Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
File:                     1fQ0Wir2tUTNG4541z7AK4iVVG0.mft (raw, json)
Hash identifier:          abwovY/DxEW1Q1huF0nmOi4gAUkq6KNmfcKNkZiznic=
Subject key identifier:   A4:ED:BD:7D:53:24:B0:51:CD:FF:B2:5A:60:2F:53:FE:0E:E0:F3:CA
Authority key identifier: D5:F4:34:5A:2A:F6:B5:44:CD:1B:8E:78:D7:3E:C0:2B:88:95:54:6D
Certificate issuer:       /CN=d5f4345a2af6b544cd1b8e78d73ec02b8895546d
Certificate serial:       019E2AA7A9D0090DC295EFEFD1C51A020B37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
Manifest number:          05A0
Signing time:             Fri 15 May 2026 08:01:31 +0000
Manifest this update:     Fri 15 May 2026 08:01:31 +0000
Manifest next update:     Sat 16 May 2026 08:01:31 +0000
Files and hashes:         1: 1fQ0Wir2tUTNG4541z7AK4iVVG0.crl (hash: v8Lhg5E6VIh2ZtE0Qhw9ORuKV9HFobXWsGERulyY7+Q=)
                          2: IebKw_yiTfK_V4_z25ukLjaMeWQ.roa (hash: MAvIvWJqafppESV+KP67qNLbvZAyKKXSx7PlRQfGNY0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:a7:a9:d0:09:0d:c2:95:ef:ef:d1:c5:1a:02:0b:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f4345a2af6b544cd1b8e78d73ec02b8895546d
        Validity
            Not Before: May 15 08:01:31 2026 GMT
            Not After : May 16 08:01:31 2026 GMT
        Subject: CN=a4edbd7d5324b051cdffb25a602f53fe0ee0f3ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:43:cb:5f:e0:61:2d:4e:ac:c3:5a:52:0c:ff:
                    e4:2c:ef:17:8d:be:bd:de:b1:73:01:96:ac:1a:7e:
                    14:47:63:c5:95:d9:51:6e:4c:ca:9b:81:82:9b:8f:
                    77:2f:a0:5a:3b:a6:65:8c:72:65:83:25:0b:88:38:
                    8a:e8:f7:55:49:f3:2a:ce:91:6b:ed:95:ac:a3:6d:
                    67:c3:d4:f7:05:fd:24:2c:6b:1c:be:d9:0b:b6:62:
                    b1:d2:da:cc:94:13:4d:8e:25:a6:6b:20:4f:8a:d8:
                    6b:31:b7:14:f8:31:7b:c2:c5:d3:06:60:18:1d:d5:
                    3f:60:e3:9a:58:51:49:c7:93:a8:61:c9:d6:8d:22:
                    63:51:09:d4:3e:9f:2d:c6:c5:9c:ec:6b:32:9e:b8:
                    15:cb:8f:20:ee:ee:ef:f2:b9:cc:1e:22:57:66:9f:
                    68:6f:23:9e:ff:e5:83:14:23:19:66:14:17:1d:45:
                    9c:7b:07:d7:cd:d3:5a:00:40:5e:c4:ef:dd:ef:55:
                    a9:13:23:99:f1:18:95:9a:16:24:0e:13:4b:b9:d0:
                    95:ed:42:28:ac:e2:ee:64:71:ce:15:52:3c:78:8a:
                    04:78:81:5e:5c:be:d8:89:63:cf:2b:15:95:e3:9e:
                    57:6e:97:63:22:0b:a7:6e:b5:d7:e6:d6:89:1e:6d:
                    0d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:ED:BD:7D:53:24:B0:51:CD:FF:B2:5A:60:2F:53:FE:0E:E0:F3:CA
            X509v3 Authority Key Identifier:
                keyid:D5:F4:34:5A:2A:F6:B5:44:CD:1B:8E:78:D7:3E:C0:2B:88:95:54:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:1e:3c:34:16:f7:bf:6f:ce:8a:a1:05:a5:fc:71:30:66:87:
         1f:4a:db:08:5e:39:1f:8a:5d:4b:e5:f5:16:89:a8:d5:fb:5b:
         fe:bd:28:d5:d0:98:79:95:51:08:0a:db:a0:d2:04:24:51:c7:
         07:69:ad:13:07:5e:5e:1c:8e:62:99:59:3c:d2:aa:98:af:49:
         ce:ba:46:71:a8:d7:80:de:c2:1a:2e:51:7e:f8:ff:e9:34:cf:
         c7:12:4d:35:db:83:12:d6:17:d9:91:61:c7:48:82:79:5e:a2:
         2c:35:ca:f5:57:ad:21:6f:29:2a:2e:22:c2:23:40:b3:ab:43:
         e5:6c:3f:d2:32:47:71:c1:04:8d:97:4e:54:9f:27:85:ba:b4:
         d3:b1:69:32:e5:c8:3c:db:9e:71:fd:1d:44:d1:c1:e1:ea:1c:
         85:dc:de:81:93:8c:08:57:4b:8e:bd:54:55:ea:76:24:27:15:
         97:87:fa:e9:e3:9b:7b:e7:8b:b4:10:87:f0:e7:30:9a:43:e9:
         6e:76:bf:cf:e4:7c:e8:3d:d1:d6:ea:08:01:2f:a3:3a:da:e6:
         52:d2:58:c1:3a:c7:d8:d0:5f:da:cf:2a:e7:3d:c2:6d:5d:80:
         12:15:5a:0b:ba:95:9c:3a:34:2f:8e:3e:5a:32:f3:75:0b:e6:
         b0:ca:9a:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4qp6nQCQ3Cle/v0cUaAgs3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZjQzNDVhMmFmNmI1NDRjZDFiOGU3OGQ3M2VjMDJiODg5
NTU0NmQwHhcNMjYwNTE1MDgwMTMxWhcNMjYwNTE2MDgwMTMxWjAzMTEwLwYDVQQD
EyhhNGVkYmQ3ZDUzMjRiMDUxY2RmZmIyNWE2MDJmNTNmZTBlZTBmM2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0PLX+BhLU6sw1pSDP/kLO8Xjb69
3rFzAZasGn4UR2PFldlRbkzKm4GCm493L6BaO6ZljHJlgyULiDiK6PdVSfMqzpFr
7ZWso21nw9T3Bf0kLGscvtkLtmKx0trMlBNNjiWmayBPithrMbcU+DF7wsXTBmAY
HdU/YOOaWFFJx5OoYcnWjSJjUQnUPp8txsWc7GsynrgVy48g7u7v8rnMHiJXZp9o
byOe/+WDFCMZZhQXHUWcewfXzdNaAEBexO/d71WpEyOZ8RiVmhYkDhNLudCV7UIo
rOLuZHHOFVI8eIoEeIFeXL7YiWPPKxWV455XbpdjIgunbrXX5taJHm0NdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTtvX1TJLBRzf+yWmAvU/4O4PPKMB8GA1UdIwQY
MBaAFNX0NFoq9rVEzRuOeNc+wCuIlVRtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWZRMFdpcjJ0VVRORzQ1NDF6N0FLNGlWVkcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ZWRmOTEtMzczNi00YmY5LWEzOGIt
MjViYjlmYjE5NzIwLzEvMWZRMFdpcjJ0VVRORzQ1NDF6N0FLNGlWVkcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC85ZWRmOTEtMzczNi00YmY5LWEzOGItMjViYjlmYjE5NzIw
LzEvMWZRMFdpcjJ0VVRORzQ1NDF6N0FLNGlWVkcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEh48NBb3
v2/OiqEFpfxxMGaHH0rbCF45H4pdS+X1Fomo1ftb/r0o1dCYeZVRCArboNIEJFHH
B2mtEwdeXhyOYplZPNKqmK9JzrpGcajXgN7CGi5Rfvj/6TTPxxJNNduDEtYX2ZFh
x0iCeV6iLDXK9VetIW8pKi4iwiNAs6tD5Ww/0jJHccEEjZdOVJ8nhbq007FpMuXI
PNuecf0dRNHB4eochdzegZOMCFdLjr1UVep2JCcVl4f66eObe+eLtBCH8OcwmkPp
bna/z+R86D3R1uoIAS+jOtrmUtJYwTrH2NBf2s8q5z3CbV2AEhVaC7qVnDo0L44+
WjLzdQvmsMqa4g==
-----END CERTIFICATE-----
Generated at Fri May 15 10:08:27 2026 by rpki-client