Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
File:                     1dHNR6U-9X67VnvIgq0phvqsXw0.mft (raw, json)
Hash identifier:          u2Zjuvg/Cwcet+1dG5tgFlu3bVrEUDsM9viuMu1VcJk=
Subject key identifier:   16:1B:B3:FA:0A:5F:76:DB:2B:7E:21:23:A3:EE:B0:2B:3D:DA:30:C2
Authority key identifier: D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D
Certificate issuer:       /CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d
Certificate serial:       019E30DFECE690A2F2DBB001A1A8F0EB2B1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
Manifest number:          165D
Signing time:             Sat 16 May 2026 13:00:41 +0000
Manifest this update:     Sat 16 May 2026 13:00:41 +0000
Manifest next update:     Sun 17 May 2026 13:00:41 +0000
Files and hashes:         1: 1dHNR6U-9X67VnvIgq0phvqsXw0.crl (hash: Z+jAtt0Z1Cf3ZYrgIe4Fd0gu82wiU3XmLkdam6hh9Jg=)
                          2: GwHZp-kEEMMSmgcidpvuauk-EA0.roa (hash: Xjp5Kh43d0lOVK+MDX99KJIgb/gfu211S8//K3ogwuU=)
                          3: X-4V7xzl5bM1v7YWDyF_SZW5lrc.roa (hash: I3o7rUH/RKJK5k980x+148YLL5ZlqYblJvTvhEFHuDU=)
                          4: g9skLhoTngKF84leEtNBNhGZn9Q.roa (hash: hqQ3HiFBUbLIXn6t3JB+mw0UlnMpWW49qnJ3ApgTu0E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:df:ec:e6:90:a2:f2:db:b0:01:a1:a8:f0:eb:2b:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d
        Validity
            Not Before: May 16 13:00:41 2026 GMT
            Not After : May 17 13:00:41 2026 GMT
        Subject: CN=161bb3fa0a5f76db2b7e2123a3eeb02b3dda30c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:bf:0e:46:b7:fd:3b:2d:e8:7a:43:f6:0c:42:
                    31:47:01:43:94:ab:b7:ee:19:bf:ac:79:fb:a2:ae:
                    d1:92:16:c5:d5:6c:06:41:5a:54:19:74:07:32:c2:
                    3a:f6:66:f7:4c:d4:84:f7:d5:8e:bf:b5:93:85:dc:
                    d0:9a:84:c8:5e:20:bd:dd:18:57:11:ec:e3:f7:93:
                    93:60:0a:51:c9:49:1a:89:5d:ff:63:12:11:6f:a8:
                    ac:a1:fa:19:63:7d:f8:13:96:19:de:7e:26:9b:15:
                    8f:c5:b1:88:15:96:a6:07:e7:30:58:c0:39:c2:25:
                    b5:f1:c8:ff:9c:b9:02:9d:8e:07:c3:8b:56:ec:f1:
                    26:02:b7:fa:63:b9:af:a6:2b:a6:7b:c9:54:14:65:
                    81:ec:c9:c5:9a:f8:18:68:48:45:27:af:ac:cc:f1:
                    b4:14:db:d1:bf:0d:78:7f:67:4d:e1:28:ba:a5:89:
                    49:46:09:3a:ec:b9:c5:4d:86:3b:80:22:92:28:e6:
                    fd:a7:8f:d5:27:9f:8c:35:c9:41:0f:bd:ab:9a:e0:
                    08:b7:db:47:82:66:35:07:9f:27:61:5f:1a:f3:a2:
                    59:95:61:38:b7:29:c4:2e:7b:19:41:c1:f7:0a:7a:
                    50:22:dd:49:80:45:bc:ba:d3:4f:92:51:79:fc:19:
                    32:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:1B:B3:FA:0A:5F:76:DB:2B:7E:21:23:A3:EE:B0:2B:3D:DA:30:C2
            X509v3 Authority Key Identifier:
                keyid:D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:36:41:2c:86:5f:9c:0e:1f:72:49:4f:35:cc:dc:70:e1:07:
         72:55:ca:fb:5a:18:85:a0:61:29:63:50:d2:1e:1a:ca:8a:bd:
         e4:86:ab:67:1b:ac:46:e1:d3:ae:89:92:98:2f:7a:f9:24:d1:
         fd:81:6c:d6:0f:09:56:b3:e6:32:55:3d:67:1e:39:11:16:f2:
         e6:0e:8e:d9:7e:3d:54:82:e4:80:41:bb:02:4a:01:fb:e7:c1:
         7e:d6:dd:d8:ed:13:75:60:a7:20:b9:38:2d:81:73:7e:53:08:
         26:2f:4a:42:2d:49:5b:f0:1d:86:d0:14:e7:e1:8c:6a:ae:eb:
         86:6e:42:c2:f4:90:12:d5:66:f1:0b:3e:ef:a6:50:83:61:a5:
         f8:0f:99:f5:e7:54:4d:ff:ab:94:13:8e:1a:e3:16:5a:22:68:
         70:bc:9f:79:24:c5:8a:7d:ce:f8:32:ee:15:18:9c:00:5d:4c:
         15:1b:42:6c:9f:8b:7e:ae:51:f9:ed:55:f0:ad:31:de:a0:67:
         70:be:06:a0:f4:a7:35:c6:01:aa:98:a3:c6:00:c2:0e:24:f9:
         a9:3d:3d:c9:aa:61:5e:fb:3b:d3:d3:10:8a:89:5b:57:f2:8c:
         22:56:4e:a4:3f:0b:f4:8b:8f:3b:d3:bb:6f:a7:9b:d8:31:65:
         58:fd:11:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:57:28 2026 by rpki-client