Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft
File:                     AsNyEO2KVs4O3UV0v3NrYyReWCM.mft (raw, json)
Hash identifier:          4N4lZEp15THOK6N9G9FFu1sOI47CE6jpX/azK/lGJd8=
Subject key identifier:   8B:0A:27:BA:26:2D:DB:6F:6B:AF:DF:CF:1A:17:10:AA:5B:C3:E4:E5
Authority key identifier: 02:C3:72:10:ED:8A:56:CE:0E:DD:45:74:BF:73:6B:63:24:5E:58:23
Certificate issuer:       /CN=02c37210ed8a56ce0edd4574bf736b63245e5823
Certificate serial:       019E303B4B97E2B0BBDE05FAF05C0A2FED83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AsNyEO2KVs4O3UV0v3NrYyReWCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft
Manifest number:          189E
Signing time:             Sat 16 May 2026 10:00:52 +0000
Manifest this update:     Sat 16 May 2026 10:00:52 +0000
Manifest next update:     Sun 17 May 2026 10:00:52 +0000
Files and hashes:         1: AsNyEO2KVs4O3UV0v3NrYyReWCM.crl (hash: UHz7muIz7SAMduqzsLuE0cvFwVjPdLD7JMXHp5/hCtc=)
                          2: yXFRfVpkM8r3azCgAbb2sK9w1rs.roa (hash: ORuyNvYgdfyEkEThZ1lM5vg7mN7F8OavMybx+qBeHmQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AsNyEO2KVs4O3UV0v3NrYyReWCM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 10:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:4b:97:e2:b0:bb:de:05:fa:f0:5c:0a:2f:ed:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02c37210ed8a56ce0edd4574bf736b63245e5823
        Validity
            Not Before: May 16 10:00:52 2026 GMT
            Not After : May 17 10:00:52 2026 GMT
        Subject: CN=8b0a27ba262ddb6f6bafdfcf1a1710aa5bc3e4e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cf:59:00:50:c4:cd:12:1b:71:0d:92:21:5b:
                    8b:f6:fa:ce:6a:0a:50:6c:5f:64:0d:3c:80:5d:70:
                    d2:78:26:b6:b8:1e:c8:a0:22:aa:1a:a1:7b:b0:9c:
                    57:3e:55:1c:50:f0:71:11:59:dd:7c:d9:15:b4:50:
                    c0:24:09:eb:eb:44:c9:90:9e:41:95:c4:9e:95:5d:
                    c0:b8:31:5f:f3:0e:68:99:24:5b:ae:87:ad:ad:2d:
                    b3:29:b1:9d:6d:37:39:96:11:41:b8:a5:0c:3d:77:
                    88:39:e0:d6:a1:6f:4b:06:42:df:58:7b:bd:7e:45:
                    94:40:a3:58:42:fe:61:46:ad:6b:0f:aa:21:af:8e:
                    53:90:2b:81:0f:9c:00:25:37:c5:7c:79:16:4b:e6:
                    60:bb:e9:7c:32:4d:d7:43:1c:92:26:ea:9c:bc:ca:
                    74:20:6f:03:b9:0f:b7:4e:75:e9:89:c7:aa:8f:20:
                    85:a6:30:b5:4e:54:0b:ab:37:40:34:29:90:3e:fb:
                    96:84:58:bb:09:2a:e9:1d:9d:3c:7d:d7:af:cb:27:
                    3b:5f:9d:19:85:1a:c5:21:b0:05:b2:24:0d:01:b1:
                    c5:59:49:02:89:ac:d3:4e:b8:30:e9:2c:6b:f7:d2:
                    de:84:4b:96:0c:22:6e:f6:ef:a2:2f:ef:8a:e0:8d:
                    e1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:0A:27:BA:26:2D:DB:6F:6B:AF:DF:CF:1A:17:10:AA:5B:C3:E4:E5
            X509v3 Authority Key Identifier:
                keyid:02:C3:72:10:ED:8A:56:CE:0E:DD:45:74:BF:73:6B:63:24:5E:58:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsNyEO2KVs4O3UV0v3NrYyReWCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:44:31:03:94:e9:ed:f2:88:76:63:ff:a2:4d:52:f8:5e:cd:
         5b:1e:88:3d:0c:23:76:c7:6d:c4:43:b3:04:f0:f2:9f:94:62:
         32:a1:ba:c2:24:ea:38:c9:0a:d5:a6:94:ef:64:01:11:8d:64:
         3a:a0:17:d3:8b:b8:d5:a7:62:78:85:a5:99:7d:0d:3e:8f:d1:
         6a:80:d9:34:97:e7:d3:4c:73:d4:ad:89:d8:c2:41:46:05:19:
         4e:f1:1d:bf:92:04:09:ca:45:10:b6:5c:13:04:cf:a4:ac:9e:
         59:13:ab:8e:16:7a:96:80:12:47:26:a8:69:d2:78:10:70:7a:
         89:12:15:93:d6:af:f6:9d:17:54:4f:81:9d:bd:7b:e0:09:a4:
         d9:6c:fe:fe:b9:d3:0e:c1:6f:31:82:f2:8e:b3:84:c1:a2:33:
         48:85:d3:f9:6b:73:8d:0e:46:b1:5c:05:9b:f6:0a:d9:09:be:
         d2:f7:e7:8e:4f:d0:a6:04:d5:a9:bb:96:0b:0b:6c:25:00:03:
         cf:e8:48:c1:be:94:04:e4:bf:6d:d6:70:7b:5d:49:13:11:17:
         d7:7e:c2:e3:f0:ef:d7:56:cc:1b:a0:01:df:5e:64:f8:30:98:
         ba:34:ae:27:d7:3d:41:c7:35:6f:78:41:3a:2b:cf:d7:02:90:
         69:93:8c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:39:24 2026 by rpki-client