Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.mft
File:                     80YWUeW-JFCXcpdbqYxw7G7jzXs.mft (raw, json)
Hash identifier:          4LG8UVefORSTSZdytE8Qdfjys++U96aL0I6Euf8RmRc=
Subject key identifier:   08:C8:CB:1B:2F:8E:39:8C:91:B3:D6:17:0F:BD:B4:8D:97:26:E6:FD
Authority key identifier: F3:46:16:51:E5:BE:24:50:97:72:97:5B:A9:8C:70:EC:6E:E3:CD:7B
Certificate issuer:       /CN=f3461651e5be24509772975ba98c70ec6ee3cd7b
Certificate serial:       019E28B91C8AD44A1C56B829D1172D51283C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/80YWUeW-JFCXcpdbqYxw7G7jzXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.mft
Manifest number:          0371
Signing time:             Thu 14 May 2026 23:01:20 +0000
Manifest this update:     Thu 14 May 2026 23:01:20 +0000
Manifest next update:     Fri 15 May 2026 23:01:20 +0000
Files and hashes:         1: 80YWUeW-JFCXcpdbqYxw7G7jzXs.crl (hash: SrGea00QeNpIXdooPS/nfaMojY5h8dvkiau3m/4wPV4=)
                          2: Qtc_zuFzRUz7J07L37X5qvUUnhs.roa (hash: D6SdWG5JeosyZFAglIkmKFjIaBi039zmz2skeCVDiYg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/80YWUeW-JFCXcpdbqYxw7G7jzXs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 23:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:28:b9:1c:8a:d4:4a:1c:56:b8:29:d1:17:2d:51:28:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3461651e5be24509772975ba98c70ec6ee3cd7b
        Validity
            Not Before: May 14 23:01:20 2026 GMT
            Not After : May 15 23:01:20 2026 GMT
        Subject: CN=08c8cb1b2f8e398c91b3d6170fbdb48d9726e6fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9d:32:1d:bb:26:19:98:74:55:6f:df:b5:d0:
                    59:17:b0:63:48:37:9d:74:6e:dc:24:02:58:f5:f9:
                    dc:76:91:fe:e4:8d:af:e4:04:5d:b4:8a:17:c7:6e:
                    85:10:f4:a3:a1:10:66:15:bb:6b:54:7c:94:a6:18:
                    e5:85:20:de:0a:c3:7b:75:0a:b9:4e:1c:c9:3e:31:
                    57:62:53:42:4a:14:51:de:cd:fb:37:7b:80:c8:b6:
                    48:95:e3:34:67:93:19:cc:08:dd:d6:7a:7e:61:b5:
                    2c:18:eb:9d:c0:32:15:5e:1e:d1:85:00:18:01:29:
                    c1:9d:d3:f5:db:4a:19:1a:3b:4e:59:3a:3a:99:79:
                    d0:ea:ec:af:19:51:00:a9:22:9c:d8:b0:2f:24:98:
                    b1:8f:8f:02:79:e0:dc:3a:d3:05:8d:d5:84:5e:cc:
                    31:1b:63:1f:d2:16:4b:33:14:2e:da:34:79:b6:62:
                    bd:2b:e0:19:3b:49:a4:44:5f:65:54:51:c4:cb:a6:
                    77:d0:1d:9a:04:45:48:98:76:6e:2a:ea:18:b0:c5:
                    32:78:59:14:63:7b:97:10:49:50:7e:77:a9:94:16:
                    bd:e4:a1:1f:10:52:88:69:5e:72:b5:54:ec:a4:75:
                    30:c0:40:d3:bc:20:92:8d:1a:a7:05:e6:de:97:1e:
                    c7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C8:CB:1B:2F:8E:39:8C:91:B3:D6:17:0F:BD:B4:8D:97:26:E6:FD
            X509v3 Authority Key Identifier:
                keyid:F3:46:16:51:E5:BE:24:50:97:72:97:5B:A9:8C:70:EC:6E:E3:CD:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80YWUeW-JFCXcpdbqYxw7G7jzXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:9c:ac:e1:ff:db:ae:31:82:4b:5c:60:7c:22:66:95:8b:3e:
         0b:2d:7d:8d:fb:58:76:d5:13:64:bd:b7:31:25:18:55:f0:a1:
         e2:8f:e8:5c:03:44:9b:95:b8:a0:b5:76:9d:df:89:77:93:dc:
         55:62:c5:c2:6b:d2:f1:7b:f0:f7:18:b5:67:83:ac:f0:78:0f:
         c7:33:16:4f:8a:bd:37:8c:9b:7d:53:c1:6b:f7:32:44:6c:fe:
         c3:f4:bc:88:4e:f5:e2:21:52:4c:81:be:26:bc:de:15:a7:10:
         81:35:d7:3d:9b:c4:2e:28:98:07:f3:52:a5:0f:99:35:a2:44:
         d4:76:f6:ff:d7:a5:9c:2e:2c:72:66:68:91:3b:bf:ba:75:49:
         f9:a0:8a:fa:56:5a:92:fb:7c:37:c6:2f:9f:61:c9:13:e7:a0:
         3f:81:22:ce:b9:03:26:12:ff:02:32:21:6b:fa:4f:cc:a5:ee:
         3f:0e:ff:db:df:b6:6a:6f:a1:34:9c:13:74:76:c8:44:be:09:
         db:7e:09:08:59:75:1a:8a:dc:d2:70:51:8f:1c:3a:aa:0b:18:
         10:d7:43:27:1e:6e:e1:ed:8e:03:c4:09:ac:80:74:44:57:fd:
         ba:53:a9:32:1e:76:c9:b8:8f:63:ca:23:b3:46:60:51:60:6b:
         52:32:3d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:58:29 2026 by rpki-client