Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
File:                     1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft (raw, json)
Hash identifier:          xJpPipzuRQyXnZVYeaqS3tZKAN9m9xtBFegf2JT10Og=
Subject key identifier:   FA:3D:CD:50:C1:F7:97:B3:98:0C:DD:CF:ED:A3:B2:8C:CB:13:31:EA
Authority key identifier: F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D
Certificate issuer:       /CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
Certificate serial:       019E2926A2108DF1BB5065CF65922560D5F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
Manifest number:          190E
Signing time:             Fri 15 May 2026 01:00:58 +0000
Manifest this update:     Fri 15 May 2026 01:00:58 +0000
Manifest next update:     Sat 16 May 2026 01:00:58 +0000
Files and hashes:         1: 1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl (hash: sFEeCOWNEKuh9Rk/PErSLsi/DICemrXE+0j8v66/JXg=)
                          2: NtOmLk3Ecthj6nPCs4zxh7SF6Mg.roa (hash: KP/kZ3LXZb2b6XuZM5JQejaPc2eczkoswDhOOh49koo=)
                          3: PrDxqBSRwkPqnVSks9jL5Ew1nxs.roa (hash: yNka9qwEcezZYyApHWafWMkS2uCoJYAg/hb1N/oKUG4=)
                          4: cpzictopgP_W9ifWySv9e6ehOOc.roa (hash: 5rHP/vfqqkxl9562AQVwm1f2nGTx9rXW1y4VWn7ksEw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 01:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:26:a2:10:8d:f1:bb:50:65:cf:65:92:25:60:d5:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
        Validity
            Not Before: May 15 01:00:58 2026 GMT
            Not After : May 16 01:00:58 2026 GMT
        Subject: CN=fa3dcd50c1f797b3980cddcfeda3b28ccb1331ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bb:45:b5:f1:7f:1b:e8:eb:33:6e:9a:7a:ad:
                    fa:83:2c:17:77:73:f2:8d:03:dc:b9:d5:2b:87:d8:
                    9f:16:b1:78:dd:9a:07:3c:df:48:d7:0d:7f:43:0f:
                    4e:64:e9:e5:ba:cd:a7:fe:58:ec:91:fc:9c:37:dd:
                    23:65:e8:84:75:73:74:c4:80:31:9b:c2:a7:15:cf:
                    38:ff:b5:c2:b5:1d:e1:15:48:19:96:93:b5:04:d4:
                    7c:3a:17:66:27:3b:ac:c9:97:0e:da:d0:4e:0f:9e:
                    59:ed:29:4a:aa:fa:91:1c:a4:09:c1:1f:ce:3c:1d:
                    90:8d:cd:80:52:23:1b:62:f3:41:e8:69:d3:5a:7f:
                    82:f9:a5:67:07:d4:21:cc:49:a8:8a:42:a9:22:ba:
                    3c:dc:41:93:cc:c9:40:81:b3:21:32:22:fb:67:56:
                    67:4f:92:84:50:17:02:35:56:8b:d5:c3:b3:c3:2f:
                    69:c8:c5:2c:3f:2e:eb:75:40:38:7f:a7:79:fc:96:
                    27:44:1a:86:58:9e:f1:3e:1b:ab:ab:08:6c:ff:42:
                    f1:de:16:02:a5:54:e3:0d:74:0d:71:06:3e:a7:33:
                    b2:5c:f6:a7:ba:23:58:ee:06:6a:e5:2f:41:d7:eb:
                    61:05:f2:28:b8:82:cf:93:3f:0b:d8:17:62:b0:d6:
                    d8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:3D:CD:50:C1:F7:97:B3:98:0C:DD:CF:ED:A3:B2:8C:CB:13:31:EA
            X509v3 Authority Key Identifier:
                keyid:F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:b1:d7:ee:7b:a3:dc:01:d8:74:76:a1:52:13:0d:04:01:5d:
         34:ac:28:74:4f:dd:8f:07:ae:9e:d0:d1:e9:32:2a:02:a6:ac:
         fa:e8:e2:95:7c:19:2f:53:10:3b:a4:bd:f5:48:c1:7e:4f:91:
         27:a0:7e:42:9e:00:35:0a:5a:d6:e0:e2:86:f2:b4:2f:b5:e8:
         cc:80:75:06:a1:69:ee:c6:93:89:a6:59:bb:78:b2:3c:49:34:
         4c:43:c9:f8:37:2c:00:72:e0:a1:9a:b2:cc:a2:d5:2e:27:b5:
         45:fa:3a:e5:10:b9:ab:a7:f0:5d:66:e9:86:bc:92:bc:72:e4:
         4c:18:25:a5:74:1d:4b:b5:ba:f5:f3:18:83:32:2d:c0:a9:bf:
         47:2c:40:21:bb:39:88:c1:8f:60:45:92:ef:dd:d9:4d:dc:96:
         84:3f:ed:7d:66:7c:6b:9b:e0:41:07:1f:79:bc:6f:34:3d:11:
         a3:1a:4b:53:bf:5b:31:01:39:d1:74:7b:63:f3:1a:91:f7:ed:
         26:9b:b7:01:78:cf:e7:7b:20:f2:1b:d8:05:4c:e9:30:0c:15:
         74:7e:da:49:03:f2:0f:f3:8c:c6:76:38:8b:d1:da:84:fa:6c:
         3e:9d:cd:d3:1b:d5:e1:1d:bb:6c:68:b7:2b:c6:07:03:76:8c:
         21:31:81:d3
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ4pJqIQjfG7UGXPZZIlYNXyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NWQwMDQ0NDYxODJkNTFmZDM4ZjdmNzVmZTJhNWM4NjA4
YmM4NmQwHhcNMjYwNTE1MDEwMDU4WhcNMjYwNTE2MDEwMDU4WjAzMTEwLwYDVQQD
EyhmYTNkY2Q1MGMxZjc5N2IzOTgwY2RkY2ZlZGEzYjI4Y2NiMTMzMWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybtFtfF/G+jrM26aeq36gywXd3Py
jQPcudUrh9ifFrF43ZoHPN9I1w1/Qw9OZOnlus2n/ljskfycN90jZeiEdXN0xIAx
m8KnFc84/7XCtR3hFUgZlpO1BNR8OhdmJzusyZcO2tBOD55Z7SlKqvqRHKQJwR/O
PB2Qjc2AUiMbYvNB6GnTWn+C+aVnB9QhzEmoikKpIro83EGTzMlAgbMhMiL7Z1Zn
T5KEUBcCNVaL1cOzwy9pyMUsPy7rdUA4f6d5/JYnRBqGWJ7xPhurqwhs/0Lx3hYC
pVTjDXQNcQY+pzOyXPanuiNY7gZq5S9B1+thBfIouILPkz8L2BdisNbY9QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPo9zVDB95ezmAzdz+2jsozLEzHqMB8GA1UdIwQY
MBaAFPhdAERGGC1R/Tj391/ipchgi8htMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1GMEFSRVlZTFZIOU9QZjNYLUtseUdDTHlHMC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvYzlkYjUyLWFjOTEtNDA2YS05Zjk1
LTA4MGVlMGE5N2Y2YS8xLzEtRjBBUkVZWUxWSDlPUGYzWC1LbHlHQ0x5RzAubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzJhL2M5ZGI1Mi1hYzkxLTQwNmEtOWY5NS0wODBlZTBhOTdm
NmEvMS8xLUYwQVJFWVlMVkg5T1BmM1gtS2x5R0NMeUcwLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcbHX
7nuj3AHYdHahUhMNBAFdNKwodE/djweuntDR6TIqAqas+ujilXwZL1MQO6S99UjB
fk+RJ6B+Qp4ANQpa1uDihvK0L7XozIB1BqFp7saTiaZZu3iyPEk0TEPJ+DcsAHLg
oZqyzKLVLie1Rfo65RC5q6fwXWbphrySvHLkTBglpXQdS7W69fMYgzItwKm/RyxA
Ibs5iMGPYEWS793ZTdyWhD/tfWZ8a5vgQQcfebxvND0RoxpLU79bMQE50XR7Y/Ma
kfftJpu3AXjP53sg8hvYBUzpMAwVdH7aSQPyD/OMxnY4i9HahPpsPp3N0xvV4R27
bGi3K8YHA3aMITGB0w==
-----END CERTIFICATE-----
Generated at Fri May 15 11:15:40 2026 by rpki-client