Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.mft
File:                     1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.mft (raw, json)
Hash identifier:          TDWKRnKreMLgZlkJH3lrEBQ4thggJv7PEOTvvCuYce0=
Subject key identifier:   35:59:A8:67:B8:11:AA:02:7B:B5:01:06:5C:B8:81:D1:58:B2:52:08
Authority key identifier: F8:26:FF:E9:6C:DC:41:EF:AA:8B:FB:31:25:86:2D:65:94:BE:98:27
Certificate issuer:       /CN=f826ffe96cdc41efaa8bfb3125862d6594be9827
Certificate serial:       019E0BC1B67E30E66A7F09B45C870A750221
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.mft
Manifest number:          11CF
Signing time:             Sat 09 May 2026 08:01:45 +0000
Manifest this update:     Sat 09 May 2026 08:01:45 +0000
Manifest next update:     Sun 10 May 2026 08:01:45 +0000
Files and hashes:         1: 1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.crl (hash: FNgDzAoZiHsbp4zl9r7eOYEzobj1vUqpgwyQ6fYdyaA=)
                          2: CXq1ehXWNMHefU8KADZSUiW5JNQ.roa (hash: IQLBY624JMgfLXTy5NdATSOazp1jTQpenvXMhkZX3P0=)
                          3: U_-oEqDoqq4pyChyVJLsATa4hF0.roa (hash: 8Yj0FUG+yJPUHzOrojBoyPpjqX+h2j3Dx9uPO5dyJKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:0b:c1:b6:7e:30:e6:6a:7f:09:b4:5c:87:0a:75:02:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f826ffe96cdc41efaa8bfb3125862d6594be9827
        Validity
            Not Before: May  9 08:01:45 2026 GMT
            Not After : May 10 08:01:45 2026 GMT
        Subject: CN=3559a867b811aa027bb501065cb881d158b25208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8d:ba:f8:6e:e9:b4:68:ae:8d:e0:00:b2:1f:
                    bc:13:dc:48:2b:76:0a:f8:58:38:d2:f7:6c:f2:fb:
                    f0:eb:45:15:bc:7e:32:36:51:57:fb:19:50:e3:bd:
                    67:c3:2c:ee:cc:94:bd:da:2a:b7:05:c9:90:1e:ab:
                    6b:e6:16:8b:eb:72:10:2b:cf:87:78:dc:77:5b:ae:
                    c0:3d:80:7c:c8:bc:14:85:e9:b6:d6:74:b2:a2:44:
                    e1:bb:d6:24:2c:74:72:03:9a:98:ae:94:c0:19:61:
                    f9:bc:3f:9d:58:ea:36:f2:03:3b:4a:b9:1d:65:9b:
                    8d:5d:25:1f:ec:ae:3e:93:9b:29:2d:d0:55:0b:cf:
                    02:77:b6:99:c8:fc:d9:ca:a4:1a:a8:1b:bc:ab:b2:
                    e1:b6:cb:c1:f3:6b:98:3b:cc:28:c5:52:3b:e2:58:
                    87:aa:49:af:05:bc:75:57:41:56:56:0d:5a:f3:f0:
                    ba:b3:6d:49:0e:ed:53:8d:e8:94:0a:ff:44:50:3d:
                    aa:58:52:ac:d0:03:1e:d2:b3:6d:75:7a:c5:82:7f:
                    cc:b3:44:94:64:a8:d1:45:0c:84:9f:31:49:3a:58:
                    4e:09:66:d4:28:a7:eb:72:80:12:61:04:8e:51:43:
                    2b:be:46:a0:b0:78:1a:f6:86:a1:be:0a:f2:3f:24:
                    b8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:59:A8:67:B8:11:AA:02:7B:B5:01:06:5C:B8:81:D1:58:B2:52:08
            X509v3 Authority Key Identifier:
                keyid:F8:26:FF:E9:6C:DC:41:EF:AA:8B:FB:31:25:86:2D:65:94:BE:98:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:cb:32:a5:47:c4:bd:42:36:09:ab:d2:e3:b3:ca:7d:68:f1:
         25:7a:f6:1b:3a:81:58:f8:90:77:68:2a:03:6b:a7:05:94:dc:
         53:8d:a2:c4:8b:6e:16:bf:5c:f7:ea:ec:a3:b4:1d:97:80:e9:
         90:14:2c:00:d8:00:8c:c9:80:b9:a5:bc:ae:cc:5a:d8:4f:9b:
         7d:c5:7b:89:db:c1:6d:08:eb:65:49:a5:fb:33:9e:a5:7b:a3:
         00:58:43:d4:c8:ed:0d:92:82:ba:e2:8f:e2:30:6c:f9:8a:d6:
         98:55:3f:5c:90:02:01:12:ee:ad:9e:1b:aa:97:de:c7:38:b5:
         1a:f8:bf:1a:37:42:c3:ff:c9:76:1e:92:d3:30:39:3b:fb:52:
         70:47:a5:3a:47:90:aa:01:57:37:d5:f0:99:90:9d:47:3a:aa:
         57:b0:5c:e0:55:8a:f5:25:1c:27:ab:ec:5d:8e:6f:af:34:2d:
         5d:f4:e2:48:ed:5d:2d:b7:05:ba:6e:6a:5e:43:c0:d1:10:c3:
         1f:e4:78:89:a9:3a:dc:04:f7:b5:ef:95:67:93:a9:6b:0e:7a:
         66:1a:38:f4:18:66:7d:6c:d7:3f:36:02:87:69:7d:94:7e:33:
         13:2e:94:e2:28:7b:aa:7e:f3:ce:cf:da:26:f0:4e:e7:70:23:
         02:f0:13:49
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ4LwbZ+MOZqfwm0XIcKdQIhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MjZmZmU5NmNkYzQxZWZhYThiZmIzMTI1ODYyZDY1OTRi
ZTk4MjcwHhcNMjYwNTA5MDgwMTQ1WhcNMjYwNTEwMDgwMTQ1WjAzMTEwLwYDVQQD
EygzNTU5YTg2N2I4MTFhYTAyN2JiNTAxMDY1Y2I4ODFkMTU4YjI1MjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs426+G7ptGiujeAAsh+8E9xIK3YK
+Fg40vds8vvw60UVvH4yNlFX+xlQ471nwyzuzJS92iq3BcmQHqtr5haL63IQK8+H
eNx3W67APYB8yLwUhem21nSyokThu9YkLHRyA5qYrpTAGWH5vD+dWOo28gM7Srkd
ZZuNXSUf7K4+k5spLdBVC88Cd7aZyPzZyqQaqBu8q7LhtsvB82uYO8woxVI74liH
qkmvBbx1V0FWVg1a8/C6s21JDu1TjeiUCv9EUD2qWFKs0AMe0rNtdXrFgn/Ms0SU
ZKjRRQyEnzFJOlhOCWbUKKfrcoASYQSOUUMrvkagsHga9oahvgryPyS4SQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDVZqGe4EaoCe7UBBly4gdFYslIIMB8GA1UdIwQY
MBaAFPgm/+ls3EHvqov7MSWGLWWUvpgnMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1DYl82V3pjUWUtcWlfc3hKWVl0WlpTLW1DYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjIvNmY2ODI2LTFhYWQtNGMzYy1iZDkx
LWNjYTM3ZTJmMjcyOS8xLzEtQ2JfNld6Y1FlLXFpX3N4SllZdFpaUy1tQ2MubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2IyLzZmNjgyNi0xYWFkLTRjM2MtYmQ5MS1jY2EzN2UyZjI3
MjkvMS8xLUNiXzZXemNRZS1xaV9zeEpZWXRaWlMtbUNjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABcsy
pUfEvUI2CavS47PKfWjxJXr2GzqBWPiQd2gqA2unBZTcU42ixItuFr9c9+rso7Qd
l4DpkBQsANgAjMmAuaW8rsxa2E+bfcV7idvBbQjrZUml+zOepXujAFhD1MjtDZKC
uuKP4jBs+YrWmFU/XJACARLurZ4bqpfexzi1Gvi/GjdCw//Jdh6S0zA5O/tScEel
OkeQqgFXN9XwmZCdRzqqV7Bc4FWK9SUcJ6vsXY5vrzQtXfTiSO1dLbcFum5qXkPA
0RDDH+R4iak63AT3te+VZ5Opaw56Zho49BhmfWzXPzYCh2l9lH4zEy6U4ih7qn7z
zs/aJvBO53AjAvATSQ==
-----END CERTIFICATE-----
Generated at Sat May 9 11:50:40 2026 by rpki-client