Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
File:                     G87kBAWu-22hejQO7xWc6cTRgyI.mft (raw, json)
Hash identifier:          zLoAJMXJmg3/DKBz0JDfKbPffo28irMg/x6iI0gHYC0=
Subject key identifier:   66:5B:92:20:8F:9B:06:0D:2B:AB:D8:8A:3F:19:6B:5F:2E:76:D4:3A
Authority key identifier: 1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
Certificate issuer:       /CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Certificate serial:       019E326137F4AEEF109C60240D441E1D5C09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
Manifest number:          1629
Signing time:             Sat 16 May 2026 20:01:32 +0000
Manifest this update:     Sat 16 May 2026 20:01:32 +0000
Manifest next update:     Sun 17 May 2026 20:01:32 +0000
Files and hashes:         1: 1-6iaGXxnmZAQPnrgq_8F_icO1g4.roa (hash: 0E9/yZaAdb1/Mv9Vi0wA6mVdKYXwLD+kDlf9BylOAkE=)
                          2: G87kBAWu-22hejQO7xWc6cTRgyI.crl (hash: OURRa4CjZCNvISUq0c87rM1BVcHS+epipanCtETVyg4=)
                          3: cDH3zRFxxa5MCdHGhfO_X-DrZiY.roa (hash: XO1nhE/daEhAYwuXZgOrEgjLVoR1QTpbhv4y3qZNEo0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:61:37:f4:ae:ef:10:9c:60:24:0d:44:1e:1d:5c:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bcee40405aefb6da17a340eef159ce9c4d18322
        Validity
            Not Before: May 16 20:01:32 2026 GMT
            Not After : May 17 20:01:32 2026 GMT
        Subject: CN=665b92208f9b060d2babd88a3f196b5f2e76d43a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d4:ac:fb:56:f4:3e:a9:f5:3a:5f:02:85:8a:
                    51:c0:c1:2b:e9:b9:4a:44:ec:31:86:e9:b1:e5:87:
                    88:e0:8b:48:43:f0:10:30:8d:b3:a5:3c:4f:91:47:
                    f9:a4:b3:1a:30:6c:0c:a7:b7:2e:7c:4f:88:d4:5e:
                    bb:72:72:44:74:e0:c2:83:4a:2b:37:c9:c6:f4:4b:
                    7e:2b:47:e7:0e:1e:5b:fa:22:2f:b3:cb:cc:e4:75:
                    81:6f:d7:32:fa:5c:70:25:a5:60:03:d0:b8:d7:14:
                    08:78:c3:3b:43:39:05:2c:ec:b1:c3:60:d9:87:90:
                    3f:6a:e7:82:e5:e3:9d:3e:a4:31:12:b6:c7:c9:2d:
                    1a:d3:da:70:11:6d:66:69:8c:67:35:c4:9e:ed:97:
                    98:19:a3:18:1e:1f:e9:86:ce:13:9a:ce:02:7f:f7:
                    a8:00:25:ed:fe:13:bb:e8:06:9c:9c:0b:db:97:44:
                    9d:71:0b:90:b7:76:86:f4:7a:8c:49:19:e5:70:90:
                    dd:57:91:97:ee:bc:62:41:dc:1a:6e:07:02:14:62:
                    f8:ff:e9:52:b9:1f:50:3c:6f:f2:3a:15:a5:cb:2b:
                    2a:40:6f:ed:b0:d3:ae:76:36:36:ff:b1:a1:c5:80:
                    3e:b3:ec:8a:eb:0a:92:a9:92:a6:67:45:09:23:c7:
                    ed:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:5B:92:20:8F:9B:06:0D:2B:AB:D8:8A:3F:19:6B:5F:2E:76:D4:3A
            X509v3 Authority Key Identifier:
                keyid:1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:dd:1e:ae:1a:2c:50:f9:4a:f7:89:34:57:21:ff:f7:b2:61:
         e0:0f:57:f9:b9:6d:88:99:04:43:29:bd:cb:5d:86:f0:37:e5:
         45:18:a9:27:72:58:84:a6:9c:d5:3e:c4:45:d1:4b:99:93:bb:
         2a:35:63:d7:11:0a:7c:0f:a6:9f:b7:2f:0a:0e:9b:b9:c9:51:
         7c:0e:68:94:62:4e:31:30:59:47:b4:22:84:22:8e:a2:fa:a0:
         2a:2d:a3:55:67:26:38:e9:a9:31:d5:93:71:a9:3b:ae:f0:d0:
         33:fc:f0:67:9b:b8:71:b7:84:ee:9c:25:d0:4f:18:fe:6d:51:
         6d:9d:48:a9:fb:5d:c3:fd:60:cc:07:46:20:85:23:9d:e9:6f:
         6c:92:f6:c1:b6:26:f6:5d:7e:09:76:61:71:92:11:79:4b:bb:
         17:8f:68:3d:60:00:95:00:39:dd:a2:0b:2d:e2:92:d1:cd:5d:
         ea:7f:89:07:7f:2e:63:5f:c1:db:09:0d:5b:a9:1d:6b:ea:ab:
         6f:ba:6a:f3:8c:e1:11:6f:08:5e:7f:70:d7:08:43:20:c2:6b:
         0d:97:dc:82:33:54:ca:81:33:6b:40:db:e8:14:6e:31:56:46:
         54:77:eb:9c:cb:22:d4:59:95:83:27:4c:d1:61:17:b0:a1:e2:
         b8:d7:eb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:41:31 2026 by rpki-client