Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft
File:                     1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft (raw, json)
Hash identifier:          wFIv6RSwm+gQN+fLJUthT8x+T21nl0OzJ0CrrKi4Cww=
Subject key identifier:   E7:F5:D2:DD:81:DF:CA:33:BD:EC:02:8B:CE:D4:32:D4:41:80:B0:DB
Authority key identifier: FB:CD:02:33:80:85:70:E3:1F:FB:2F:CD:E1:B8:77:07:1C:BC:66:03
Certificate issuer:       /CN=fbcd0233808570e31ffb2fcde1b877071cbc6603
Certificate serial:       019DD163EA02002C334D1837700495FB2466
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft
Manifest number:          0BC8
Signing time:             Tue 28 Apr 2026 00:01:19 +0000
Manifest this update:     Tue 28 Apr 2026 00:01:19 +0000
Manifest next update:     Wed 29 Apr 2026 00:01:19 +0000
Files and hashes:         1: 1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.crl (hash: G0jJZg+7LMM8Haw7FZE3s5MJz1ppPN27BHhXtwHGe1M=)
                          2: KWWsY3yI72ioCOq7Ehofgc0rEjc.roa (hash: DKEhqLA1Q4tgERt0qIwT8m3BK6uRcKG/np3muRhMq5Q=)
                          3: LSzcWbNsdVdvEIBim3BJCzhTVYU.roa (hash: FuA94sbSiSEVegunW1ULoVnEChhQx9cTZsUwwYAqYyY=)
                          4: sbfAkA7H-Szs8U4pMGUpwhJuU48.roa (hash: dZ9aXjp2r1NAiCJ79h91KYouoMe/pfGvhZ6kp2jSGYA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Apr 2026 00:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d1:63:ea:02:00:2c:33:4d:18:37:70:04:95:fb:24:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbcd0233808570e31ffb2fcde1b877071cbc6603
        Validity
            Not Before: Apr 28 00:01:19 2026 GMT
            Not After : Apr 29 00:01:19 2026 GMT
        Subject: CN=e7f5d2dd81dfca33bdec028bced432d44180b0db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:aa:0f:ae:25:39:39:0e:1b:08:a9:6d:26:5b:
                    7a:3b:ee:7b:b3:a8:c4:e4:e6:71:f8:33:72:57:62:
                    8f:46:14:79:03:03:cc:db:3d:c7:11:bd:2b:c0:7d:
                    39:ac:e2:d3:e4:b9:5c:23:7e:ed:26:1b:27:cf:00:
                    bb:ae:c0:d8:e9:a3:f7:e8:8c:3c:7b:ed:20:15:ef:
                    80:65:60:76:1e:58:e6:65:0d:83:da:5d:9d:54:71:
                    a6:ec:73:b5:ed:96:e3:36:44:9e:74:0a:29:fd:81:
                    f7:fc:43:52:21:26:8f:7d:8c:53:21:32:17:fa:5c:
                    a2:92:13:90:33:48:ad:8a:5a:a5:0d:b7:e8:8a:14:
                    d9:72:c6:c4:3c:cf:2b:6b:63:98:b8:29:96:de:b3:
                    ba:4d:02:13:7d:f1:2d:c9:7b:9e:66:6c:94:05:96:
                    df:5a:26:94:d1:47:d6:62:93:39:ad:a0:b7:63:dc:
                    c6:94:7c:8b:13:bc:69:e4:19:bd:92:b1:01:ff:03:
                    f2:8d:00:6d:cb:eb:7d:3b:d6:da:ac:db:96:cc:94:
                    bd:9d:a2:26:3f:43:39:41:05:6b:25:01:6f:6f:8c:
                    31:2d:22:53:e3:3d:85:40:97:ac:56:9f:4e:33:c2:
                    b6:eb:08:49:ce:42:12:c4:59:fc:f2:d7:45:50:8b:
                    f4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F5:D2:DD:81:DF:CA:33:BD:EC:02:8B:CE:D4:32:D4:41:80:B0:DB
            X509v3 Authority Key Identifier:
                keyid:FB:CD:02:33:80:85:70:E3:1F:FB:2F:CD:E1:B8:77:07:1C:BC:66:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:49:0a:64:57:81:24:65:fa:b7:c8:49:02:81:e1:68:c7:ca:
         05:ad:90:9f:ad:0c:85:11:37:9e:b5:db:d4:60:62:05:55:aa:
         e1:10:32:5e:09:b2:bb:d2:75:ba:43:15:8c:18:19:4d:2f:37:
         05:89:11:eb:84:e1:5c:dd:cd:d2:cb:82:c2:cf:ef:2e:a8:9d:
         e3:04:ae:53:6c:9e:f7:54:2e:2b:a3:0a:56:40:13:af:02:93:
         79:19:19:ef:de:1f:7c:91:c5:46:96:54:16:fd:bc:4d:56:b6:
         4c:e1:84:dd:84:f6:3d:98:d2:ec:56:29:49:e2:5a:26:a2:43:
         fe:85:fb:ea:27:2b:ec:ce:25:8a:ff:de:c8:10:fa:0c:56:1f:
         2b:dc:46:b8:55:59:6b:be:74:94:e9:e0:99:18:89:93:3a:25:
         e5:f7:f8:49:6a:3b:aa:75:53:85:fe:e0:93:50:c3:ee:3e:ad:
         d9:79:fd:5b:f7:2e:b7:28:55:be:fe:13:c0:5e:a6:07:1e:48:
         1a:64:48:ed:6f:6e:33:46:bb:e4:c8:10:e5:11:67:db:af:0e:
         12:b1:fc:3d:0c:55:be:55:07:5e:4c:d4:e2:3b:75:0f:d8:d1:
         f0:87:85:2b:76:fb:b0:82:c2:ca:65:71:9c:af:20:70:94:cc:
         cf:aa:1b:8d
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ3RY+oCACwzTRg3cASV+yRmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiY2QwMjMzODA4NTcwZTMxZmZiMmZjZGUxYjg3NzA3MWNi
YzY2MDMwHhcNMjYwNDI4MDAwMTE5WhcNMjYwNDI5MDAwMTE5WjAzMTEwLwYDVQQD
EyhlN2Y1ZDJkZDgxZGZjYTMzYmRlYzAyOGJjZWQ0MzJkNDQxODBiMGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqoPriU5OQ4bCKltJlt6O+57s6jE
5OZx+DNyV2KPRhR5AwPM2z3HEb0rwH05rOLT5LlcI37tJhsnzwC7rsDY6aP36Iw8
e+0gFe+AZWB2HljmZQ2D2l2dVHGm7HO17ZbjNkSedAop/YH3/ENSISaPfYxTITIX
+lyikhOQM0itilqlDbfoihTZcsbEPM8ra2OYuCmW3rO6TQITffEtyXueZmyUBZbf
WiaU0UfWYpM5raC3Y9zGlHyLE7xp5Bm9krEB/wPyjQBty+t9O9barNuWzJS9naIm
P0M5QQVrJQFvb4wxLSJT4z2FQJesVp9OM8K26whJzkISxFn88tdFUIv0ZQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOf10t2B38ozvewCi87UMtRBgLDbMB8GA1UdIwQY
MBaAFPvNAjOAhXDjH/svzeG4dwccvGYDMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS04MENNNENGY09NZi15X040YmgzQnh5OFpnTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQvM2I1MTEwLTUxNjctNDhlMC04NTk3
LTYxZDczMzNmODU3MC8xLzEtODBDTTRDRmNPTWYteV9ONGJoM0J4eThaZ00ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzJkLzNiNTExMC01MTY3LTQ4ZTAtODU5Ny02MWQ3MzMzZjg1
NzAvMS8xLTgwQ000Q0ZjT01mLXlfTjRiaDNCeHk4WmdNLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPUkK
ZFeBJGX6t8hJAoHhaMfKBa2Qn60MhRE3nrXb1GBiBVWq4RAyXgmyu9J1ukMVjBgZ
TS83BYkR64ThXN3N0suCws/vLqid4wSuU2ye91QuK6MKVkATrwKTeRkZ794ffJHF
RpZUFv28TVa2TOGE3YT2PZjS7FYpSeJaJqJD/oX76icr7M4liv/eyBD6DFYfK9xG
uFVZa750lOngmRiJkzol5ff4SWo7qnVThf7gk1DD7j6t2Xn9W/cutyhVvv4TwF6m
Bx5IGmRI7W9uM0a75MgQ5RFn268OErH8PQxVvlUHXkzU4jt1D9jR8IeFK3b7sILC
ymVxnK8gcJTMz6objQ==
-----END CERTIFICATE-----
Generated at Tue Apr 28 04:34:26 2026 by rpki-client