Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
File:                     C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft (raw, json)
Hash identifier:          K5a/RdbUW6jZVw3lXQH+pQdetqmrJclWNPGiCT7WLmQ=
Subject key identifier:   F7:C4:3D:76:25:C4:77:56:53:72:B7:28:AF:3D:10:9F:C7:40:05:BE
Authority key identifier: 0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F
Certificate issuer:       /CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f
Certificate serial:       019E30A96137B8417CAB37C8C969C420E21F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
Manifest number:          10C3
Signing time:             Sat 16 May 2026 12:01:07 +0000
Manifest this update:     Sat 16 May 2026 12:01:07 +0000
Manifest next update:     Sun 17 May 2026 12:01:07 +0000
Files and hashes:         1: C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl (hash: HAcIKQ6+lbqpKq226VxpUDJcWsQdFsj6DGT8bQwofQo=)
                          2: WkDOgdUMhIbvisg1gB1VqlRy5CE.roa (hash: n8TyrFK/s854qKIOj2eeizMFn+Hfv9n1i9/epsUGYR0=)
                          3: ow55IcypodraGq5qBa3kayj01Ts.roa (hash: QBzRFkOgbS8ToubyKAp8uRDnvfFLz0Wij1mejxjFju0=)
                          4: qFX_V5K9S7pFc_wZHT0Iz0bF_ag.roa (hash: IQpJTlL5gYm7svny6BIGlabTeTBoMOPgbwqqpZYWraQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a9:61:37:b8:41:7c:ab:37:c8:c9:69:c4:20:e2:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f
        Validity
            Not Before: May 16 12:01:07 2026 GMT
            Not After : May 17 12:01:07 2026 GMT
        Subject: CN=f7c43d7625c477565372b728af3d109fc74005be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a4:20:99:5b:24:26:01:54:c8:c3:cb:8c:fd:
                    f4:63:12:e3:c1:2a:c1:92:f6:00:b4:8f:10:cc:37:
                    1c:e0:21:18:b1:1e:82:d8:5e:2e:24:53:1f:b9:2b:
                    b4:7e:63:f7:c8:3f:9b:58:cb:96:1f:1b:94:88:96:
                    f2:18:2a:ed:59:06:3c:7b:c2:5b:a8:b7:7f:01:2a:
                    a7:5e:2a:be:91:76:2e:7b:da:bf:89:d0:ef:b3:31:
                    68:b9:b3:67:ab:56:cd:dd:23:46:08:2b:81:15:27:
                    e2:3f:87:59:b0:90:2f:95:d3:76:9a:eb:b6:91:4f:
                    b1:e5:9f:01:26:b5:24:cc:f3:47:bb:b6:7d:95:49:
                    c9:26:67:32:98:1c:5a:44:52:17:6b:b5:6e:5e:78:
                    46:de:66:d6:f9:83:01:13:dc:0d:6c:08:b4:f9:2a:
                    cb:44:16:ec:b5:e8:20:48:87:a8:30:d1:97:b0:2b:
                    68:ef:3a:9e:be:ee:e5:74:99:1a:9c:15:aa:04:87:
                    7f:d6:1b:b2:cd:78:07:a6:89:ee:20:45:71:73:07:
                    a7:ef:83:64:f5:d2:2e:86:ca:e6:17:60:59:26:cb:
                    ec:de:2b:52:b2:2a:75:d2:c7:d2:62:10:6b:1b:4b:
                    9c:12:30:76:76:f3:5f:ea:49:e3:39:5b:74:86:80:
                    c3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:C4:3D:76:25:C4:77:56:53:72:B7:28:AF:3D:10:9F:C7:40:05:BE
            X509v3 Authority Key Identifier:
                keyid:0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:13:12:80:b3:5e:fa:bb:4b:c6:5a:70:bd:f4:69:cf:18:bd:
         91:c1:51:2f:9e:93:67:b9:49:0d:7d:23:bd:cb:95:df:63:fd:
         53:27:9c:71:8b:98:dc:4a:b5:f7:f0:d4:97:25:d8:8f:22:b6:
         9b:39:30:54:bc:1a:1b:ac:fd:55:01:ea:a2:e5:c9:5a:32:90:
         c0:c3:61:c2:84:e9:8f:50:92:8e:bd:ab:4c:41:49:18:b5:c1:
         ed:82:c8:6e:4c:a4:33:f3:46:cd:79:e0:db:53:00:70:4f:3a:
         2b:77:ca:e1:31:f1:17:40:91:8a:39:c4:a5:e1:53:c8:fa:ee:
         b3:c6:fb:e5:7c:e2:54:5b:13:3c:bb:22:02:fb:dc:2b:47:55:
         04:b1:78:90:2a:04:1a:98:f5:22:89:8e:cf:0f:2f:77:22:7c:
         19:c6:57:1e:71:41:0a:62:bc:3e:c5:cb:ba:f7:86:7c:8c:00:
         d5:de:7c:b2:eb:a6:56:1c:02:33:43:fd:69:a7:61:86:55:66:
         28:ff:4b:b9:5e:1f:ec:71:76:dc:4d:67:68:a3:d3:8f:69:aa:
         0d:c9:76:7a:fd:97:52:77:84:6c:04:18:31:72:3e:2f:11:7b:
         67:ca:a9:4f:0b:ed:1e:5a:a9:21:74:af:f6:3e:77:31:2a:d0:
         96:99:09:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:11:42 2026 by rpki-client