Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/bc2d26-dcf7-4695-88ee-932bb4867c2b/1/RVfq3Q3asUagq5nAquV40njw9H4.mft
File:                     RVfq3Q3asUagq5nAquV40njw9H4.mft (raw, json)
Hash identifier:          Xsc04mzoa1P8BYZX8NImPCLlWv4YVruRrC8U/3mgI5I=
Subject key identifier:   B8:5F:E5:6C:15:A1:6A:9E:DE:38:D6:B4:27:FA:1A:FD:A4:B5:8A:8B
Authority key identifier: 45:57:EA:DD:0D:DA:B1:46:A0:AB:99:C0:AA:E5:78:D2:78:F0:F4:7E
Certificate issuer:       /CN=4557eadd0ddab146a0ab99c0aae578d278f0f47e
Certificate serial:       019E3184E0FAFBA608F4D8B4F743607A9D74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RVfq3Q3asUagq5nAquV40njw9H4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/bc2d26-dcf7-4695-88ee-932bb4867c2b/1/RVfq3Q3asUagq5nAquV40njw9H4.mft
Manifest number:          0155
Signing time:             Sat 16 May 2026 16:00:52 +0000
Manifest this update:     Sat 16 May 2026 16:00:52 +0000
Manifest next update:     Sun 17 May 2026 16:00:52 +0000
Files and hashes:         1: RVfq3Q3asUagq5nAquV40njw9H4.crl (hash: C+K03xcxpzmU3CYGDCp1OIsfoxuaKFafCLKIohPKsvo=)
                          2: ck2Hnx7YLqfCAwbXnmqrOBQQJXA.roa (hash: z68wCsgmx5LNuVEfhfzGMi/AVsIBR+cwgGs5Q7LfatQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/bc2d26-dcf7-4695-88ee-932bb4867c2b/1/RVfq3Q3asUagq5nAquV40njw9H4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/bc2d26-dcf7-4695-88ee-932bb4867c2b/1/RVfq3Q3asUagq5nAquV40njw9H4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RVfq3Q3asUagq5nAquV40njw9H4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:84:e0:fa:fb:a6:08:f4:d8:b4:f7:43:60:7a:9d:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4557eadd0ddab146a0ab99c0aae578d278f0f47e
        Validity
            Not Before: May 16 16:00:52 2026 GMT
            Not After : May 17 16:00:52 2026 GMT
        Subject: CN=b85fe56c15a16a9ede38d6b427fa1afda4b58a8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b8:9c:5b:44:21:48:b7:7c:4c:d3:be:68:4b:
                    ab:28:44:f9:59:5c:ab:2d:86:1c:c3:b8:58:56:c6:
                    94:2f:60:6d:5d:63:92:a0:78:05:bf:89:d8:94:ab:
                    1a:cf:07:96:5c:51:c6:75:7a:86:68:b1:f8:66:00:
                    6c:72:2f:bf:17:32:4b:3f:92:c0:66:94:3f:2e:54:
                    2c:84:f3:9a:bd:fc:93:44:fa:c6:35:d5:bb:3b:27:
                    0e:0f:48:22:cb:ff:74:f8:54:db:02:39:b3:85:94:
                    81:86:15:f4:f7:53:96:70:ea:4e:a5:cf:3b:df:d6:
                    69:67:37:0c:45:49:9e:75:5f:a5:c9:55:af:65:81:
                    73:4b:d1:60:a2:ac:16:eb:19:28:8b:c3:c6:3e:86:
                    d1:6e:05:1f:d7:a1:23:59:ca:0c:9e:ed:25:ac:9f:
                    5b:87:dd:1c:1b:e2:a4:e0:df:4a:e7:b7:9c:a9:4b:
                    07:7f:d5:b1:62:bf:3c:78:eb:94:7b:a6:36:24:08:
                    f8:7a:88:6e:00:2b:bb:f9:66:cb:43:9f:28:c6:ec:
                    13:23:26:de:14:a0:db:84:54:7b:a5:75:11:61:8d:
                    5f:ba:1a:53:e0:eb:8b:ba:f5:1b:b2:95:b2:f5:5a:
                    2b:5b:be:bf:0d:c6:dc:19:9e:04:9d:4b:bb:f7:2a:
                    49:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:5F:E5:6C:15:A1:6A:9E:DE:38:D6:B4:27:FA:1A:FD:A4:B5:8A:8B
            X509v3 Authority Key Identifier:
                keyid:45:57:EA:DD:0D:DA:B1:46:A0:AB:99:C0:AA:E5:78:D2:78:F0:F4:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RVfq3Q3asUagq5nAquV40njw9H4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bc2d26-dcf7-4695-88ee-932bb4867c2b/1/RVfq3Q3asUagq5nAquV40njw9H4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bc2d26-dcf7-4695-88ee-932bb4867c2b/1/RVfq3Q3asUagq5nAquV40njw9H4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:d8:4d:11:ef:34:25:e6:85:8b:96:1a:d3:d7:ba:e4:b1:df:
         ce:84:70:35:68:63:54:f1:1d:7c:18:8e:f3:4e:79:c2:65:44:
         fa:03:44:e3:03:3d:5d:f4:0a:aa:7c:9b:cc:08:05:d5:62:76:
         c9:77:d3:cf:42:9c:25:c1:19:20:2c:7a:e3:39:a0:d4:22:7a:
         59:88:97:c8:4d:7f:a1:92:50:59:69:78:2a:bb:22:e8:21:a8:
         fa:29:fb:66:36:b0:7a:1d:5d:7e:4f:ec:b8:bd:65:11:72:c6:
         24:7a:16:7d:2c:07:5c:93:4e:4d:3e:8c:b7:f2:3a:41:38:96:
         ae:df:cd:1a:52:90:73:a9:6b:cd:d6:ff:5f:f3:56:3a:0b:05:
         de:7b:04:2e:0e:39:fc:df:87:68:90:fa:c5:5e:1d:43:92:99:
         bb:96:2e:02:32:c2:eb:01:29:ec:5a:00:43:71:ca:a1:e3:bd:
         a5:0f:15:dc:88:c2:f9:54:b1:eb:13:9a:27:96:34:86:4a:4d:
         98:3b:06:ab:0f:2b:b1:e7:eb:6f:ee:7a:f7:a8:ef:40:4e:46:
         a8:f0:f4:1e:eb:92:c1:f4:0e:4d:93:4c:ee:a5:06:f1:d1:f7:
         d2:10:d4:c9:7d:e4:f2:cf:38:35:4d:70:8c:a2:ec:26:9a:43:
         54:c6:33:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:20:45 2026 by rpki-client