Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
File:                     bj5QHSUT5a7UQj1-smXmCCKo540.mft (raw, json)
Hash identifier:          2164TW7co5/23Fg1WyEehkr8oYk9uVhKoF+KJjUbf88=
Subject key identifier:   C8:EB:67:CD:31:A8:66:4B:52:95:EF:39:38:76:DA:E9:72:13:13:EE
Authority key identifier: 6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D
Certificate issuer:       /CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d
Certificate serial:       019E314E08A8A6688900B9F9B771985488DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
Manifest number:          15FC
Signing time:             Sat 16 May 2026 15:00:58 +0000
Manifest this update:     Sat 16 May 2026 15:00:58 +0000
Manifest next update:     Sun 17 May 2026 15:00:58 +0000
Files and hashes:         1: Oon2IIrGkbnZaP-hb1ZNPn5crpM.roa (hash: aV6nVsAigskV1T2EnkJOb7mIfcRM6nE2dCNvULEtGlA=)
                          2: bj5QHSUT5a7UQj1-smXmCCKo540.crl (hash: xT2JAMT+9SnQdSJ+N0ajXZ3O68bFEHoEF3P5FpXQLEE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4e:08:a8:a6:68:89:00:b9:f9:b7:71:98:54:88:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d
        Validity
            Not Before: May 16 15:00:58 2026 GMT
            Not After : May 17 15:00:58 2026 GMT
        Subject: CN=c8eb67cd31a8664b5295ef393876dae9721313ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:02:b9:fb:b5:25:f5:1b:d2:4d:a1:93:99:97:
                    d0:4d:f9:5e:e3:d8:6d:ff:68:a7:33:0e:2d:4b:4f:
                    c7:c9:1d:29:38:83:6b:87:ff:49:fe:d9:3b:2e:3c:
                    0c:47:4d:6c:2c:d7:23:fe:d5:11:d9:07:00:52:0d:
                    c8:57:f8:56:36:70:f6:c1:15:9b:f6:fb:2b:fa:51:
                    b4:fa:73:38:78:0c:99:1c:99:e6:d7:f8:77:75:60:
                    0a:31:f5:68:18:3d:ec:52:69:4d:35:13:78:90:16:
                    ff:b7:bf:04:bb:9a:94:4c:19:b9:96:8c:07:e9:7b:
                    1f:b5:6b:b1:1a:ed:d9:9b:38:87:4c:71:9b:9d:0e:
                    db:63:95:6d:83:51:0a:7f:25:81:89:43:38:9d:b2:
                    c1:8d:71:5c:ff:95:ae:c7:61:81:d5:31:e9:5e:6a:
                    c2:13:af:d7:bf:bf:56:35:9d:a6:4d:e0:cc:52:77:
                    92:5e:3a:a8:f0:56:42:10:a8:3b:dc:7e:98:2d:c0:
                    a3:33:a7:78:c1:eb:2e:59:d9:aa:6f:7e:0e:37:98:
                    78:18:1d:89:1c:6d:1f:97:1d:68:45:6a:a6:9c:8c:
                    c4:6d:79:68:06:a9:ce:de:1e:de:27:ff:f5:70:d1:
                    f7:52:8d:b3:a0:8b:74:58:7a:d4:8e:33:cf:f9:eb:
                    05:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:EB:67:CD:31:A8:66:4B:52:95:EF:39:38:76:DA:E9:72:13:13:EE
            X509v3 Authority Key Identifier:
                keyid:6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:fb:2c:ef:22:87:70:e2:a2:d6:2f:00:e5:71:34:26:1a:1c:
         5b:c5:81:ed:7f:fd:a7:33:6e:a0:16:0b:98:19:c4:4e:3c:08:
         de:38:7e:b5:76:8f:04:ae:55:58:43:06:f1:ac:c0:d8:d5:9a:
         5e:f6:08:8f:84:d7:e3:b0:2b:5d:fd:b9:45:4c:5e:c1:c1:39:
         7f:79:49:4c:de:5e:fe:8d:6b:3f:a2:0d:f3:86:d5:da:33:9e:
         6a:1e:3d:9f:76:f4:39:47:e8:bb:cb:e8:46:56:6f:e2:1a:a3:
         b3:c3:a6:bd:d2:bb:94:b8:4a:78:d2:fa:fc:1f:3d:ec:d1:e8:
         6d:6e:cc:4f:a9:98:ba:d4:5f:be:81:7c:fc:87:9b:67:fa:0d:
         8e:21:a6:7b:85:94:42:6a:d8:d1:cd:89:b8:7e:8e:42:6a:d4:
         1e:f5:77:3d:f2:19:30:2f:7e:0b:7d:24:ef:8a:b5:55:cd:10:
         f5:85:c2:79:66:18:27:a2:5a:34:34:60:69:3b:75:ce:fe:a4:
         92:3a:9a:ee:c4:75:1e:9b:43:58:99:e1:59:42:91:c5:eb:f1:
         de:e6:cb:d2:a9:67:f0:07:de:9d:ff:c5:4e:64:e1:c3:f5:29:
         d4:46:dc:c0:57:40:f9:2b:ba:3c:95:2b:c1:9e:ee:ac:4a:3e:
         db:8f:b7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:40:24 2026 by rpki-client