Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
File:                     FwSlHYT7ptD-IYrtypWolNzOHNc.mft (raw, json)
Hash identifier:          R6WuhBoUbGSm2ua0K/4uzm9H13nf8Fm/P8I7e4u2iw0=
Subject key identifier:   8E:40:59:FC:98:91:D1:B8:62:84:C0:BB:44:67:28:2A:6B:26:A0:44
Authority key identifier: 17:04:A5:1D:84:FB:A6:D0:FE:21:8A:ED:CA:95:A8:94:DC:CE:1C:D7
Certificate issuer:       /CN=1704a51d84fba6d0fe218aedca95a894dcce1cd7
Certificate serial:       019E51B54F219344E275ED8BE57CE0FB693E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
Manifest number:          16C5
Signing time:             Fri 22 May 2026 22:01:37 +0000
Manifest this update:     Fri 22 May 2026 22:01:37 +0000
Manifest next update:     Sat 23 May 2026 22:01:37 +0000
Files and hashes:         1: FwSlHYT7ptD-IYrtypWolNzOHNc.crl (hash: qY/43P3OwLKpE4cRbYGpADmnrPn9hkFyfPWOkXqZPnQ=)
                          2: PAWQJ--pyQDWqisMk27pgjU-VTo.roa (hash: LFkt5XtALwLDqGdtvqPz4gaQ669NVQcvwDZAzQf4rZY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 May 2026 21:53:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:51:b5:4f:21:93:44:e2:75:ed:8b:e5:7c:e0:fb:69:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1704a51d84fba6d0fe218aedca95a894dcce1cd7
        Validity
            Not Before: May 22 22:01:37 2026 GMT
            Not After : May 23 22:01:37 2026 GMT
        Subject: CN=8e4059fc9891d1b86284c0bb4467282a6b26a044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9a:37:71:36:5b:55:c8:24:4c:d0:32:b6:f1:
                    21:68:bc:1f:02:2e:a0:5b:09:0d:35:88:d7:60:27:
                    cd:fd:3f:87:86:f3:93:33:7b:b5:38:ff:4d:28:1a:
                    71:96:e8:29:20:25:1f:54:7e:a7:9e:27:e8:09:50:
                    74:44:9a:7e:66:9d:d9:07:6b:47:5d:42:89:93:9e:
                    84:ec:86:ec:69:c4:e0:99:84:07:4a:3d:40:64:92:
                    53:21:5c:7e:c1:2f:94:64:48:66:76:c7:06:0a:40:
                    5b:37:45:95:76:b8:e0:43:94:77:a6:3a:aa:02:0d:
                    ba:fe:4b:09:24:d6:2a:7a:30:c3:5f:c3:39:0f:77:
                    35:da:8d:92:51:82:c0:c7:8a:87:d7:4e:de:63:35:
                    2e:53:74:b2:c3:fc:f8:8a:c0:fd:24:63:ab:62:51:
                    49:b3:d9:40:f6:8f:59:85:5a:44:bf:f0:34:c2:3f:
                    06:41:26:af:b7:b8:51:4a:55:b8:25:cf:60:19:34:
                    5c:f9:eb:4b:27:57:ff:fc:ed:18:85:f9:93:2a:c4:
                    35:75:b8:bf:a2:fa:15:06:56:5c:90:49:2f:21:31:
                    15:56:35:7c:5a:48:4f:60:62:2b:33:39:ea:7e:48:
                    68:97:67:5f:af:90:32:31:da:c2:cc:d4:e5:32:17:
                    85:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:40:59:FC:98:91:D1:B8:62:84:C0:BB:44:67:28:2A:6B:26:A0:44
            X509v3 Authority Key Identifier:
                keyid:17:04:A5:1D:84:FB:A6:D0:FE:21:8A:ED:CA:95:A8:94:DC:CE:1C:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:2e:d5:57:8b:e0:1a:bc:2f:d8:19:e3:e4:2c:00:3d:4f:77:
         6f:7d:2a:8e:ad:aa:ad:b3:7f:d3:3d:11:0f:c4:9f:fb:04:47:
         bb:1c:0c:35:f3:33:1b:ea:c0:4b:58:cc:86:b7:e5:b3:39:a8:
         70:ee:ba:c1:c5:82:71:44:fa:2b:95:7b:2c:18:6c:74:5e:25:
         e7:d6:84:30:86:9a:be:f0:dd:b2:d6:39:ce:52:49:3d:ec:8d:
         c2:4d:cd:20:73:fa:c3:32:2c:73:5d:97:8d:47:37:5f:d3:a4:
         4c:65:15:7f:21:c3:65:af:41:c3:1a:fb:3b:46:68:61:30:d4:
         f2:2b:c5:d1:90:d8:4f:ca:95:73:51:80:bc:82:f4:d2:8c:cf:
         8a:99:7c:40:19:b1:04:96:e4:81:e0:6a:e7:da:68:85:d9:ba:
         b7:b4:94:85:cf:bb:fa:57:ae:b4:38:21:4e:73:d4:cd:6a:7d:
         69:96:d7:d7:b1:41:b3:87:5e:04:1e:0d:9d:e3:a0:b5:eb:43:
         f7:c1:e3:57:6f:66:58:71:b3:4d:b9:4e:f0:fe:ee:7d:13:d8:
         45:b2:b0:f3:43:c2:06:ba:5e:a0:b5:0f:9c:d5:c2:89:d7:cf:
         be:e7:5f:6e:a3:c6:ea:bd:bf:c8:53:6c:aa:0c:5f:17:fc:ed:
         e2:1e:33:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 07:10:07 2026 by rpki-client