Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
File:                     HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft (raw, json)
Hash identifier:          zuMCCVevUz3LJN+rSrdQiWo693YkypK/c5vOoo7n6Rk=
Subject key identifier:   A0:33:FD:6F:59:15:74:72:E9:C2:A2:4E:95:B9:AE:13:70:ED:52:1D
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Certificate issuer:       /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial:       019E3786E6F8FB2C925C0B95CD299AA06924
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
Manifest number:          15EE
Signing time:             Sun 17 May 2026 20:00:48 +0000
Manifest this update:     Sun 17 May 2026 20:00:48 +0000
Manifest next update:     Mon 18 May 2026 20:00:48 +0000
Files and hashes:         1: 4mHpvx9LkY6t4I-sMJMoaWx8VF0.roa (hash: TQ6l7XAp2vjcp5JOmsdpz5IqQGsnKehqiFiPx6igx/8=)
                          2: 9hVZarMZXXFecBErtuPkYLQrriE.roa (hash: KsiiLeHicnzuMLdpx8BniCnY9e3C72b9G03ZzbEor1A=)
                          3: 9m20uAAFdgNoVQH3076gaYQmYYU.roa (hash: ly6A2Lm/ZdDnqWIOLhpR56go+OLBASNK0cUewK9eTjc=)
                          4: Eg2EGWU0muHyssilrxeeQBjKbvk.roa (hash: wy9mHmoh2oNmnAMgYgnKyL3/vaCOlR30B/2LCFJDYyc=)
                          5: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl (hash: mXaFbCDM3TyoLA41AhFQGhyn3gENpMxY8+PMH0snbP8=)
                          6: I2kYVGgTXf3beeheYP4NYqvlsqo.roa (hash: +1MdfvNf88UVk1eBDOjY75bUfmqtSM1iSrahOzZLtS8=)
                          7: OOgM0-iyUugGKM1AErBHV3ak228.roa (hash: CzxOqgB3SowyUJL8kJyxpZhbGu+OOlEvXGgaW+6e45A=)
                          8: QDsntjcOt3fxAoY-_3bsGRuRxHo.roa (hash: 8Wg5bkOdvAsky6YfIg1CDs57PHLp5vOyQI0z4fcD3vE=)
                          9: vdZ7NAZKpOOWfxeuOtoKVqSmi9o.roa (hash: nGN4JdghU2JG9U+xki8YfeD2LkJmHUGqq8eet8nt3TI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 18 May 2026 17:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:37:86:e6:f8:fb:2c:92:5c:0b:95:cd:29:9a:a0:69:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
        Validity
            Not Before: May 17 20:00:48 2026 GMT
            Not After : May 18 20:00:48 2026 GMT
        Subject: CN=a033fd6f59157472e9c2a24e95b9ae1370ed521d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d4:a5:8a:4c:e6:9c:54:67:6e:26:b9:21:42:
                    f3:df:67:65:46:64:a8:0b:7c:88:e2:dc:b2:c2:23:
                    54:b2:fe:7c:bc:f4:fc:e9:b6:d5:73:71:0e:cf:a2:
                    b6:f4:04:3e:9a:93:90:78:e4:24:d1:7c:aa:46:61:
                    fc:ce:9c:67:af:2d:76:4d:a9:bb:82:c8:ad:ac:99:
                    d3:22:53:63:12:17:5b:6a:9b:83:0b:70:cb:79:71:
                    72:17:c8:19:26:9a:67:da:8a:84:11:68:fe:54:d0:
                    f8:98:d8:d4:6a:f8:0f:56:27:5d:95:f5:72:e5:60:
                    6d:8a:d7:92:02:6a:80:9d:f0:c2:20:29:fc:09:0a:
                    87:65:ab:93:0c:48:d3:a3:d2:dc:07:53:e8:3e:68:
                    95:a2:56:18:e7:a3:95:5e:81:52:40:00:50:94:51:
                    18:45:fa:d5:19:26:8a:a9:92:de:5e:e7:78:9c:a5:
                    e6:a2:8c:14:ff:e1:aa:1e:b5:63:28:68:9f:87:d7:
                    e3:65:9d:a9:aa:a4:88:10:94:14:28:2c:05:bd:45:
                    dc:70:d3:17:46:62:98:f1:4e:b8:30:7d:ad:1c:45:
                    c5:a4:c8:4d:79:2c:d4:9b:7b:44:27:d5:35:a3:25:
                    cd:4a:c4:cc:19:10:33:a8:48:4f:5a:b4:a9:88:e9:
                    b9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:33:FD:6F:59:15:74:72:E9:C2:A2:4E:95:B9:AE:13:70:ED:52:1D
            X509v3 Authority Key Identifier:
                keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:ae:fa:2c:92:79:04:85:1a:87:81:fd:b2:db:13:f4:d2:c0:
         79:1f:ae:ff:45:a5:57:97:b3:f0:f8:39:3a:48:bc:0c:ee:52:
         3c:2e:47:03:32:6a:0d:e5:ff:58:70:8f:a5:3d:d4:46:8b:ef:
         80:bf:64:f4:78:e8:e2:c7:a8:2d:0a:ca:f9:04:6b:b1:11:48:
         c5:f4:7c:90:04:a0:28:85:fb:7a:fd:97:39:25:da:87:0b:17:
         12:bf:9b:5c:aa:c4:cb:10:f6:28:9b:8a:07:41:05:43:75:56:
         08:64:50:ba:9f:8a:d4:98:d6:9f:3d:b3:63:b9:ee:20:94:cb:
         32:ef:b6:cc:67:32:1c:0e:a6:86:4a:41:9c:a4:25:9c:37:1b:
         ad:78:57:13:82:65:b5:58:b3:a4:9f:d8:18:0b:b6:da:4e:8d:
         7a:ae:ab:5d:77:40:43:6e:59:9a:e1:26:91:87:67:ca:de:fc:
         96:16:db:31:cb:15:2b:b4:83:35:3a:2d:ba:de:0e:5a:08:79:
         97:e9:3a:5c:59:81:57:2e:ef:a7:08:06:e6:76:e4:ad:ae:f0:
         1d:f8:f7:eb:20:5f:b5:f7:b5:ec:fa:d9:ed:f7:f6:a1:d7:0b:
         d1:b8:e4:59:12:8f:48:6f:a3:b0:bc:42:21:ed:f5:4e:28:cb:
         d1:2a:b0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 22:31:29 2026 by rpki-client