Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft
File:                     kW-Aw18gLrAnZkGb-30oISX_4Vg.mft (raw, json)
Hash identifier:          8Rhe/Eh41+7JhF5Zzk1yp+gWChrieq9DuMRI/ZGnubQ=
Subject key identifier:   12:56:2D:62:5F:01:1D:5A:41:EB:DB:8E:E0:1F:6A:9C:BF:23:9F:8F
Authority key identifier: 91:6F:80:C3:5F:20:2E:B0:27:66:41:9B:FB:7D:28:21:25:FF:E1:58
Certificate issuer:       /CN=916f80c35f202eb02766419bfb7d282125ffe158
Certificate serial:       019E31BC4AD6FE2B202A9862DAF981739928
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kW-Aw18gLrAnZkGb-30oISX_4Vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft
Manifest number:          1916
Signing time:             Sat 16 May 2026 17:01:23 +0000
Manifest this update:     Sat 16 May 2026 17:01:23 +0000
Manifest next update:     Sun 17 May 2026 17:01:23 +0000
Files and hashes:         1: FtTJzPkf-_88xIHu--X3c9IY9io.roa (hash: +RLOecQj9Ebpgf8gHXNoECBgbn6HhMEJfLnzjcBP8tQ=)
                          2: kW-Aw18gLrAnZkGb-30oISX_4Vg.crl (hash: aPp9lXU8xB16dK29PT8hsdL69TqwNBucZyPsHe74Vaw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kW-Aw18gLrAnZkGb-30oISX_4Vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:bc:4a:d6:fe:2b:20:2a:98:62:da:f9:81:73:99:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=916f80c35f202eb02766419bfb7d282125ffe158
        Validity
            Not Before: May 16 17:01:23 2026 GMT
            Not After : May 17 17:01:23 2026 GMT
        Subject: CN=12562d625f011d5a41ebdb8ee01f6a9cbf239f8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:5e:8e:ad:b8:76:f0:12:0e:f8:10:8d:0e:1e:
                    52:1c:48:75:77:ad:79:63:2f:09:79:b5:c9:d1:e7:
                    fa:f1:d9:0e:30:94:af:09:1c:32:99:b0:a4:90:94:
                    fd:72:c3:63:b3:e2:76:a5:bd:c9:43:a1:66:34:f3:
                    e0:85:80:1f:8d:d9:61:15:e0:31:f3:01:47:99:e8:
                    ba:2e:1e:2a:c9:eb:c3:89:16:d1:a2:ec:a5:e9:ef:
                    19:46:6b:06:71:76:33:1f:a1:87:13:0e:ee:ef:f9:
                    71:11:86:d9:5b:21:41:ee:3b:dc:ab:21:28:d1:82:
                    6c:47:49:5d:ba:ba:f0:8c:ab:31:2a:bb:22:9f:fc:
                    4b:68:26:ec:48:51:b1:98:ff:bf:88:84:91:c9:a8:
                    10:0b:7e:bf:c9:11:b9:d1:4c:96:59:8c:99:72:67:
                    e7:53:ca:ff:bf:dd:2b:47:cc:5c:0d:16:8b:d2:39:
                    4a:43:42:17:0f:c9:d1:31:41:46:51:a9:d7:e4:0e:
                    89:4f:d5:2d:8c:9e:b0:ff:7f:f7:03:d8:48:b9:0f:
                    a4:63:35:91:82:a5:f6:de:4d:24:a4:6d:87:b7:02:
                    c3:87:18:d7:c0:6e:1a:46:c3:e5:e6:1d:ce:4c:db:
                    8c:74:26:a6:09:1b:2d:47:d8:00:ec:a1:53:ff:93:
                    40:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:56:2D:62:5F:01:1D:5A:41:EB:DB:8E:E0:1F:6A:9C:BF:23:9F:8F
            X509v3 Authority Key Identifier:
                keyid:91:6F:80:C3:5F:20:2E:B0:27:66:41:9B:FB:7D:28:21:25:FF:E1:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kW-Aw18gLrAnZkGb-30oISX_4Vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:06:6e:0b:b6:6a:1d:0e:b7:71:5b:60:6e:59:b8:d4:a5:86:
         b9:d8:7a:5b:ad:65:73:b5:82:ca:42:94:b1:4c:90:88:a0:b6:
         b2:ca:46:8b:1d:e2:8e:b9:7e:15:43:a2:bc:f0:51:f7:d2:5b:
         84:60:6a:bc:ca:64:88:7a:e6:95:bc:a2:18:bb:10:ca:27:da:
         f2:cf:25:c7:4a:f7:30:ae:42:cc:b7:12:01:4e:cc:5e:58:a7:
         28:f7:9f:df:85:54:22:47:33:a4:23:72:86:78:8e:0b:b5:31:
         ac:3e:21:d2:98:8a:1a:e0:26:13:03:ef:30:e1:6a:13:f9:09:
         7a:ce:73:64:7b:13:39:9b:fe:21:e0:3c:55:3d:7d:80:5c:4c:
         5e:de:de:4c:b6:93:f0:7d:b0:c1:2f:f2:fb:fb:ce:37:a5:d9:
         f5:8a:7f:c4:6d:33:69:48:f1:8b:e8:2a:c0:12:be:c5:72:ba:
         8e:f4:3a:5a:29:5b:03:05:5a:5b:ee:0a:91:df:2e:7d:28:e4:
         47:94:b1:ec:c6:ed:c6:ca:1f:44:92:f6:60:2a:d2:11:4e:52:
         0d:e2:47:3b:fa:30:cd:a3:8c:da:28:9c:96:24:ff:80:3d:e2:
         6f:6e:a2:d5:59:7e:c7:1d:02:98:97:9d:d6:bb:31:3f:28:7f:
         c9:79:c0:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xvErW/isgKphi2vmBc5koMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNmY4MGMzNWYyMDJlYjAyNzY2NDE5YmZiN2QyODIxMjVm
ZmUxNTgwHhcNMjYwNTE2MTcwMTIzWhcNMjYwNTE3MTcwMTIzWjAzMTEwLwYDVQQD
EygxMjU2MmQ2MjVmMDExZDVhNDFlYmRiOGVlMDFmNmE5Y2JmMjM5ZjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+16Orbh28BIO+BCNDh5SHEh1d615
Yy8JebXJ0ef68dkOMJSvCRwymbCkkJT9csNjs+J2pb3JQ6FmNPPghYAfjdlhFeAx
8wFHmei6Lh4qyevDiRbRouyl6e8ZRmsGcXYzH6GHEw7u7/lxEYbZWyFB7jvcqyEo
0YJsR0ldurrwjKsxKrsin/xLaCbsSFGxmP+/iISRyagQC36/yRG50UyWWYyZcmfn
U8r/v90rR8xcDRaL0jlKQ0IXD8nRMUFGUanX5A6JT9UtjJ6w/3/3A9hIuQ+kYzWR
gqX23k0kpG2HtwLDhxjXwG4aRsPl5h3OTNuMdCamCRstR9gA7KFT/5NApwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJWLWJfAR1aQevbjuAfapy/I5+PMB8GA1UdIwQY
MBaAFJFvgMNfIC6wJ2ZBm/t9KCEl/+FYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1ctQXcxOGdMckFuWmtHYi0zMG9JU1hfNFZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi84ZDlhYzEtZDM1ZC00ZTMyLWI4M2Yt
YzEwY2M5NTNiZDFiLzEva1ctQXcxOGdMckFuWmtHYi0zMG9JU1hfNFZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi84ZDlhYzEtZDM1ZC00ZTMyLWI4M2YtYzEwY2M5NTNiZDFi
LzEva1ctQXcxOGdMckFuWmtHYi0zMG9JU1hfNFZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASAZuC7Zq
HQ63cVtgblm41KWGudh6W61lc7WCykKUsUyQiKC2sspGix3ijrl+FUOivPBR99Jb
hGBqvMpkiHrmlbyiGLsQyifa8s8lx0r3MK5CzLcSAU7MXlinKPef34VUIkczpCNy
hniOC7UxrD4h0piKGuAmEwPvMOFqE/kJes5zZHsTOZv+IeA8VT19gFxMXt7eTLaT
8H2wwS/y+/vON6XZ9Yp/xG0zaUjxi+gqwBK+xXK6jvQ6WilbAwVaW+4Kkd8ufSjk
R5Sx7MbtxsofRJL2YCrSEU5SDeJHO/owzaOM2iicliT/gD3ib26i1Vl+xx0CmJed
1rsxPyh/yXnAAg==
-----END CERTIFICATE-----
Generated at Sat May 16 22:01:08 2026 by rpki-client