Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
File:                     95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft (raw, json)
Hash identifier:          8o3rxE1czllSdEFfFCuK2ajZe+WiINmp0XUXABGG+eE=
Subject key identifier:   E7:C1:72:A4:5A:38:BF:34:87:93:85:5D:A3:B6:F0:B8:4A:A1:93:F0
Authority key identifier: F7:9C:7C:1A:1B:AE:D3:26:0D:95:0D:4C:FC:E9:A8:97:CC:97:FA:30
Certificate issuer:       /CN=f79c7c1a1baed3260d950d4cfce9a897cc97fa30
Certificate serial:       019E28F00EA444EBABB9723BA8AB55E95AD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/95x8Ghuu0yYNlQ1M_Omol8yX-jA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
Manifest number:          0AB8
Signing time:             Fri 15 May 2026 00:01:21 +0000
Manifest this update:     Fri 15 May 2026 00:01:21 +0000
Manifest next update:     Sat 16 May 2026 00:01:21 +0000
Files and hashes:         1: 4KIKtiZx4olfKJeL5OUtDWjAXy0.roa (hash: xFv84inMCI3OI1weiiDL5A+3hBK6NXECfuHlJb+lAgU=)
                          2: 95x8Ghuu0yYNlQ1M_Omol8yX-jA.crl (hash: q4HxDWsJ+aqUdvAvfn084WGRkbwTcYwLqNJZyaIeFHI=)
                          3: RilQppJ-QAFui29gvm8Unef54Nk.asa (hash: 6bf1/nszX0Ysb+tZitkkOVu85I1KDpz8FO8uA+3f2nE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/95x8Ghuu0yYNlQ1M_Omol8yX-jA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 00:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:28:f0:0e:a4:44:eb:ab:b9:72:3b:a8:ab:55:e9:5a:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f79c7c1a1baed3260d950d4cfce9a897cc97fa30
        Validity
            Not Before: May 15 00:01:21 2026 GMT
            Not After : May 16 00:01:21 2026 GMT
        Subject: CN=e7c172a45a38bf348793855da3b6f0b84aa193f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:cc:47:90:db:75:a2:13:92:a8:80:cf:c7:83:
                    30:ab:ae:64:15:64:6e:6c:78:bf:b1:2e:ba:ff:07:
                    ab:f7:8d:54:88:55:94:f9:b8:0b:1a:f8:3f:77:57:
                    9e:48:0d:09:a1:2f:0a:b6:f4:0e:50:35:ad:15:d3:
                    4e:88:1f:bf:99:c3:e9:af:59:c2:c0:ed:1d:a5:ee:
                    25:6a:88:5d:17:5b:be:36:a4:1a:2f:e1:59:c6:78:
                    fc:2e:5b:d4:ea:a5:85:c5:b2:21:66:18:32:18:fd:
                    9c:46:81:95:b0:da:17:4e:13:7c:42:07:58:82:71:
                    db:b0:51:24:b9:b5:3a:d5:f3:3a:78:cd:ea:d2:c3:
                    73:f0:0e:b5:06:6c:e4:21:82:cd:d1:09:89:9b:f5:
                    34:4a:26:72:ff:9f:92:74:bd:45:f9:21:14:5d:8a:
                    26:d2:c7:2e:93:a1:a6:a8:7e:4e:ba:f8:ae:3e:01:
                    25:11:d5:12:fc:67:df:b3:d7:2b:89:19:c6:dc:02:
                    5f:a4:65:f1:46:4d:5d:99:1c:40:f5:94:72:8f:08:
                    c3:79:87:66:3e:c4:0e:28:66:6b:49:f8:e9:d9:5d:
                    3c:18:6e:b8:2c:c7:01:41:d2:e1:76:70:6c:c5:69:
                    70:55:93:4c:1c:1a:2c:a5:51:3a:3b:88:c7:ee:d7:
                    38:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C1:72:A4:5A:38:BF:34:87:93:85:5D:A3:B6:F0:B8:4A:A1:93:F0
            X509v3 Authority Key Identifier:
                keyid:F7:9C:7C:1A:1B:AE:D3:26:0D:95:0D:4C:FC:E9:A8:97:CC:97:FA:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95x8Ghuu0yYNlQ1M_Omol8yX-jA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:3d:c9:ac:15:66:20:ec:dc:39:af:c4:3d:3a:ea:17:62:0a:
         bd:7b:66:e9:89:6c:c4:58:6b:b7:da:3a:37:6e:6d:de:22:7a:
         35:da:6b:5d:f6:ad:94:55:ef:6f:31:7f:3d:13:c5:fb:0d:3e:
         8f:ea:28:d2:64:05:7d:eb:8d:28:7c:40:31:69:82:f4:34:48:
         fc:2c:3b:d9:82:f5:d5:c0:73:5b:a9:a7:50:a1:7c:5e:23:d1:
         73:e3:4f:f3:21:3d:9c:c9:6f:49:c8:d7:8d:f4:eb:2e:10:a9:
         1a:e6:33:bf:bb:a3:82:3c:b6:d7:36:51:ae:36:28:7f:53:40:
         44:f6:1c:04:a2:63:38:54:f7:ad:f8:0c:2c:b6:45:b4:48:eb:
         73:48:fe:bb:a4:94:43:a7:ac:61:ef:3f:07:1b:d7:af:04:c2:
         3b:58:15:de:13:24:68:f5:e0:29:9f:19:2d:48:47:68:a4:1a:
         9c:fa:4f:55:6a:87:e5:96:07:dc:37:58:99:68:d2:a6:5c:fb:
         b4:17:4d:95:fc:47:07:16:03:be:e1:7b:ad:4d:ad:fe:cb:f4:
         b6:41:99:d2:01:2d:4a:5b:36:92:11:72:af:ad:6c:06:97:14:
         d1:2f:8a:cc:0c:92:38:73:7b:f7:a8:1e:b1:40:ec:58:7e:d7:
         4b:ff:bd:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4o8A6kROuruXI7qKtV6VrWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3OWM3YzFhMWJhZWQzMjYwZDk1MGQ0Y2ZjZTlhODk3Y2M5
N2ZhMzAwHhcNMjYwNTE1MDAwMTIxWhcNMjYwNTE2MDAwMTIxWjAzMTEwLwYDVQQD
EyhlN2MxNzJhNDVhMzhiZjM0ODc5Mzg1NWRhM2I2ZjBiODRhYTE5M2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisxHkNt1ohOSqIDPx4Mwq65kFWRu
bHi/sS66/wer941UiFWU+bgLGvg/d1eeSA0JoS8KtvQOUDWtFdNOiB+/mcPpr1nC
wO0dpe4laohdF1u+NqQaL+FZxnj8LlvU6qWFxbIhZhgyGP2cRoGVsNoXThN8QgdY
gnHbsFEkubU61fM6eM3q0sNz8A61BmzkIYLN0QmJm/U0SiZy/5+SdL1F+SEUXYom
0scuk6GmqH5OuviuPgElEdUS/Gffs9criRnG3AJfpGXxRk1dmRxA9ZRyjwjDeYdm
PsQOKGZrSfjp2V08GG64LMcBQdLhdnBsxWlwVZNMHBospVE6O4jH7tc42wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOfBcqRaOL80h5OFXaO28LhKoZPwMB8GA1UdIwQY
MBaAFPecfBobrtMmDZUNTPzpqJfMl/owMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTV4OEdodXUweVlObFExTV9PbW9sOHlYLWpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yZGQwM2ItNTg5Yi00NTFjLWI5ZWQt
ZDEyYjU4Y2NiODdjLzEvOTV4OEdodXUweVlObFExTV9PbW9sOHlYLWpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8yZGQwM2ItNTg5Yi00NTFjLWI5ZWQtZDEyYjU4Y2NiODdj
LzEvOTV4OEdodXUweVlObFExTV9PbW9sOHlYLWpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACz3JrBVm
IOzcOa/EPTrqF2IKvXtm6YlsxFhrt9o6N25t3iJ6NdprXfatlFXvbzF/PRPF+w0+
j+oo0mQFfeuNKHxAMWmC9DRI/Cw72YL11cBzW6mnUKF8XiPRc+NP8yE9nMlvScjX
jfTrLhCpGuYzv7ujgjy21zZRrjYof1NARPYcBKJjOFT3rfgMLLZFtEjrc0j+u6SU
Q6esYe8/BxvXrwTCO1gV3hMkaPXgKZ8ZLUhHaKQanPpPVWqH5ZYH3DdYmWjSplz7
tBdNlfxHBxYDvuF7rU2t/sv0tkGZ0gEtSls2khFyr61sBpcU0S+KzAySOHN796ge
sUDsWH7XS/+9/g==
-----END CERTIFICATE-----
Generated at Fri May 15 06:20:14 2026 by rpki-client