Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
File:                     M7n5GBbdTYImpB47TDsJx73MZKk.mft (raw, json)
Hash identifier:          BID0CRfoaxxAga0WUcKxwxQYI0HvE9uqH+e8DJxICkE=
Subject key identifier:   98:2A:35:F6:3E:CD:B9:38:F6:A4:3A:E9:AD:63:B9:98:B3:85:91:48
Authority key identifier: 33:B9:F9:18:16:DD:4D:82:26:A4:1E:3B:4C:3B:09:C7:BD:CC:64:A9
Certificate issuer:       /CN=33b9f91816dd4d8226a41e3b4c3b09c7bdcc64a9
Certificate serial:       019E31BC3173F18A6462681DB7C34B2E1871
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
Manifest number:          1912
Signing time:             Sat 16 May 2026 17:01:17 +0000
Manifest this update:     Sat 16 May 2026 17:01:17 +0000
Manifest next update:     Sun 17 May 2026 17:01:17 +0000
Files and hashes:         1: M7n5GBbdTYImpB47TDsJx73MZKk.crl (hash: VHHboRPz9MkD0CbQOC63cKJs1Hg4cMfM2lyKfgACnRk=)
                          2: aTwucs9Pwvr6YSYXdadFRJo6hLs.roa (hash: ilcm0/S70CqecxpFPp/FDen+jHt9VTiUtWGnp7lMb1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:bc:31:73:f1:8a:64:62:68:1d:b7:c3:4b:2e:18:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33b9f91816dd4d8226a41e3b4c3b09c7bdcc64a9
        Validity
            Not Before: May 16 17:01:17 2026 GMT
            Not After : May 17 17:01:17 2026 GMT
        Subject: CN=982a35f63ecdb938f6a43ae9ad63b998b3859148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:79:a9:c8:d6:bf:0b:bf:d4:5e:7d:4b:2a:cd:
                    62:a3:06:74:72:96:61:56:40:c4:22:b5:94:44:2b:
                    f9:d2:09:9c:a1:11:32:e5:85:91:da:97:7c:4a:7f:
                    14:fd:ad:73:9f:f2:07:04:33:dd:68:ed:e1:09:a0:
                    d4:e6:11:ef:1a:a5:c4:09:dc:06:5e:8c:ce:f7:52:
                    7d:75:4c:72:a6:c8:16:a5:5a:17:73:f5:ba:8b:f0:
                    b2:38:64:2d:9a:da:8c:f9:4f:e8:56:8d:71:e7:86:
                    2e:75:e0:9a:08:9e:25:1e:b0:f9:7f:82:41:7e:3a:
                    de:6c:bc:3e:83:8e:6a:20:9b:fc:85:8b:fe:d7:f7:
                    56:bc:4a:32:d8:79:4c:98:3b:61:63:48:a6:c5:e6:
                    11:da:59:93:c6:f1:e3:7c:d6:1c:92:c1:76:ae:67:
                    08:ff:e1:b5:71:00:2a:5f:f9:21:e8:67:3a:80:f7:
                    32:cf:19:46:89:d1:b7:c9:6e:29:24:72:a0:ee:92:
                    6c:77:5c:a3:91:22:7d:16:10:76:4d:1a:8d:94:f1:
                    db:23:9e:37:57:64:fb:e9:be:b5:9d:ed:18:eb:8e:
                    b9:4e:d6:b0:32:be:be:78:1f:17:d3:31:3b:9f:d9:
                    55:90:61:c5:ce:5c:1e:b4:84:53:0f:f9:b0:cc:8a:
                    8e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:2A:35:F6:3E:CD:B9:38:F6:A4:3A:E9:AD:63:B9:98:B3:85:91:48
            X509v3 Authority Key Identifier:
                keyid:33:B9:F9:18:16:DD:4D:82:26:A4:1E:3B:4C:3B:09:C7:BD:CC:64:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:31:ec:90:2d:a8:c2:92:fe:3b:d2:c3:3a:81:4c:f6:60:0b:
         47:69:84:19:d0:3d:ee:ba:7a:8c:a2:b4:a2:5e:0d:db:35:a9:
         a6:a3:9f:4b:2d:47:f2:fc:db:4a:be:d4:25:b2:b0:65:77:04:
         d0:b3:39:53:c2:bc:97:a2:96:33:c7:b2:e6:0c:84:7e:01:65:
         ee:34:55:56:28:4b:be:31:cd:86:23:b0:b2:9d:1f:50:14:d5:
         f7:de:5c:5a:f9:3f:91:13:63:6e:92:8a:70:99:7f:c2:11:ae:
         76:f6:9f:b9:bb:1a:60:a1:59:6a:d3:23:87:9d:3a:fa:39:1d:
         d6:b7:78:01:61:91:06:77:b9:45:fa:84:9b:ae:30:2f:7a:ee:
         01:3c:3f:16:f8:3b:aa:3d:4d:12:19:a6:6b:44:95:db:7c:7b:
         92:61:5d:3e:9e:5c:b7:29:94:e1:42:49:c4:17:a4:11:c4:e9:
         68:8e:20:14:17:26:6f:73:f9:79:9b:e2:30:dd:12:70:5c:d8:
         3f:e6:ae:ba:c8:56:8a:f6:5c:b2:5f:d8:f8:16:d3:17:fc:15:
         4a:75:0b:b6:13:50:08:96:cf:01:34:8b:7c:95:23:9b:0f:ad:
         9a:53:39:99:ff:42:f1:94:fb:a9:b6:24:f1:86:6e:a6:bf:a3:
         68:83:f7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 23:29:56 2026 by rpki-client