Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
File:                     87KAXYd27t63qky-WvVozbJin8I.mft (raw, json)
Hash identifier:          ntGrvUZHYW8FlL59BLwIkR6gZ4JK1+InBeq8XroMPGk=
Subject key identifier:   54:05:D8:F6:BE:A8:AE:41:1E:F1:E4:36:D1:D7:A7:D7:C0:25:E7:09
Authority key identifier: F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2
Certificate issuer:       /CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
Certificate serial:       019E3073083FA8DF005248BEA933849D759E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
Manifest number:          1245
Signing time:             Sat 16 May 2026 11:01:45 +0000
Manifest this update:     Sat 16 May 2026 11:01:45 +0000
Manifest next update:     Sun 17 May 2026 11:01:45 +0000
Files and hashes:         1: 87KAXYd27t63qky-WvVozbJin8I.crl (hash: jo+16uA4T38pDgRHLHzjRQk/lfB7mVbP5YNu7hEJCh0=)
                          2: AspI11raW1W04hjS-S4dOvg7DJ0.roa (hash: vyR9bLbU9Kq6oSRsp+g4vq54T/skGcryAaf7JnoUv/A=)
                          3: Kt_KSYrDgcjqIw-tzOf1SsEuolE.roa (hash: iGYT2jk0/nojybC7EhwbZ+9UI5BCjZA3DlRVN4V+qoM=)
                          4: cLMf5Wd9_XCFE1K-8kc5wZs2Fi4.roa (hash: c7+KWt1SdxMn3TTxEN2hC0zORqA9HzBlfBHlbXmPphA=)
                          5: ehqv0V2Mxbz4tpd2nZ-H0adSaEo.roa (hash: 02XO0vXOdnlzhqYHTi75uxwmBCYXsERvvoqfOYq0+7M=)
                          6: uYwmLI9IgXoeBYgIJ67lD4M9yaw.roa (hash: KF+AYbOaxFn3R/9fgqU1GbRgcGguP9S+XNTb3CR98gw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:73:08:3f:a8:df:00:52:48:be:a9:33:84:9d:75:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
        Validity
            Not Before: May 16 11:01:45 2026 GMT
            Not After : May 17 11:01:45 2026 GMT
        Subject: CN=5405d8f6bea8ae411ef1e436d1d7a7d7c025e709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:9c:71:a0:32:b6:20:a2:20:35:af:a0:b6:55:
                    a1:cc:16:aa:eb:58:99:ef:88:bf:f4:e0:9b:e3:6d:
                    b9:ce:be:9a:fd:5e:6b:c3:ae:40:2b:7b:06:a0:f6:
                    82:c0:3f:54:ea:c1:18:25:01:23:cd:ac:71:b5:94:
                    8b:8a:e5:c6:42:3f:91:5f:a0:66:f7:76:16:01:2b:
                    d6:67:7e:3c:5c:8b:80:18:fe:0f:f0:b2:22:3e:03:
                    a4:40:df:14:c6:1e:72:58:0a:60:ee:2e:b2:a1:20:
                    be:01:af:b2:a5:42:fa:0f:7c:64:97:04:19:70:52:
                    ae:17:7c:38:5a:c0:fc:06:01:44:57:1e:66:9a:b2:
                    3d:9a:16:4e:b0:90:90:c4:27:3c:5e:d1:47:0b:c1:
                    d7:ab:b3:18:42:32:cc:47:2e:02:e0:9e:8d:18:e5:
                    ae:38:4a:de:e3:29:94:e0:56:cd:8e:6d:d4:7c:35:
                    6a:c5:f0:c3:e6:d2:a4:cd:df:6a:8e:32:3c:ab:51:
                    36:e1:3f:4d:a2:e7:1e:d7:8c:19:09:88:a3:fd:1e:
                    ed:23:4b:df:50:a8:b1:99:e9:4a:e1:ef:dd:ee:01:
                    2f:e1:03:af:a2:a3:19:f4:04:cc:72:5e:c2:3c:19:
                    ca:3f:f9:b2:c2:d4:4a:ea:17:92:58:19:45:5a:8e:
                    dd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:05:D8:F6:BE:A8:AE:41:1E:F1:E4:36:D1:D7:A7:D7:C0:25:E7:09
            X509v3 Authority Key Identifier:
                keyid:F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:e7:1a:15:66:ec:fe:cd:dd:53:5f:41:1d:80:fc:1d:06:c3:
         54:a1:3a:f2:e9:b5:53:b4:1c:b9:47:e5:31:c0:14:dc:da:97:
         0f:be:87:da:dc:1f:2d:18:63:27:de:3d:f7:c3:a0:21:82:7a:
         62:74:35:d9:bc:b7:47:bb:1c:2c:88:4f:36:c0:f0:8a:1b:47:
         53:6c:00:c5:09:7c:5d:73:f9:55:8c:97:ef:13:34:3c:7a:8a:
         66:70:a2:c8:63:02:c8:c0:8d:d5:d8:bd:d4:74:9f:2a:05:31:
         18:57:f2:f6:eb:e8:89:44:03:4a:4f:00:a2:b3:d6:4c:1f:98:
         60:c1:e8:7f:8a:b5:a7:0c:a1:aa:07:9f:92:a1:ff:26:4e:49:
         ff:f1:4d:eb:72:f1:7d:5f:88:57:60:2c:9b:e9:c9:81:d7:fe:
         a2:64:11:fc:61:4f:52:0e:f9:aa:23:18:06:5f:d2:08:a2:f5:
         24:6a:18:6c:fe:9c:39:ac:ba:be:99:5c:01:f8:07:af:b4:56:
         e5:25:5a:2f:19:92:8d:f9:51:52:76:65:44:07:95:fe:9c:9c:
         10:1d:78:22:aa:bc:c6:74:e5:81:9a:2a:51:fa:c1:63:d5:a8:
         0e:15:eb:d0:f7:e1:a2:64:41:9b:d6:c5:8e:80:79:e9:9e:c7:
         0d:5f:83:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:56:21 2026 by rpki-client