Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
File:                     oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft (raw, json)
Hash identifier:          2BsmZxDp+T3LwLZqay8sRGpaVSsr+W8IyORRWNQn9HQ=
Subject key identifier:   98:18:17:85:05:0E:95:D2:C9:4E:50:96:EC:71:60:4C:95:54:D5:BB
Authority key identifier: A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38
Certificate issuer:       /CN=a088b0547f09fe9224050d70a523da5bedbe0738
Certificate serial:       019E1F10D49DC8DB813CF656F57AADD70138
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
Manifest number:          0CE6
Signing time:             Wed 13 May 2026 02:00:57 +0000
Manifest this update:     Wed 13 May 2026 02:00:57 +0000
Manifest next update:     Thu 14 May 2026 02:00:57 +0000
Files and hashes:         1: 04FbY6kBRpqiGP3AkiBuCWu5Bes.roa (hash: HoNtS+1Oc+MT8EGjXP3z2c8KS6IAUrdzH1rtxmawMCg=)
                          2: FD9UserVnd9g-B97_3OHBh6hGow.roa (hash: alF7jO0INJ/TLd2wbZJoqP534uCICHCvkQ7BKchM5M0=)
                          3: cbaJKNAhgJAhFE_4zoZbKJm5V5s.roa (hash: Rcxed2Cw/y7WBNPlRsNkcmXlhqGDs0w++1hNx6Mbo5U=)
                          4: oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl (hash: WJkiPGOLo5upQIK0JyDy7IgDe7zWydGRG78Fd3prf0Q=)
                          5: uUoKvpcOk1MN1N-RCShYaCzs_Ms.roa (hash: kQd1YigGHb1xiD3rBDQj/Z4qQiqNkv9K2U3Hpfudh9s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 02:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:d4:9d:c8:db:81:3c:f6:56:f5:7a:ad:d7:01:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a088b0547f09fe9224050d70a523da5bedbe0738
        Validity
            Not Before: May 13 02:00:57 2026 GMT
            Not After : May 14 02:00:57 2026 GMT
        Subject: CN=98181785050e95d2c94e5096ec71604c9554d5bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:dd:b5:21:c5:45:9d:e5:20:8e:ba:82:10:a1:
                    ad:01:d7:89:5d:34:55:83:32:76:43:bc:00:80:71:
                    da:0c:4a:a3:6f:34:7f:07:b8:bb:18:a5:bb:39:7a:
                    89:f3:69:ea:56:ec:bd:f4:c2:f7:9f:6d:35:1b:d0:
                    81:8f:c8:b8:4b:ba:7d:28:99:0f:8e:5b:0f:55:80:
                    3c:90:eb:b1:58:3b:71:ea:9f:2e:41:ba:5b:60:85:
                    ff:e6:41:86:5b:cb:13:83:39:57:6a:75:45:23:0e:
                    1b:48:66:3e:e9:c8:81:08:0a:7b:ef:fe:2c:4f:84:
                    47:8e:76:5d:d8:0f:ef:06:5a:bf:d7:ff:f1:72:43:
                    4c:e9:35:03:06:b2:5f:d9:56:8e:17:f2:56:ec:d2:
                    36:5b:6e:4b:16:fa:bd:fe:42:5c:93:18:96:7c:a0:
                    40:33:0b:96:82:8d:5c:13:11:bb:ff:a0:ce:55:f7:
                    98:a1:2e:fa:57:4e:93:11:0e:36:b7:6f:9b:25:a3:
                    d4:22:fd:c5:54:4e:4e:fe:a8:f8:42:1c:95:51:7c:
                    d5:19:0f:f2:de:b5:2b:7f:b2:40:14:33:73:95:2e:
                    28:13:a9:30:37:20:31:dd:00:e5:de:a5:b5:f0:c6:
                    eb:24:1d:78:6e:69:a4:bf:c8:a9:7e:7a:e8:f9:05:
                    84:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:18:17:85:05:0E:95:D2:C9:4E:50:96:EC:71:60:4C:95:54:D5:BB
            X509v3 Authority Key Identifier:
                keyid:A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:bc:57:0f:69:e9:fa:4c:13:e5:06:1c:12:01:38:52:85:f1:
         c1:24:70:9f:9b:dd:68:ac:6d:ca:6d:b0:2d:93:8b:b2:80:40:
         1c:b5:17:de:95:d9:5a:df:da:73:b6:f8:37:58:6d:e5:56:e9:
         e5:79:2e:49:3c:9b:9c:1e:14:7e:23:86:83:b3:68:c9:74:4b:
         d1:4b:98:e1:3e:a9:84:73:eb:d6:76:a5:bc:47:7c:a9:b6:39:
         34:71:77:d5:d3:b5:67:70:7c:cd:f3:c0:c8:67:aa:7f:70:10:
         43:c8:b1:e1:8b:25:65:c2:c6:da:08:8a:18:2f:61:3d:df:5d:
         e9:a9:a2:88:b4:e0:90:49:68:d0:45:ef:21:e7:90:13:a7:82:
         b7:5d:a6:32:9d:b9:a8:cc:67:4e:f9:5e:00:87:d6:d4:db:e3:
         dd:0f:08:46:39:a8:44:c5:83:db:d9:55:0a:47:5f:ab:88:6f:
         37:da:34:40:01:a8:55:36:a5:27:5e:3d:b4:e6:27:aa:f4:c9:
         61:4f:68:64:34:fd:93:c7:bb:33:70:56:f0:81:2a:23:8f:14:
         e2:99:76:23:90:c6:d3:43:ac:39:00:2c:84:bf:5b:12:c3:60:
         14:72:cd:f3:58:95:39:47:ad:a0:7f:28:ea:17:6f:54:e6:3c:
         b1:21:c4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:49:35 2026 by rpki-client