Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft
File:                     1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft (raw, json)
Hash identifier:          fiQeYFktylz5syKwwR7iTkBOcio9fYP8DSAYjE01+Us=
Subject key identifier:   9F:25:47:73:12:36:2D:1E:50:6E:57:CB:E0:00:15:69:7D:C0:CA:9D
Authority key identifier: F8:AD:11:0D:39:E9:5B:54:2D:F8:D2:07:1D:92:45:46:9A:1B:9F:42
Certificate issuer:       /CN=f8ad110d39e95b542df8d2071d9245469a1b9f42
Certificate serial:       019E2F5F6555BC52D2FD63B70E4C6C589D62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft
Manifest number:          190E
Signing time:             Sat 16 May 2026 06:00:41 +0000
Manifest this update:     Sat 16 May 2026 06:00:41 +0000
Manifest next update:     Sun 17 May 2026 06:00:41 +0000
Files and hashes:         1: 1-K0RDTnpW1Qt-NIHHZJFRpobn0I.crl (hash: X95J26jhK0SVUY7kUIKyxDh81Q1qiyK+kNtnV+C1PnQ=)
                          2: bruVcNNMC7Mp6aE6rGzw_JEfi0E.roa (hash: ejjZC1z5chW7R3pjzGKPMBf9E9b1c0msIw7AVev8LY8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 06:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:5f:65:55:bc:52:d2:fd:63:b7:0e:4c:6c:58:9d:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ad110d39e95b542df8d2071d9245469a1b9f42
        Validity
            Not Before: May 16 06:00:41 2026 GMT
            Not After : May 17 06:00:41 2026 GMT
        Subject: CN=9f25477312362d1e506e57cbe00015697dc0ca9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:52:1b:96:63:95:2b:35:51:9d:74:d5:4c:4f:
                    7a:08:73:32:1b:1f:95:18:3a:87:da:1d:2f:05:da:
                    be:2e:08:5c:02:23:63:83:89:7b:a3:82:ad:5f:48:
                    08:6f:ff:65:03:c3:b2:1b:51:54:15:80:93:36:bc:
                    9a:e2:ae:4c:4f:17:c2:88:fb:d7:27:91:67:e3:c8:
                    a3:59:6f:5e:65:fc:c7:9f:87:aa:d0:25:c8:fd:60:
                    42:9e:9c:b5:7e:fc:50:e6:a9:b5:c8:73:f8:ed:53:
                    f8:52:a5:c7:be:5c:aa:61:d7:b9:6d:10:2c:da:8f:
                    23:6f:3b:3f:84:47:2a:2a:c9:ce:fd:c3:77:98:fa:
                    46:f5:bc:65:88:7e:c9:61:8e:40:75:fa:29:da:83:
                    27:cc:b3:fd:a8:7e:d0:ea:61:30:17:c0:28:2a:9d:
                    5f:e6:57:d7:4c:f6:ab:17:72:14:21:48:e2:ec:f1:
                    a8:c0:2f:dd:67:4f:c1:3d:1e:01:a9:92:82:56:99:
                    53:7e:28:78:e9:35:33:d2:5e:73:57:23:e0:73:25:
                    84:06:f0:31:88:03:10:eb:64:2f:60:a9:fb:f2:d2:
                    39:32:be:7d:00:e6:35:48:6c:11:39:3c:0c:d2:24:
                    dc:7c:ef:bb:1a:d9:46:91:3d:60:fc:54:44:6e:10:
                    25:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:25:47:73:12:36:2D:1E:50:6E:57:CB:E0:00:15:69:7D:C0:CA:9D
            X509v3 Authority Key Identifier:
                keyid:F8:AD:11:0D:39:E9:5B:54:2D:F8:D2:07:1D:92:45:46:9A:1B:9F:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:f0:4d:39:16:87:df:cf:a5:27:5e:1b:40:ca:8c:4f:8e:6b:
         5e:6d:57:34:f6:76:7c:f5:66:0e:30:02:62:71:4e:8f:bd:e7:
         fe:05:23:54:e4:11:85:cc:b3:e3:b2:ac:ee:60:82:dc:e9:3f:
         99:27:00:e9:9f:25:08:33:05:10:42:94:c5:f8:68:7e:1d:af:
         2d:a1:2e:7d:72:4b:e2:48:05:73:81:74:46:f9:a6:fd:f6:02:
         c5:73:51:08:1f:20:e3:71:88:45:a7:59:23:9d:38:31:ce:ba:
         7e:04:9a:6e:b0:25:2a:64:d8:e4:62:7a:e0:6d:f4:30:3f:17:
         9c:ee:9b:03:43:70:8e:3b:c4:30:dc:17:c1:bf:7e:0d:9d:52:
         c4:be:19:d4:6e:f3:2f:63:64:14:ad:93:3a:6f:75:70:12:ec:
         36:c4:61:f4:6a:35:ed:b1:f2:b9:85:97:ef:53:c7:4d:10:1f:
         2c:05:7a:6c:4a:6c:89:d1:d7:c4:c4:58:f9:18:f3:c6:5f:01:
         68:ec:46:cc:c6:c9:36:f3:b4:92:b5:2e:02:24:1b:db:9b:44:
         02:3e:94:6c:ae:51:40:de:7e:6f:18:e5:d0:64:8c:bb:d7:4c:
         86:94:0b:e0:75:09:06:0d:0a:b1:ef:f5:8d:87:f4:3e:78:b6:
         65:c4:23:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:24:40 2026 by rpki-client