Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
File:                     8z9sz1fxxI8RwU_QBUBazONtA7g.mft (raw, json)
Hash identifier:          2JJhAmCZA8F/HbdXuiJaJA/pwfAF8nbJVPgQcRCsjqs=
Subject key identifier:   DA:2F:F2:EC:E2:8E:52:54:9A:9C:43:BE:BC:F1:FF:84:AC:D1:31:45
Authority key identifier: F3:3F:6C:CF:57:F1:C4:8F:11:C1:4F:D0:05:40:5A:CC:E3:6D:03:B8
Certificate issuer:       /CN=f33f6ccf57f1c48f11c14fd005405acce36d03b8
Certificate serial:       019E30057A9FE6E9767C1E755EB91CA4D890
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
Manifest number:          190A
Signing time:             Sat 16 May 2026 09:02:05 +0000
Manifest this update:     Sat 16 May 2026 09:02:05 +0000
Manifest next update:     Sun 17 May 2026 09:02:05 +0000
Files and hashes:         1: 8z9sz1fxxI8RwU_QBUBazONtA7g.crl (hash: v3+u/MGhrRJZLcDxJ1Kk1xjDAHeod/RZ/c2kYuygjnk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:05:7a:9f:e6:e9:76:7c:1e:75:5e:b9:1c:a4:d8:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f33f6ccf57f1c48f11c14fd005405acce36d03b8
        Validity
            Not Before: May 16 09:02:05 2026 GMT
            Not After : May 17 09:02:05 2026 GMT
        Subject: CN=da2ff2ece28e52549a9c43bebcf1ff84acd13145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:82:30:52:24:65:69:68:01:4f:dc:5a:03:38:
                    e0:0b:05:b2:e6:8e:36:c5:5d:aa:4a:b6:97:a5:f5:
                    5a:f2:6d:32:1e:c9:55:93:db:b6:48:93:41:16:7c:
                    28:30:70:1e:db:28:6c:80:2c:fe:62:45:98:77:98:
                    ff:3d:61:67:bd:21:98:d7:b1:07:df:32:08:9d:dd:
                    b7:ae:ae:c1:52:63:c8:f6:2c:82:4c:cc:9e:28:2e:
                    de:99:eb:66:3f:75:82:e3:cd:4f:f3:93:7c:17:af:
                    9d:ad:47:fa:35:75:15:c5:b2:c5:b9:09:56:c5:29:
                    ef:96:16:a0:11:05:4b:f0:b6:c4:1e:5c:e9:ad:8d:
                    e9:1c:06:29:c3:d4:c1:d0:d9:13:f5:3e:7d:d6:af:
                    c0:4d:f4:72:1c:29:2a:07:fd:4b:e2:6c:07:b6:95:
                    fa:f7:6a:85:b1:9a:6e:ba:fb:25:ff:b6:da:b1:e7:
                    c7:22:25:0f:4d:a7:4a:0c:21:ea:cf:b4:1f:6c:a0:
                    f0:b6:38:9d:8b:fe:03:03:ba:d3:87:b3:c3:9e:8d:
                    9f:cd:77:cf:94:7c:5b:37:f0:67:32:ee:f3:76:ec:
                    be:7a:12:ed:8c:e7:fa:75:91:3a:76:46:21:19:e3:
                    ca:1d:43:44:ad:34:20:98:4e:53:7a:80:b7:b4:0c:
                    68:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:2F:F2:EC:E2:8E:52:54:9A:9C:43:BE:BC:F1:FF:84:AC:D1:31:45
            X509v3 Authority Key Identifier:
                keyid:F3:3F:6C:CF:57:F1:C4:8F:11:C1:4F:D0:05:40:5A:CC:E3:6D:03:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:39:6f:15:fe:78:1c:a3:bc:7e:95:10:d9:e9:0b:c6:03:c5:
         31:d5:79:6d:3c:e9:25:92:26:0e:18:a2:3b:d3:0a:e1:cb:f5:
         52:ff:81:50:cb:38:3b:cf:bd:0c:cf:a7:eb:08:c2:0a:1b:a0:
         b8:83:79:20:7e:71:2b:53:41:c7:86:ca:9e:67:58:11:0b:ad:
         4c:0d:be:b5:cb:11:f0:74:69:20:72:d7:57:b0:1c:bf:dd:97:
         d8:cc:25:53:13:e4:6e:87:e4:56:e6:f6:34:77:0a:bf:2b:46:
         dc:6c:73:da:21:75:52:5d:d2:d2:6b:fe:c9:d2:f6:af:0d:23:
         ff:58:c9:f0:e6:87:7b:62:52:c8:08:03:e0:d5:fe:6a:28:7a:
         bb:10:4f:73:ba:39:23:1a:fd:3f:0f:69:d2:7e:82:34:00:f4:
         dc:8f:f2:9a:54:f6:59:41:ca:83:10:6a:ba:10:96:0e:cc:56:
         a8:ee:64:5d:5a:77:10:75:a9:b0:da:63:24:cb:13:d0:f6:d5:
         87:64:fb:90:b6:91:4f:c9:8b:7f:77:5e:65:3f:bd:c1:e6:e3:
         e9:8e:94:2a:de:3f:2b:56:39:55:0a:e0:cf:28:aa:88:c0:7b:
         85:c8:b5:61:07:8c:14:aa:da:2a:a4:e6:e3:35:a7:1d:75:af:
         23:1d:60:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:57:34 2026 by rpki-client