Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.mft
File:                     C-d565C-fVvgwdxIps0j29Q7l8g.mft (raw, json)
Hash identifier:          SbdL2yoxNv6lktl0PsqANx0ff255PwvJzzfu5SY+KlI=
Subject key identifier:   79:85:61:34:6B:14:CA:21:16:8A:CD:BD:73:04:81:C5:C6:89:59:E8
Authority key identifier: 0B:E7:79:EB:90:BE:7D:5B:E0:C1:DC:48:A6:CD:23:DB:D4:3B:97:C8
Certificate issuer:       /CN=0be779eb90be7d5be0c1dc48a6cd23dbd43b97c8
Certificate serial:       019E31BBDBFD0F0EE366379D1F2A2FA6C595
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C-d565C-fVvgwdxIps0j29Q7l8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.mft
Manifest number:          1911
Signing time:             Sat 16 May 2026 17:00:55 +0000
Manifest this update:     Sat 16 May 2026 17:00:55 +0000
Manifest next update:     Sun 17 May 2026 17:00:55 +0000
Files and hashes:         1: C-d565C-fVvgwdxIps0j29Q7l8g.crl (hash: UVcihZTgJS9Y3Q96DubnG8azohoILebvjOiSw8XPcus=)
                          2: Pug_p9HITgpm7BJCSDWU0O14f6k.roa (hash: ZRQX3KG8bE/bbw5v9G0xJ8TDZlB8FFTvWWz9Ahu2Og0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C-d565C-fVvgwdxIps0j29Q7l8g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:bb:db:fd:0f:0e:e3:66:37:9d:1f:2a:2f:a6:c5:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0be779eb90be7d5be0c1dc48a6cd23dbd43b97c8
        Validity
            Not Before: May 16 17:00:55 2026 GMT
            Not After : May 17 17:00:55 2026 GMT
        Subject: CN=798561346b14ca21168acdbd730481c5c68959e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b1:b8:2b:3e:b5:7d:b8:88:c3:ae:6b:b0:7a:
                    6a:e3:fc:29:5f:40:b7:a1:81:c4:95:a6:bb:96:67:
                    70:28:89:fc:c0:70:3f:71:a0:33:2c:0f:29:1c:80:
                    28:51:3b:7c:96:17:c9:92:f1:99:92:13:65:75:56:
                    05:80:23:8a:ee:66:d2:27:eb:5b:ea:33:79:19:c9:
                    8e:6b:01:41:ad:c2:0b:72:3b:e5:23:17:2d:56:57:
                    1d:ab:79:43:96:26:f4:09:50:ab:51:f5:6c:e4:73:
                    11:5b:4b:cc:c3:4c:5e:a3:34:88:44:66:9e:f0:6b:
                    80:41:fc:98:c8:77:e4:93:9f:6b:4b:c4:c1:13:84:
                    f2:0b:dc:2a:03:c1:9b:ac:e5:24:91:d2:ef:85:3d:
                    91:be:d7:b6:b1:1e:4c:4b:1d:4c:5c:43:cc:e7:5c:
                    33:3a:12:a8:a1:ac:c4:8e:63:0e:43:a6:d3:58:43:
                    cb:5a:b6:92:c1:18:30:03:3a:3b:88:96:c4:72:7e:
                    7c:5e:ba:a3:7e:cb:28:d4:58:9e:bd:5b:d3:71:fb:
                    c2:a7:88:87:ac:9b:0c:c1:fb:bf:ae:df:ab:cb:78:
                    f4:0c:3c:df:bb:b3:d3:d9:75:f3:58:72:bb:94:66:
                    91:75:30:7f:1c:ba:f7:16:0c:52:54:50:ca:76:41:
                    d4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:85:61:34:6B:14:CA:21:16:8A:CD:BD:73:04:81:C5:C6:89:59:E8
            X509v3 Authority Key Identifier:
                keyid:0B:E7:79:EB:90:BE:7D:5B:E0:C1:DC:48:A6:CD:23:DB:D4:3B:97:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-d565C-fVvgwdxIps0j29Q7l8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:09:83:a7:62:c6:28:c1:19:aa:c7:50:bb:ea:a4:2e:7b:42:
         0e:61:a7:d6:40:4d:b2:9f:f2:07:18:af:bd:46:93:28:3a:5e:
         53:13:b6:7f:c3:63:ea:82:1e:ae:24:c6:c6:c8:cc:69:f9:56:
         aa:e1:a0:59:4c:76:02:ec:27:73:38:bb:75:c1:6b:f7:4b:28:
         fa:c1:e4:d4:dd:72:41:9e:10:57:c0:65:6c:f0:1f:ad:c5:2b:
         29:0f:da:2a:00:a7:8f:44:dd:ca:c8:a6:23:d2:22:86:9a:b1:
         34:b0:9c:73:02:66:42:25:cc:99:1b:10:76:92:52:a7:27:48:
         27:5b:2c:76:a0:16:52:f0:f7:62:5b:a1:93:e5:a8:74:1d:8b:
         dc:84:cf:ee:d4:9c:ce:a2:8f:19:df:f0:27:c9:e7:d6:2a:23:
         76:00:a7:25:06:77:94:9a:44:a5:36:c9:b9:42:06:6c:cf:50:
         40:e7:85:28:eb:a3:9e:14:a3:1c:0f:23:b6:88:e3:d5:e6:95:
         25:59:70:55:e1:c8:2c:50:8e:15:3d:d6:36:37:c9:77:75:10:
         0c:6c:1c:66:00:da:75:71:fe:f2:c3:69:16:a1:e4:2d:9f:7e:
         e6:4a:60:54:32:b8:25:e4:5c:f6:5e:80:8a:79:aa:fd:08:3c:
         a1:42:c0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:32:47 2026 by rpki-client