Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft
File:                     8aBsbBCOlBmyzbIdSLSaa71sFt8.mft (raw, json)
Hash identifier:          nGItturfXyb2Q4y+aNaglxrRuNObz1V+E79je/ZNJSA=
Subject key identifier:   1D:D5:69:6A:E7:F9:CA:CC:AF:EB:DC:8D:8F:47:E9:4D:9B:A3:39:D0
Authority key identifier: F1:A0:6C:6C:10:8E:94:19:B2:CD:B2:1D:48:B4:9A:6B:BD:6C:16:DF
Certificate issuer:       /CN=f1a06c6c108e9419b2cdb21d48b49a6bbd6c16df
Certificate serial:       019E30E006A7F5D7FE3187ED01618522C8DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft
Manifest number:          18C7
Signing time:             Sat 16 May 2026 13:00:48 +0000
Manifest this update:     Sat 16 May 2026 13:00:48 +0000
Manifest next update:     Sun 17 May 2026 13:00:48 +0000
Files and hashes:         1: 07OOHdmV5hEQolio37YsYELpfmM.roa (hash: ZakJp9i9YRT4a4PvS+En0I9CXQ4v7HJRNOWS65tarGM=)
                          2: 8aBsbBCOlBmyzbIdSLSaa71sFt8.crl (hash: T2hh3709+r9hPcjjtCqfpFU4eAfR9rBm7xleP13h+6Y=)
                          3: ZTdRtMHn9MCDhvPMjYCC0Pxr1RI.roa (hash: sRz/UR+fsg7CPIL6g1R/rktvKe/HDvg2UOoVG8Jt4bw=)
                          4: vLT1U1k90JDYd1QSTpdp7-5jPm8.roa (hash: tl575EH5XzvM2v0Ar/gj9D2hmKLvwaQZml6OLGCa5aE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:06:a7:f5:d7:fe:31:87:ed:01:61:85:22:c8:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1a06c6c108e9419b2cdb21d48b49a6bbd6c16df
        Validity
            Not Before: May 16 13:00:48 2026 GMT
            Not After : May 17 13:00:48 2026 GMT
        Subject: CN=1dd5696ae7f9caccafebdc8d8f47e94d9ba339d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a0:6e:4e:cf:cb:07:f8:a5:9b:45:ee:8b:4a:
                    f5:5c:c0:ce:45:dc:55:85:25:2b:3f:73:62:77:1a:
                    43:d5:61:3b:56:52:39:ca:ab:38:3a:11:d0:42:92:
                    2a:80:16:a1:88:15:d6:9e:14:23:5c:d8:56:7d:c2:
                    ce:f2:92:8e:07:e1:dc:81:51:e1:1b:d4:c6:0b:33:
                    2e:55:6f:23:b7:30:13:ac:4d:82:c5:22:42:3a:59:
                    cd:ee:6a:4f:8b:97:fc:94:0a:2e:d9:95:bd:18:30:
                    3e:06:ee:46:b1:cd:2f:ea:45:7a:3f:c2:3c:a6:82:
                    fd:19:c5:c9:e1:b6:d3:54:72:46:5b:f1:9a:16:71:
                    b0:4a:90:6d:3e:70:15:4c:94:e7:80:89:98:eb:8d:
                    3b:2c:df:b2:24:87:ab:1d:9c:b9:8e:29:dc:76:b3:
                    62:68:27:b8:8a:dd:f6:d2:2a:db:6a:95:69:98:70:
                    87:2c:44:4e:d4:3d:58:05:30:98:7d:52:1e:02:a0:
                    9d:bb:06:6d:87:ac:91:b6:63:20:4b:ab:e3:98:c4:
                    50:94:a7:6e:7a:10:d8:9c:74:1a:9b:5b:c7:12:7c:
                    f7:aa:01:66:82:4f:bc:45:ca:e0:a8:1c:8b:b9:cd:
                    95:78:29:b6:53:f9:c0:f7:e1:a2:bd:4e:0e:19:c0:
                    8d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D5:69:6A:E7:F9:CA:CC:AF:EB:DC:8D:8F:47:E9:4D:9B:A3:39:D0
            X509v3 Authority Key Identifier:
                keyid:F1:A0:6C:6C:10:8E:94:19:B2:CD:B2:1D:48:B4:9A:6B:BD:6C:16:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:23:50:2a:1a:4b:b6:71:e5:e2:5e:e3:a3:f1:af:66:a8:d7:
         5e:e0:91:93:81:dc:44:df:c5:71:76:20:d3:6e:d2:0d:26:d1:
         e1:57:82:cc:50:e5:a3:06:9e:0a:e0:e0:72:ed:e2:4c:4e:23:
         fe:3b:de:47:36:2a:a1:e3:32:b3:d3:29:1f:b3:83:ff:56:19:
         ba:09:b1:65:d4:38:fe:c6:d0:13:ad:dd:4c:9e:f2:7b:71:fa:
         1a:75:d4:e6:8b:34:da:29:00:02:ff:d4:1c:28:4c:19:a1:67:
         46:8f:f1:a3:18:d7:61:f4:f7:0c:cb:98:1b:ec:10:da:78:c6:
         8e:cf:9b:88:00:4b:96:c0:e4:3c:7f:58:f0:dd:b7:c8:af:04:
         51:7e:41:ba:64:34:1a:16:4e:8e:16:e7:5a:15:c1:fb:b2:b2:
         5d:28:0a:74:9c:03:ce:28:af:55:6e:e9:b2:60:01:3d:f9:89:
         4d:43:e7:1d:2d:0a:99:8d:47:a3:a3:83:f6:49:20:d7:26:9e:
         fc:07:69:fe:c5:ed:de:7b:e4:ee:23:3a:a2:0b:ef:4f:7f:fc:
         43:08:d2:8e:66:19:d5:54:9c:28:46:0e:8a:62:1e:03:82:72:
         8f:7a:12:fd:a9:86:be:82:5e:f2:07:71:15:f3:86:93:e3:b0:
         bb:b8:07:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4w4Aan9df+MYftAWGFIsjfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYTA2YzZjMTA4ZTk0MTliMmNkYjIxZDQ4YjQ5YTZiYmQ2
YzE2ZGYwHhcNMjYwNTE2MTMwMDQ4WhcNMjYwNTE3MTMwMDQ4WjAzMTEwLwYDVQQD
EygxZGQ1Njk2YWU3ZjljYWNjYWZlYmRjOGQ4ZjQ3ZTk0ZDliYTMzOWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6BuTs/LB/ilm0Xui0r1XMDORdxV
hSUrP3NidxpD1WE7VlI5yqs4OhHQQpIqgBahiBXWnhQjXNhWfcLO8pKOB+HcgVHh
G9TGCzMuVW8jtzATrE2CxSJCOlnN7mpPi5f8lAou2ZW9GDA+Bu5Gsc0v6kV6P8I8
poL9GcXJ4bbTVHJGW/GaFnGwSpBtPnAVTJTngImY6407LN+yJIerHZy5jincdrNi
aCe4it320irbapVpmHCHLERO1D1YBTCYfVIeAqCduwZth6yRtmMgS6vjmMRQlKdu
ehDYnHQam1vHEnz3qgFmgk+8RcrgqByLuc2VeCm2U/nA9+GivU4OGcCNWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3VaWrn+crMr+vcjY9H6U2boznQMB8GA1UdIwQY
MBaAFPGgbGwQjpQZss2yHUi0mmu9bBbfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGFCc2JCQ09sQm15emJJZFNMU2FhNzFzRnQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9kZWY2NDctOTE4Ni00NzI5LWJiOTkt
MTQyZWJlODY5MzE2LzEvOGFCc2JCQ09sQm15emJJZFNMU2FhNzFzRnQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9kZWY2NDctOTE4Ni00NzI5LWJiOTktMTQyZWJlODY5MzE2
LzEvOGFCc2JCQ09sQm15emJJZFNMU2FhNzFzRnQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAICNQKhpL
tnHl4l7jo/GvZqjXXuCRk4HcRN/FcXYg027SDSbR4VeCzFDlowaeCuDgcu3iTE4j
/jveRzYqoeMys9MpH7OD/1YZugmxZdQ4/sbQE63dTJ7ye3H6GnXU5os02ikAAv/U
HChMGaFnRo/xoxjXYfT3DMuYG+wQ2njGjs+biABLlsDkPH9Y8N23yK8EUX5BumQ0
GhZOjhbnWhXB+7KyXSgKdJwDziivVW7psmABPfmJTUPnHS0KmY1Ho6OD9kkg1yae
/Adp/sXt3nvk7iM6ogvvT3/8QwjSjmYZ1VScKEYOimIeA4Jyj3oS/amGvoJe8gdx
FfOGk+Owu7gHZw==
-----END CERTIFICATE-----
Generated at Sat May 16 18:40:07 2026 by rpki-client