Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft
File:                     N_9VuVdDqRW3k9ct5xrJbOYZipc.mft (raw, json)
Hash identifier:          KOK+FpvQk0HZaAtJxAaJpqY0BFUxiWfIryCvZVPkdrk=
Subject key identifier:   F0:CF:B6:55:62:A9:9F:71:EF:CC:68:7A:14:44:01:76:7A:35:3E:23
Authority key identifier: 37:FF:55:B9:57:43:A9:15:B7:93:D7:2D:E7:1A:C9:6C:E6:19:8A:97
Certificate issuer:       /CN=37ff55b95743a915b793d72de71ac96ce6198a97
Certificate serial:       019E32CED1F36113709EDA673F123120580C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N_9VuVdDqRW3k9ct5xrJbOYZipc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft
Manifest number:          18A2
Signing time:             Sat 16 May 2026 22:01:15 +0000
Manifest this update:     Sat 16 May 2026 22:01:15 +0000
Manifest next update:     Sun 17 May 2026 22:01:15 +0000
Files and hashes:         1: Kjv5ZqAKlQ-u26S6yymzYFVvtRA.roa (hash: sOevRBDCcbgFby2Me1gEDOPKrFjBhZ/Oz4Fc5/D3wtA=)
                          2: N_9VuVdDqRW3k9ct5xrJbOYZipc.crl (hash: Rhtx2g9om1pJTbCtLZwvyTLxxiK0MHWvr+9tKZlN+FA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N_9VuVdDqRW3k9ct5xrJbOYZipc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:ce:d1:f3:61:13:70:9e:da:67:3f:12:31:20:58:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37ff55b95743a915b793d72de71ac96ce6198a97
        Validity
            Not Before: May 16 22:01:15 2026 GMT
            Not After : May 17 22:01:15 2026 GMT
        Subject: CN=f0cfb65562a99f71efcc687a144401767a353e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e6:f9:87:77:33:86:75:a8:0d:8c:f2:52:13:
                    14:03:46:45:af:e3:ba:a8:3e:5a:2d:c1:62:56:ad:
                    78:30:a6:10:2e:3f:73:ae:b4:eb:e4:49:60:ca:5f:
                    b3:7a:c1:20:44:b3:ae:b4:45:63:59:14:76:e6:0a:
                    f3:c3:c1:ae:99:30:80:77:98:41:49:5a:74:2f:45:
                    1a:d5:c0:b4:ac:ee:57:01:4a:cb:3c:6d:83:4f:18:
                    3a:8c:85:6b:38:cf:5b:a5:67:7a:d3:53:9a:41:35:
                    bf:ec:bf:2f:b6:68:36:aa:50:8c:27:d3:68:23:ec:
                    86:0d:44:13:3f:67:4d:da:7f:bf:da:89:80:c3:cc:
                    be:97:9e:a0:5a:47:ff:9b:20:f6:09:62:0b:be:47:
                    66:3d:a3:f8:85:d4:fd:13:5d:1e:9d:89:64:ac:56:
                    67:02:16:7e:36:31:dc:c7:34:37:3d:3a:fe:5e:1f:
                    fc:df:35:a3:83:1c:d2:96:61:fb:ae:9c:27:30:ae:
                    5b:ee:69:70:f9:4f:ce:b5:6c:5a:46:36:92:34:56:
                    4e:9a:df:06:48:86:c7:d5:4f:d6:df:49:ce:32:12:
                    c8:1e:5b:e4:d8:15:8f:e5:3b:4a:e5:6b:d8:40:6c:
                    a2:23:e9:37:0c:48:ce:9f:dd:06:c3:eb:db:74:df:
                    2b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:CF:B6:55:62:A9:9F:71:EF:CC:68:7A:14:44:01:76:7A:35:3E:23
            X509v3 Authority Key Identifier:
                keyid:37:FF:55:B9:57:43:A9:15:B7:93:D7:2D:E7:1A:C9:6C:E6:19:8A:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_9VuVdDqRW3k9ct5xrJbOYZipc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:41:95:af:1e:55:4c:a4:90:38:56:26:a7:5d:cd:19:de:f2:
         b6:5e:3d:ba:03:e4:a2:ea:ae:60:14:23:85:16:52:cd:39:8e:
         74:69:c0:b3:82:dc:ae:51:12:c7:a3:5e:16:d3:dc:b5:4c:a4:
         59:19:ba:84:b3:a3:a9:1e:33:2e:b6:82:88:e8:ff:a6:54:f8:
         5f:97:cd:68:62:ae:e0:f4:94:99:31:fb:24:10:6e:16:6e:33:
         a3:a5:1c:9d:c3:3e:c7:62:79:af:fd:6d:8f:7f:c7:21:46:1a:
         3d:87:04:52:d8:15:2d:42:22:d6:f8:fd:a7:b6:cc:70:8f:ce:
         7b:7a:db:4b:07:a4:22:93:db:54:ba:2e:ef:53:6f:90:ce:9c:
         da:71:2a:df:31:ef:55:93:91:07:0f:a1:74:9b:a8:fc:b7:8e:
         58:d0:63:6d:4b:aa:8e:64:ab:c9:8b:0d:b2:d5:36:a5:3a:45:
         c8:ce:79:58:f2:0e:75:42:3e:66:92:24:bc:7c:f2:1b:70:e4:
         50:2f:2b:d5:26:95:87:d9:22:7e:13:32:ae:fb:b3:b9:b3:0d:
         00:ad:77:4f:b0:44:d9:fb:7f:e5:0c:f8:28:61:e0:66:85:51:
         e2:26:64:ca:00:6d:8e:5b:aa:60:bd:15:03:1a:b2:05:e4:2f:
         c5:8f:be:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 00:27:56 2026 by rpki-client