Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
File:                     8bv5vuUx897i0Du_Tmnvgu7bma8.mft (raw, json)
Hash identifier:          sq3/P5cuQ+eEv1fBX1uAsQsq+gt7w8bWF7FsH3SWvOw=
Subject key identifier:   34:EC:D7:1A:F7:FC:3B:18:38:1B:ED:4D:52:A6:83:59:67:08:2B:1C
Authority key identifier: F1:BB:F9:BE:E5:31:F3:DE:E2:D0:3B:BF:4E:69:EF:82:EE:DB:99:AF
Certificate issuer:       /CN=f1bbf9bee531f3dee2d03bbf4e69ef82eedb99af
Certificate serial:       019E30721D991E229AA4F8F24D73D4F5B98E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
Manifest number:          14BA
Signing time:             Sat 16 May 2026 11:00:45 +0000
Manifest this update:     Sat 16 May 2026 11:00:45 +0000
Manifest next update:     Sun 17 May 2026 11:00:45 +0000
Files and hashes:         1: 8bv5vuUx897i0Du_Tmnvgu7bma8.crl (hash: OoOx5vEXXsAwZbvqEf3uT7eVy1f/qU14LzRguCr0YcM=)
                          2: OYgre_-TZIfJxOW5CqDrgpwgkMo.roa (hash: OBphoVWe1wpCXSnuX5Vie+bHC5Q80K+aLt8j/e5pkXQ=)
                          3: PQaM9i-ZFvgM-odibb8AZoCwaLw.roa (hash: 6qm8ZSVZvMA/kQTFFqEROzq6H8nPq+g1vFjlYN9Vl3Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:1d:99:1e:22:9a:a4:f8:f2:4d:73:d4:f5:b9:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1bbf9bee531f3dee2d03bbf4e69ef82eedb99af
        Validity
            Not Before: May 16 11:00:45 2026 GMT
            Not After : May 17 11:00:45 2026 GMT
        Subject: CN=34ecd71af7fc3b18381bed4d52a6835967082b1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:6d:c5:30:af:c2:7d:19:b6:47:ff:9b:f5:09:
                    43:9f:ac:3a:a9:ea:b8:3e:91:6f:d6:fb:21:1e:6b:
                    f1:a3:e1:e0:cc:d8:b0:10:ef:d0:81:93:d0:67:a5:
                    f5:fc:1b:5f:7c:c3:d4:78:1e:6e:8e:74:7b:76:ae:
                    74:ac:4f:33:71:ff:11:a3:ec:12:0a:d0:7a:f4:bf:
                    e0:9f:ad:83:dd:9c:7d:b1:5a:36:60:0b:4f:f8:05:
                    55:67:0c:76:c3:4e:3e:8c:89:f6:4b:55:87:34:4b:
                    82:0c:77:3a:97:47:09:94:9b:22:fa:be:24:44:62:
                    9f:75:f5:b6:02:37:97:07:ac:ab:7c:e9:4b:1e:0b:
                    61:a3:4e:4e:6c:ce:39:47:0b:5b:3a:15:3a:e8:72:
                    ad:7a:4c:96:c1:07:f3:31:5a:8b:4c:de:53:78:90:
                    0d:64:c0:f0:19:77:6e:cc:e8:2b:0e:49:df:94:61:
                    d3:2e:fd:63:cb:c0:67:c2:b6:85:99:5b:9c:56:3c:
                    45:d9:10:64:dc:5a:ad:a8:35:70:05:8e:5a:88:40:
                    2e:ac:f1:20:7c:92:7b:de:02:56:f7:5d:65:8a:cd:
                    14:20:94:f5:fc:7e:19:84:a3:ac:75:a5:52:89:85:
                    a0:3e:67:fb:80:2f:75:fe:f5:8b:c7:12:84:7d:38:
                    10:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:EC:D7:1A:F7:FC:3B:18:38:1B:ED:4D:52:A6:83:59:67:08:2B:1C
            X509v3 Authority Key Identifier:
                keyid:F1:BB:F9:BE:E5:31:F3:DE:E2:D0:3B:BF:4E:69:EF:82:EE:DB:99:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:59:06:cd:da:72:5b:2e:54:88:8b:26:a9:d1:d5:99:2a:f5:
         9b:f0:73:92:05:71:55:c1:62:a0:02:13:27:81:62:90:f8:d1:
         ab:3c:8c:0c:ff:91:b9:f3:01:a0:e5:53:c3:91:cb:41:84:19:
         51:ce:c2:73:eb:e0:90:9b:56:17:21:03:5e:12:69:df:d1:79:
         bc:6b:6f:e6:dd:2a:aa:a9:a7:11:fc:d5:07:a7:88:7d:a7:63:
         01:48:57:73:0e:ce:86:0b:ae:76:e9:60:7e:2b:b2:22:89:1b:
         ad:fd:b5:b9:82:35:6b:62:84:32:02:e8:86:5d:31:47:03:e7:
         89:2d:4b:6e:11:56:e4:90:50:ab:e6:99:b8:d7:8b:37:68:b6:
         6b:5a:9b:de:97:49:fb:f9:42:e6:49:42:e2:47:e6:e9:c1:c4:
         6b:4a:01:d3:8b:3a:d1:1f:e6:f1:91:c2:55:84:3e:34:e7:fb:
         0d:99:88:e7:2c:1c:5a:67:56:97:79:52:e8:63:bd:30:b4:5f:
         46:ff:80:e9:78:b9:92:f7:e1:f4:e3:ee:10:ae:cf:2d:61:23:
         33:9a:35:5d:80:56:31:4b:87:b4:d4:89:a4:39:b2:14:09:27:
         cf:90:7a:d5:c0:9e:8b:cf:cb:08:0d:0b:2c:ac:9c:5c:81:44:
         20:b7:65:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wch2ZHiKapPjyTXPU9bmOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYmJmOWJlZTUzMWYzZGVlMmQwM2JiZjRlNjllZjgyZWVk
Yjk5YWYwHhcNMjYwNTE2MTEwMDQ1WhcNMjYwNTE3MTEwMDQ1WjAzMTEwLwYDVQQD
EygzNGVjZDcxYWY3ZmMzYjE4MzgxYmVkNGQ1MmE2ODM1OTY3MDgyYjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8m3FMK/CfRm2R/+b9QlDn6w6qeq4
PpFv1vshHmvxo+HgzNiwEO/QgZPQZ6X1/BtffMPUeB5ujnR7dq50rE8zcf8Ro+wS
CtB69L/gn62D3Zx9sVo2YAtP+AVVZwx2w04+jIn2S1WHNEuCDHc6l0cJlJsi+r4k
RGKfdfW2AjeXB6yrfOlLHgtho05ObM45RwtbOhU66HKtekyWwQfzMVqLTN5TeJAN
ZMDwGXduzOgrDknflGHTLv1jy8BnwraFmVucVjxF2RBk3FqtqDVwBY5aiEAurPEg
fJJ73gJW911lis0UIJT1/H4ZhKOsdaVSiYWgPmf7gC91/vWLxxKEfTgQGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDTs1xr3/DsYOBvtTVKmg1lnCCscMB8GA1UdIwQY
MBaAFPG7+b7lMfPe4tA7v05p74Lu25mvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGJ2NXZ1VXg4OTdpMER1X1RtbnZndTdibWE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8zZjExMGItZGVkYi00OTBmLTllNjYt
NmZhZDA4YWEyMGVlLzEvOGJ2NXZ1VXg4OTdpMER1X1RtbnZndTdibWE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS8zZjExMGItZGVkYi00OTBmLTllNjYtNmZhZDA4YWEyMGVl
LzEvOGJ2NXZ1VXg4OTdpMER1X1RtbnZndTdibWE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIVkGzdpy
Wy5UiIsmqdHVmSr1m/BzkgVxVcFioAITJ4FikPjRqzyMDP+RufMBoOVTw5HLQYQZ
Uc7Cc+vgkJtWFyEDXhJp39F5vGtv5t0qqqmnEfzVB6eIfadjAUhXcw7Ohguudulg
fiuyIokbrf21uYI1a2KEMgLohl0xRwPniS1LbhFW5JBQq+aZuNeLN2i2a1qb3pdJ
+/lC5klC4kfm6cHEa0oB04s60R/m8ZHCVYQ+NOf7DZmI5ywcWmdWl3lS6GO9MLRf
Rv+A6Xi5kvfh9OPuEK7PLWEjM5o1XYBWMUuHtNSJpDmyFAknz5B61cCei8/LCA0L
LKycXIFEILdl0g==
-----END CERTIFICATE-----
Generated at Sat May 16 15:38:30 2026 by rpki-client