Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft
File:                     u_Th_bQkqRICI7OnXGzMMbb2Iko.mft (raw, json)
Hash identifier:          O5Ry84O+ohHfj6T2P9fKnTnfXZewHqMIgmWdmZjOTJY=
Subject key identifier:   EF:DE:B0:79:44:A5:CD:47:AF:9A:2F:AC:64:36:7F:27:02:1C:14:18
Authority key identifier: BB:F4:E1:FD:B4:24:A9:12:02:23:B3:A7:5C:6C:CC:31:B6:F6:22:4A
Certificate issuer:       /CN=bbf4e1fdb424a9120223b3a75c6ccc31b6f6224a
Certificate serial:       019E7E5679CE3900D4EF094020E475C92CDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft
Manifest number:          180F
Signing time:             Sun 31 May 2026 14:00:56 +0000
Manifest this update:     Sun 31 May 2026 14:00:56 +0000
Manifest next update:     Mon 01 Jun 2026 14:00:56 +0000
Files and hashes:         1: 7H6l8W7mloQmdCFME5bjkjpVqlI.roa (hash: T59Tl9zcDPQTjILJPoiX/wQPlxPSK4JPOrKNgwU40yY=)
                          2: JFxfDD-AJ-fYeQpwxlNBDToHx_A.roa (hash: +WZonE26u6Ny7SxSfdG+AH9dSkHMv7bOOSC0aT4GGz8=)
                          3: qPRMij18b3UBdhNaWj9X6XYBXVk.roa (hash: FnJYS8FAenTkSU7Qc1cYhhd/LFBxGNSv7vOsAQbJDN8=)
                          4: u_Th_bQkqRICI7OnXGzMMbb2Iko.crl (hash: t3zo6jj8C+H62VXGM4UrZMlS++bPk/2M3ZGUaTof5sA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 01 Jun 2026 11:09:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:7e:56:79:ce:39:00:d4:ef:09:40:20:e4:75:c9:2c:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbf4e1fdb424a9120223b3a75c6ccc31b6f6224a
        Validity
            Not Before: May 31 14:00:56 2026 GMT
            Not After : Jun  1 14:00:56 2026 GMT
        Subject: CN=efdeb07944a5cd47af9a2fac64367f27021c1418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ec:e5:87:39:59:2d:fc:16:22:dd:86:d7:82:
                    c5:6b:ae:cc:2d:f9:a6:be:90:b5:87:ac:b8:1b:c4:
                    8c:9c:46:ac:d1:1a:78:e3:8c:fb:12:48:f7:68:07:
                    b6:76:29:a3:98:0b:3f:b7:4f:f2:15:25:38:66:4a:
                    09:69:15:fd:69:18:53:72:ec:fa:30:5b:78:6b:5e:
                    54:e9:38:e7:f4:e0:60:cd:d0:87:fa:96:88:15:c2:
                    88:b0:18:21:10:bb:ff:16:c3:2b:e1:54:3f:7f:96:
                    f5:f7:f7:50:57:c6:41:81:93:12:b5:99:5c:af:fa:
                    69:72:25:cf:96:ce:47:fd:2f:82:14:d5:71:e1:18:
                    7b:f7:79:3a:fe:77:fc:96:35:f5:9b:9b:ff:ba:57:
                    67:b6:cb:3c:a3:5a:c9:ef:c3:90:b3:88:ff:0e:a7:
                    7b:d7:f0:ab:e8:c4:d2:81:54:69:ab:7e:9d:20:f8:
                    75:72:89:56:ee:56:d7:01:fc:a8:85:bb:9f:6b:3f:
                    d3:19:9b:6c:d4:56:e9:a7:9f:12:9c:c0:eb:60:33:
                    c7:a7:73:aa:06:4a:f1:ec:8f:00:e0:41:f0:9e:c2:
                    a9:6c:43:72:4a:ea:dc:ec:df:02:5f:df:f6:1e:64:
                    7f:e8:c8:42:3c:40:cd:61:a9:13:a4:94:af:6a:06:
                    b5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:DE:B0:79:44:A5:CD:47:AF:9A:2F:AC:64:36:7F:27:02:1C:14:18
            X509v3 Authority Key Identifier:
                keyid:BB:F4:E1:FD:B4:24:A9:12:02:23:B3:A7:5C:6C:CC:31:B6:F6:22:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:98:46:71:33:12:2b:5d:c2:d1:33:ee:4b:7c:80:68:4e:2c:
         18:1b:e7:85:64:24:3d:7f:ec:0e:aa:39:47:b4:92:4c:d1:56:
         d5:b3:66:56:40:48:bd:b4:fc:ce:37:a1:15:c1:83:3a:90:e5:
         6b:bc:14:27:89:64:1f:1e:6f:66:84:32:3b:9b:63:97:5c:74:
         b8:aa:45:09:ed:95:b1:cf:b5:6c:05:6c:7b:ae:d2:6d:9b:34:
         3b:83:70:a1:9b:31:4f:6b:b0:2f:e9:d7:f0:cb:df:d2:7b:99:
         b4:23:2f:52:9e:f2:09:28:46:a2:15:b0:b7:69:d2:b0:f0:3e:
         65:f3:a8:78:df:98:ce:a4:79:72:77:63:71:27:b9:ef:04:9c:
         bb:6a:01:7f:84:0e:09:63:d7:94:e3:ef:00:1c:67:99:5e:c0:
         43:29:ef:65:8a:cf:f2:3f:e4:1a:a6:45:2c:ac:eb:89:49:b6:
         0a:fb:23:20:5c:7c:0a:a1:9c:a7:ba:2e:2c:a1:d0:0f:fa:77:
         48:22:e4:d5:7c:29:2c:b5:3e:84:4f:d8:2c:0c:7e:d0:98:09:
         26:7f:e0:a4:fc:9a:45:15:f6:1a:26:0b:5e:d4:ee:46:35:e2:
         3e:61:be:0c:0c:24:67:0c:fd:2e:82:b4:9f:fc:47:e3:34:93:
         28:bc:bd:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 18:56:21 2026 by rpki-client