Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft
File:                     1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft (raw, json)
Hash identifier:          S0SOypMR2naB+Pngddc/Gt7DP3EKUAFB4UHI7ee0h3Y=
Subject key identifier:   BC:7D:35:55:C0:B0:68:12:98:22:3B:EA:C0:AA:89:30:F9:74:C6:FD
Authority key identifier: F9:58:7C:5B:0D:41:55:16:D7:2F:59:14:F5:F5:FB:52:8A:32:A1:2C
Certificate issuer:       /CN=f9587c5b0d415516d72f5914f5f5fb528a32a12c
Certificate serial:       019E314E62680A9387A6BAD3969DC2BFACD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft
Manifest number:          190F
Signing time:             Sat 16 May 2026 15:01:21 +0000
Manifest this update:     Sat 16 May 2026 15:01:21 +0000
Manifest next update:     Sun 17 May 2026 15:01:21 +0000
Files and hashes:         1: 1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl (hash: 61CVk1pzHlskpy0iMudvZhLIIK8QhbvsmUbok6qwxxY=)
                          2: WKc4Vos6EgMcwq2jPs8Vo_T2gKg.roa (hash: cCxzpDSEtEshoJyIVMHZls1v4t+x9ri7tVY5Xlsvk/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4e:62:68:0a:93:87:a6:ba:d3:96:9d:c2:bf:ac:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9587c5b0d415516d72f5914f5f5fb528a32a12c
        Validity
            Not Before: May 16 15:01:21 2026 GMT
            Not After : May 17 15:01:21 2026 GMT
        Subject: CN=bc7d3555c0b0681298223beac0aa8930f974c6fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2f:8f:ea:da:f0:a8:cf:e5:23:c8:d6:be:9b:
                    bc:ea:86:26:2a:b7:a6:cb:1f:01:d3:00:99:3e:e6:
                    78:0f:96:16:aa:22:f9:95:0e:69:35:1b:62:42:41:
                    b3:4d:7d:64:57:66:ec:56:39:45:c0:ae:c6:44:87:
                    6f:8b:8e:03:43:0b:79:20:09:4f:5b:9d:75:86:89:
                    12:7c:5b:31:ce:e9:94:b8:53:13:6d:55:3d:65:10:
                    a3:8b:96:15:6c:51:87:7f:89:08:29:2d:c6:03:10:
                    74:d7:b9:dd:13:f5:2d:8b:68:f4:84:b6:26:a2:26:
                    53:1d:0a:6a:8a:c0:84:19:57:f1:28:db:71:3f:07:
                    6a:63:68:9d:b7:ad:5e:08:b8:6d:5f:c2:0f:67:7e:
                    74:b6:f1:8f:f8:3a:c3:63:78:0c:d2:a8:5d:0e:6d:
                    6c:06:68:e1:c9:74:f9:0a:3b:c8:4d:91:9a:9f:01:
                    5d:3e:21:76:37:55:03:7e:41:78:fd:83:32:dc:6f:
                    be:50:ed:dd:50:80:d5:7c:d6:52:9f:98:66:82:be:
                    6d:24:82:88:84:76:b4:6e:af:c5:9c:ec:9b:54:b5:
                    a6:fa:ec:f4:35:05:97:2d:fa:3c:7d:0b:66:15:06:
                    47:7a:a8:40:64:44:d4:be:8e:b9:e5:94:77:0f:66:
                    81:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:7D:35:55:C0:B0:68:12:98:22:3B:EA:C0:AA:89:30:F9:74:C6:FD
            X509v3 Authority Key Identifier:
                keyid:F9:58:7C:5B:0D:41:55:16:D7:2F:59:14:F5:F5:FB:52:8A:32:A1:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:0a:9d:04:7d:9f:b3:01:0c:d6:0e:3a:24:bd:3a:d5:b7:46:
         e5:11:74:b3:e1:99:0f:3b:c0:d9:c7:52:81:02:31:84:d7:fc:
         1b:2e:18:3b:af:b8:9b:67:dd:85:66:e1:f3:00:79:87:fe:8b:
         f8:66:96:2a:4e:22:72:5b:3f:69:b6:72:be:b9:2e:01:b9:04:
         34:b3:01:d7:52:18:f9:fb:0b:92:30:31:7e:4e:a9:b6:fe:9f:
         50:55:aa:57:d0:52:4c:94:5c:3a:5a:bf:db:c4:de:cd:ef:77:
         8e:12:0b:5d:d8:8f:d9:89:10:2a:62:8a:85:b9:d1:d4:26:2b:
         19:79:14:39:a7:e4:46:f5:c4:25:fd:e2:e7:2a:42:cb:a6:1b:
         d1:84:12:8c:a8:6d:c4:55:52:37:c8:bc:3d:46:6e:2b:2e:29:
         57:75:5b:13:fe:4f:4b:fb:84:81:5f:8a:f5:65:ec:32:01:58:
         a9:1d:70:2a:aa:a5:cd:62:d5:02:c9:ea:6a:5d:cc:eb:4e:3e:
         0a:72:b1:b0:f9:d8:e1:a1:3a:41:61:d2:3c:56:94:72:cd:e0:
         4b:0e:84:b4:6a:bd:78:18:bb:be:3d:76:28:96:11:11:a9:8f:
         d7:9c:3c:a1:df:8e:4e:07:59:62:b7:8b:2b:26:23:e2:0c:42:
         a8:dd:85:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:32:33 2026 by rpki-client