Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
File:                     AkHvRDYUJQbyZZODwW69oeKbT4Y.mft (raw, json)
Hash identifier:          UPCtlIo8YuItIG9lVWU3oMSumMIpubFmZOh3R2aUo7E=
Subject key identifier:   BE:40:BF:15:9F:26:E7:0C:CF:F7:09:65:D9:3F:07:CD:0C:54:3D:98
Authority key identifier: 02:41:EF:44:36:14:25:06:F2:65:93:83:C1:6E:BD:A1:E2:9B:4F:86
Certificate issuer:       /CN=0241ef4436142506f2659383c16ebda1e29b4f86
Certificate serial:       019E31BBB357E70F52794697DB74448BB08E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
Manifest number:          11D3
Signing time:             Sat 16 May 2026 17:00:45 +0000
Manifest this update:     Sat 16 May 2026 17:00:45 +0000
Manifest next update:     Sun 17 May 2026 17:00:45 +0000
Files and hashes:         1: AkHvRDYUJQbyZZODwW69oeKbT4Y.crl (hash: +XbeXWE6bmU4E40DtjeEhhflG6Ay/8eLn/cS7PZlwkk=)
                          2: mIZXI4mZrRbzXPh4YmTsjubQ1Zc.roa (hash: bzN5/dHvXtXSM/Oh2+pMoFqPyzgsKGPGMLfbcUvulmk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:bb:b3:57:e7:0f:52:79:46:97:db:74:44:8b:b0:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0241ef4436142506f2659383c16ebda1e29b4f86
        Validity
            Not Before: May 16 17:00:45 2026 GMT
            Not After : May 17 17:00:45 2026 GMT
        Subject: CN=be40bf159f26e70ccff70965d93f07cd0c543d98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:17:53:a5:b5:16:96:6d:4d:ac:d5:0c:94:e4:
                    87:15:31:8a:e9:20:1d:9b:bb:52:94:70:24:24:a6:
                    a6:07:c4:a0:4e:15:08:2f:71:e6:15:4d:c8:4a:f2:
                    7b:18:8d:b2:20:ca:d3:88:89:3a:d5:8c:84:04:35:
                    15:09:5e:cd:00:80:93:8d:a9:9a:4f:10:9b:ce:a0:
                    9e:3b:7e:a5:17:98:be:f2:1f:42:99:90:a2:a1:83:
                    3c:1d:0b:17:6d:5d:79:d1:77:65:3f:0c:31:f3:1c:
                    f5:e2:ae:88:d7:8b:4f:7e:ff:70:11:d1:39:e8:d3:
                    2e:af:6a:72:64:33:6e:c4:d1:e8:b3:e8:22:11:c6:
                    d7:01:83:c5:97:50:c0:fe:14:4e:7f:7d:ee:46:65:
                    7e:0b:a2:66:cb:3a:fc:b4:ac:08:1e:e1:ee:1c:89:
                    e4:fa:81:fb:f8:e1:37:5f:7e:4b:f3:d9:e3:82:0c:
                    7d:e3:7d:11:fe:b6:05:3f:fc:5a:78:be:5b:88:9c:
                    9d:ee:8f:f2:5d:4f:5b:6e:ba:68:df:58:23:3d:0b:
                    72:2f:db:71:c5:3e:9a:f3:84:29:a1:89:8e:ef:ee:
                    3c:7c:8d:13:86:b5:a7:73:5b:29:9e:1a:14:5a:f8:
                    7f:56:48:17:94:7b:e1:76:9b:99:8c:b9:15:3b:25:
                    94:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:40:BF:15:9F:26:E7:0C:CF:F7:09:65:D9:3F:07:CD:0C:54:3D:98
            X509v3 Authority Key Identifier:
                keyid:02:41:EF:44:36:14:25:06:F2:65:93:83:C1:6E:BD:A1:E2:9B:4F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:5b:a3:46:aa:91:fd:b0:e9:5f:5a:4b:09:52:42:a1:19:56:
         78:89:92:1d:d3:c2:43:81:b7:7e:56:3b:49:4d:4a:2c:51:21:
         9e:27:08:77:0a:22:4d:c4:d3:cb:f6:62:c7:36:ab:c7:e7:12:
         61:7b:b3:27:e1:a2:8f:75:20:2c:02:e0:31:7a:2d:71:90:14:
         94:bd:d1:a4:45:e7:62:30:42:6e:ff:99:95:36:6a:78:1a:06:
         45:34:de:64:0d:27:09:a7:85:0a:67:33:d3:fe:4d:64:38:2c:
         c7:5e:6f:13:bc:f8:03:12:6b:07:15:c8:4c:09:d7:04:5a:af:
         dc:f1:e1:af:e8:0b:4f:91:ef:f6:fa:04:5d:19:5c:ef:1b:5e:
         aa:01:5a:4b:d9:88:99:96:c2:e1:d1:2c:4f:57:c4:8e:f3:a6:
         3c:bb:58:67:f3:79:b7:25:8b:93:9c:a8:7c:42:36:1e:3d:7d:
         2b:64:99:21:19:86:03:5b:8d:2f:5a:b7:f1:a3:96:9b:6d:2e:
         7a:0b:aa:d7:2e:35:6f:c8:06:f1:bd:e1:2e:02:b7:8a:f4:80:
         e5:ef:d5:df:f3:b3:b3:30:d4:96:51:56:92:a9:11:82:6d:99:
         93:1b:e0:56:a5:41:05:e1:bc:d7:9a:28:7b:47:e5:70:45:1b:
         4f:13:e4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:31:46 2026 by rpki-client