Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
File:                     68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft (raw, json)
Hash identifier:          jMW/zaM1wB8twLbs3XE3/6/8n8MStburdcR2WfzfaG4=
Subject key identifier:   BD:6B:94:6F:76:DC:08:98:81:A1:70:7F:32:D7:BE:2D:F5:2D:BC:D8
Authority key identifier: EB:C8:6C:8C:2D:49:5C:9E:BE:42:66:5A:15:13:DE:69:A9:BF:65:53
Certificate issuer:       /CN=ebc86c8c2d495c9ebe42665a1513de69a9bf6553
Certificate serial:       019E30E06479C285554D999042B4A1EA62E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
Manifest number:          190F
Signing time:             Sat 16 May 2026 13:01:12 +0000
Manifest this update:     Sat 16 May 2026 13:01:12 +0000
Manifest next update:     Sun 17 May 2026 13:01:12 +0000
Files and hashes:         1: 68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl (hash: le4e/Hb5EqvCYR2KAj3qzwCyt2bEY8kDkcSG0xi3kJk=)
                          2: G4a9H5UHMlOF2anZRkuQjAXLX4M.roa (hash: rQpuKOb5jMaJjw/2N1tUEol0BJNqAbDDuFn8EFF/SWA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:64:79:c2:85:55:4d:99:90:42:b4:a1:ea:62:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebc86c8c2d495c9ebe42665a1513de69a9bf6553
        Validity
            Not Before: May 16 13:01:12 2026 GMT
            Not After : May 17 13:01:12 2026 GMT
        Subject: CN=bd6b946f76dc089881a1707f32d7be2df52dbcd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:eb:21:49:93:6f:5b:5f:c9:74:94:b1:01:12:
                    00:a9:42:80:d6:a2:12:69:04:d1:ac:41:1f:eb:ec:
                    f6:40:ad:53:88:c7:30:8e:c7:3a:dd:08:c2:89:82:
                    d0:34:80:63:86:0b:cc:08:38:da:f7:58:8d:3b:13:
                    39:ae:d2:40:40:12:98:c2:cb:42:b9:6c:52:af:53:
                    20:cb:17:77:09:ca:e7:c2:08:68:c5:32:0b:d9:cc:
                    93:6e:ed:ad:22:7e:ad:ab:c6:8d:1e:e7:46:a7:a9:
                    f6:ab:46:e9:4b:52:e4:e2:9c:78:f5:4d:b4:3d:9d:
                    5f:ea:0d:f1:14:ba:16:e7:31:51:68:6e:66:55:b9:
                    7d:a7:38:ad:cb:be:e3:af:0e:53:af:d0:c0:9a:70:
                    f9:6c:31:5e:ab:0e:43:f9:64:89:9c:5d:1a:79:61:
                    cb:ca:ca:36:75:cd:f8:65:1a:b9:f9:aa:d0:9b:c5:
                    0b:6a:3b:8b:43:c9:d5:83:15:f1:a9:f0:39:0a:fd:
                    43:8e:10:18:de:48:00:d6:50:dc:08:ea:e7:a8:91:
                    f0:1d:ae:91:89:90:16:fa:df:04:4f:a5:c5:7f:a6:
                    08:0a:64:92:86:5c:75:16:a7:fc:9d:a8:0a:78:f8:
                    3e:98:95:21:21:7e:54:f3:f6:36:7e:09:0a:86:f0:
                    39:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:6B:94:6F:76:DC:08:98:81:A1:70:7F:32:D7:BE:2D:F5:2D:BC:D8
            X509v3 Authority Key Identifier:
                keyid:EB:C8:6C:8C:2D:49:5C:9E:BE:42:66:5A:15:13:DE:69:A9:BF:65:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:7f:85:7c:d0:35:0e:f1:89:01:4a:04:5b:0b:e6:88:36:99:
         d9:65:10:af:5f:50:42:b4:9a:13:91:48:f7:44:0c:5b:77:36:
         4b:ca:60:b1:42:bb:66:a7:3c:e1:39:ae:ea:05:65:47:4d:4e:
         99:0a:19:f8:6b:95:00:0a:41:21:76:b0:c8:0b:1a:39:6d:2d:
         de:a9:84:90:a7:70:0f:4a:a1:9a:d3:8e:61:26:84:c9:72:26:
         28:fd:27:f4:98:b1:64:01:8b:2c:3b:78:e8:c1:bc:d3:11:b3:
         91:b1:3a:26:d7:3a:03:4d:85:c7:94:50:ac:e0:a2:71:88:a0:
         f2:31:3a:76:98:09:0f:5e:f3:49:37:f3:1d:ee:ac:8e:9f:40:
         ed:6c:99:41:d1:02:c2:fd:f0:b7:2e:50:61:18:be:ed:a5:22:
         cc:26:88:a4:13:59:31:9d:46:05:21:2a:6d:66:69:d0:b0:44:
         bd:d3:0c:88:97:5b:4e:b3:fe:bf:ee:fe:3c:66:0e:a6:4e:50:
         bc:3a:3c:50:92:e4:7c:7a:f9:05:21:69:1a:b8:1d:ad:e4:aa:
         54:1c:df:64:a1:49:88:6e:e1:01:b1:78:91:c7:70:0f:f4:b6:
         09:c8:b7:e2:12:c8:fd:57:74:eb:0f:54:af:61:d9:41:a3:1a:
         3b:50:32:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4w4GR5woVVTZmQQrSh6mLlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYzg2YzhjMmQ0OTVjOWViZTQyNjY1YTE1MTNkZTY5YTli
ZjY1NTMwHhcNMjYwNTE2MTMwMTEyWhcNMjYwNTE3MTMwMTEyWjAzMTEwLwYDVQQD
EyhiZDZiOTQ2Zjc2ZGMwODk4ODFhMTcwN2YzMmQ3YmUyZGY1MmRiY2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/OshSZNvW1/JdJSxARIAqUKA1qIS
aQTRrEEf6+z2QK1TiMcwjsc63QjCiYLQNIBjhgvMCDja91iNOxM5rtJAQBKYwstC
uWxSr1Mgyxd3CcrnwghoxTIL2cyTbu2tIn6tq8aNHudGp6n2q0bpS1Lk4px49U20
PZ1f6g3xFLoW5zFRaG5mVbl9pzity77jrw5Tr9DAmnD5bDFeqw5D+WSJnF0aeWHL
yso2dc34ZRq5+arQm8ULajuLQ8nVgxXxqfA5Cv1DjhAY3kgA1lDcCOrnqJHwHa6R
iZAW+t8ET6XFf6YICmSShlx1Fqf8nagKePg+mJUhIX5U8/Y2fgkKhvA5sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1rlG923AiYgaFwfzLXvi31LbzYMB8GA1UdIwQY
MBaAFOvIbIwtSVyevkJmWhUT3mmpv2VTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjhoc2pDMUpYSjYtUW1aYUZSUGVhYW1fWlZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8wYjI1MmQtZGI0Yy00MjU2LWFiMDYt
MDZkMTRjZjBhNDZiLzEvNjhoc2pDMUpYSjYtUW1aYUZSUGVhYW1fWlZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8wYjI1MmQtZGI0Yy00MjU2LWFiMDYtMDZkMTRjZjBhNDZi
LzEvNjhoc2pDMUpYSjYtUW1aYUZSUGVhYW1fWlZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMX+FfNA1
DvGJAUoEWwvmiDaZ2WUQr19QQrSaE5FI90QMW3c2S8pgsUK7Zqc84Tmu6gVlR01O
mQoZ+GuVAApBIXawyAsaOW0t3qmEkKdwD0qhmtOOYSaEyXImKP0n9JixZAGLLDt4
6MG80xGzkbE6Jtc6A02Fx5RQrOCicYig8jE6dpgJD17zSTfzHe6sjp9A7WyZQdEC
wv3wty5QYRi+7aUizCaIpBNZMZ1GBSEqbWZp0LBEvdMMiJdbTrP+v+7+PGYOpk5Q
vDo8UJLkfHr5BSFpGrgdreSqVBzfZKFJiG7hAbF4kcdwD/S2Cci34hLI/Vd06w9U
r2HZQaMaO1Ay3Q==
-----END CERTIFICATE-----
Generated at Sat May 16 17:12:31 2026 by rpki-client