:a3:1b:e5:67:2f:c6:ca:20:96:d6:
                    dd:4a:e4:10:eb:e4:dd:e4:8f:76:03:df:42:bb:7a:
                    f0:8a:3c:68:73:43:5b:86:76:86:46:3b:b3:cb:3d:
                    6b:15:56:75:a8:a9:89:cf:cb:51:39:2c:60:8f:21:
                    50:51:35:7e:be:60:9f:d1:18:1b:7f:8a:08:55:5d:
                    5d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:7D:1B:49:A2:F0:97:5B:4F:50:33:22:70:E0:93:4D:6D:07:4B:07
            X509v3 Authority Key Identifier:
                keyid:D7:EA:BA:53:D6:DF:BA:B4:E9:76:12:0C:1E:20:26:8B:BF:E8:A0:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:05:ef:c5:6a:d7:a4:dd:f4:ee:a6:00:81:b1:47:ae:e4:54:
         a7:53:92:33:8e:3f:0e:6f:5c:9f:cc:29:32:5f:36:da:3a:58:
         c2:25:f2:97:29:e3:27:d7:8d:30:0f:ab:12:77:4f:26:9c:0d:
         e0:ef:c0:f5:6c:82:0f:8e:01:e0:a6:ec:0e:0c:15:5a:8e:6c:
         ad:49:1e:cc:3c:c6:1c:7c:2a:97:e6:63:53:07:63:f4:66:6b:
         c7:25:29:75:f2:88:ff:55:1e:b2:b9:de:8e:e9:eb:31:4e:2c:
         43:2c:22:e6:66:78:4b:0f:ab:8d:96:c5:bb:15:cd:f9:7e:23:
         8f:f0:74:78:f6:ea:cc:9f:e6:89:a5:de:7b:81:eb:61:f0:aa:
         e3:97:9c:26:a8:ee:ac:64:92:c4:df:05:99:43:ca:91:95:78:
         74:63:63:5a:88:50:de:94:3d:e7:5d:52:10:00:20:75:d9:8d:
         96:f0:5d:ef:62:a5:5e:97:00:82:de:9b:42:4d:0f:53:b3:5a:
         19:79:de:5a:e1:c6:01:78:3e:b0:fe:40:d8:7b:71:4e:fd:e8:
         d7:30:9b:d0:79:cf:7d:15:7b:50:4b:81:18:fd:dc:12:61:eb:
         96:12:d3:92:14:fd:6d:09:fe:59:ad:62:c6:0c:61:65:04:49:
         da:f0:77:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:55:10 2026 by rpki-client