Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
File:                     itpL9fGQ85mLgMYUmhRjJw-77hU.mft (raw, json)
Hash identifier:          U/LvYoZ9GLEnfJzD937ezynzTBZgDaQZgkJRyeGoepI=
Subject key identifier:   BD:FA:1E:75:1A:41:8F:94:B2:7A:AD:11:34:B1:95:8E:E6:9B:DA:48
Authority key identifier: 8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
Certificate issuer:       /CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Certificate serial:       019E30A9B87D493FBC20076E24F82AD75C22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
Manifest number:          0EAA
Signing time:             Sat 16 May 2026 12:01:29 +0000
Manifest this update:     Sat 16 May 2026 12:01:29 +0000
Manifest next update:     Sun 17 May 2026 12:01:29 +0000
Files and hashes:         1: 7hmJknF3g0jZ2PzjgnEt6tkUwkk.roa (hash: 0kxSwLIeU1LRwwQYmR17mV6US+bp2NYwjzNIshTtU+0=)
                          2: itpL9fGQ85mLgMYUmhRjJw-77hU.crl (hash: WcPUSyHwwct1QAjSTgPP6q9AA0exDQCQblPxFjYfz4Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a9:b8:7d:49:3f:bc:20:07:6e:24:f8:2a:d7:5c:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
        Validity
            Not Before: May 16 12:01:29 2026 GMT
            Not After : May 17 12:01:29 2026 GMT
        Subject: CN=bdfa1e751a418f94b27aad1134b1958ee69bda48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:74:4e:60:62:86:42:f6:19:b8:08:e5:af:9d:
                    28:bc:90:43:26:ba:27:b5:e7:0a:19:e7:38:ad:29:
                    1e:c3:00:6f:87:cb:e3:f8:48:ed:03:a5:04:ed:51:
                    83:b7:b9:65:76:4e:c1:52:40:c8:6c:f8:f2:6d:0b:
                    a8:3a:0b:82:39:11:9c:5b:3a:06:34:99:1e:b7:42:
                    74:d2:5e:95:c5:43:c7:0c:0a:50:f1:55:5f:c9:39:
                    c3:19:93:2c:56:a5:57:f6:44:ad:69:92:7d:06:3d:
                    03:6d:43:7d:ad:d9:41:ea:f4:b7:85:79:d0:80:f9:
                    1a:cf:61:ea:8e:93:22:56:d2:17:2b:d2:61:c5:4c:
                    22:e8:93:47:cc:00:35:8e:91:9d:33:9f:33:1d:ea:
                    a7:38:8f:fe:58:dc:97:15:79:c3:83:51:e7:ff:45:
                    95:ed:6a:30:3a:59:8c:7e:6b:6d:0f:ab:2e:90:0c:
                    18:dc:23:80:8c:86:1f:fa:37:b0:bb:e0:94:c3:41:
                    20:0c:57:81:4b:35:9d:3c:1a:ad:3d:ea:08:2f:e6:
                    9e:97:f6:60:b1:30:33:5d:2b:2f:24:63:06:5f:d5:
                    53:f7:84:00:24:91:43:54:96:ff:01:63:f8:4c:8d:
                    45:2a:1d:30:c4:c0:87:21:e5:1c:0f:bd:2a:95:61:
                    ac:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:FA:1E:75:1A:41:8F:94:B2:7A:AD:11:34:B1:95:8E:E6:9B:DA:48
            X509v3 Authority Key Identifier:
                keyid:8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:78:0f:33:b6:69:6d:ff:87:a9:a4:20:c4:df:fb:ad:11:81:
         ce:ab:ab:3c:89:cf:c4:bf:f4:bd:52:52:f9:52:30:fb:6b:3f:
         7c:ca:cb:7c:07:8c:d1:4b:d4:e0:9f:12:4c:88:16:aa:3c:1a:
         87:3a:a3:5a:42:4d:ba:ce:2c:05:28:e5:17:c9:31:51:e8:b4:
         6d:18:05:5c:fc:9c:9c:02:ed:fe:af:31:4a:55:82:25:e1:a1:
         e8:ee:cd:a2:9a:74:a3:e9:ec:8c:45:96:ad:9a:54:54:10:7e:
         85:27:75:b7:e4:1f:0d:ca:d7:54:55:75:17:66:48:63:96:c3:
         3a:cf:cd:0e:a6:d2:65:71:02:66:37:d1:f7:e9:82:10:06:c5:
         c3:6f:4e:51:f5:2f:52:0d:eb:4b:39:1a:25:a3:c0:2d:dd:0e:
         28:d1:06:9d:ae:07:48:63:b5:db:fc:39:53:f3:e5:8a:11:73:
         7c:27:d2:03:4d:23:59:d1:7a:a3:68:55:8f:ce:36:12:0e:14:
         5c:bc:1f:3b:9e:cb:33:50:57:5c:7a:2a:7e:e1:2b:9a:87:e7:
         cf:cd:c5:67:be:f8:60:c4:af:2d:73:7e:07:79:7d:af:5f:8e:
         d8:79:fb:18:1f:35:64:68:cb:1e:fb:9d:8f:9c:7a:b8:08:8f:
         74:86:69:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:22:54 2026 by rpki-client