Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
File:                     CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft (raw, json)
Hash identifier:          V+QIqxfaXVafQru4DQd5Wjr2T8BNuNVsR8H6zI10INI=
Subject key identifier:   32:82:E9:23:55:78:D5:F4:9A:13:6D:14:D2:F1:66:C0:EE:31:35:8F
Authority key identifier: 0A:23:E2:F0:B0:64:08:7F:D8:4F:04:8B:1F:A9:99:70:23:D5:99:E1
Certificate issuer:       /CN=0a23e2f0b064087fd84f048b1fa9997023d599e1
Certificate serial:       019E303B4F5A0118B4F279B26D776C9828BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
Manifest number:          190F
Signing time:             Sat 16 May 2026 10:00:53 +0000
Manifest this update:     Sat 16 May 2026 10:00:53 +0000
Manifest next update:     Sun 17 May 2026 10:00:53 +0000
Files and hashes:         1: CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl (hash: h9O7xECAnd+i6ZpYBU3/BtVZNzFNc2Mjp3gkVcXwfVA=)
                          2: jr3Qwfg8Z9qypQ7083QLXtA-1bs.roa (hash: BStTXqRwyFgu7NL9U4UDu4snXF66XXGZwBXM2f9Q63k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 10:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:4f:5a:01:18:b4:f2:79:b2:6d:77:6c:98:28:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a23e2f0b064087fd84f048b1fa9997023d599e1
        Validity
            Not Before: May 16 10:00:53 2026 GMT
            Not After : May 17 10:00:53 2026 GMT
        Subject: CN=3282e9235578d5f49a136d14d2f166c0ee31358f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:22:a8:cc:aa:c4:54:ab:21:47:0e:c6:31:25:
                    0b:a6:fe:23:8f:52:d4:e3:c1:0d:43:3f:8f:65:c2:
                    01:14:bb:87:ba:ee:97:0b:ae:b6:a5:cf:c7:cb:d2:
                    cb:f3:72:1f:51:23:4a:b1:b5:04:13:08:3f:81:3d:
                    19:74:7e:59:26:8a:2c:e3:6c:b7:99:a4:99:66:48:
                    f1:92:5c:39:b5:c7:ae:03:34:6f:74:4f:79:13:2f:
                    52:4b:71:c5:5d:b5:5b:0a:de:3f:80:e6:2d:50:50:
                    be:d8:02:eb:ed:a7:3f:e4:a1:90:87:8c:d4:8c:5f:
                    29:a0:1a:f6:2b:00:ea:40:e6:8e:70:dc:68:48:77:
                    64:33:19:9a:56:29:2f:09:85:24:ea:0b:d7:31:80:
                    c6:0f:30:e2:4a:dd:84:88:14:3a:1b:35:07:8a:3b:
                    8f:09:c5:b0:c9:95:5e:ab:a0:84:49:1c:d2:12:58:
                    65:e0:b3:f5:63:3c:64:98:3d:bd:a4:85:f8:a9:ad:
                    99:5d:2a:b1:ef:ae:9f:1f:81:9e:90:d2:7a:f3:00:
                    a2:30:ab:36:d9:d5:85:6a:66:ab:62:6a:7f:ba:12:
                    dc:76:99:c0:e2:24:3c:53:db:a2:fe:d9:83:a3:18:
                    e9:47:a5:80:a9:b1:68:5b:d2:da:59:42:ed:0e:a8:
                    8f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:82:E9:23:55:78:D5:F4:9A:13:6D:14:D2:F1:66:C0:EE:31:35:8F
            X509v3 Authority Key Identifier:
                keyid:0A:23:E2:F0:B0:64:08:7F:D8:4F:04:8B:1F:A9:99:70:23:D5:99:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:85:5d:5d:2e:e5:c5:48:1e:8e:ae:1d:b7:bb:e2:c0:9f:dc:
         3f:c7:95:28:44:ff:d2:b4:31:7c:32:96:3c:2e:d3:67:03:21:
         04:3b:df:7b:a6:6a:67:62:d7:e0:6c:90:e8:89:6b:f6:7a:5c:
         33:00:51:2b:6b:68:ac:79:c2:a2:3c:48:6c:c2:04:4a:4c:bd:
         f1:b3:53:b8:68:e8:18:69:3c:d7:b7:d9:5d:eb:1d:ef:f0:34:
         2a:65:03:c0:75:9a:06:08:38:a8:cc:74:e4:a5:97:2d:c0:45:
         b9:f4:db:7f:7b:7c:22:5b:b3:94:c2:c9:55:05:5c:bf:83:3a:
         7c:d6:70:ca:d6:db:10:99:08:b4:af:ed:04:b3:7e:ff:88:8e:
         ba:3e:b3:39:dd:e9:b5:0a:18:25:28:5a:76:20:32:2b:3f:50:
         a0:5c:18:a0:e8:84:e9:70:13:5b:7a:48:c6:7b:61:4f:8e:45:
         af:30:25:0f:7d:31:2b:41:57:f2:91:4f:7f:f2:6c:56:8e:8b:
         4a:96:f0:54:98:31:6c:b5:78:ae:e5:2e:14:82:46:3e:c6:35:
         a7:81:53:92:59:c9:f7:a9:42:1a:a8:1c:18:8e:1e:4e:71:d6:
         fa:58:b8:8a:1d:dc:1d:e4:37:b0:79:b8:69:b2:9b:b8:62:67:
         f2:aa:7a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:11:45 2026 by rpki-client