Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft
File:                     iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft (raw, json)
Hash identifier:          anK96vaD7vSxU2ObmAAhe5z9mgtYjGdBxDXP25G+5tc=
Subject key identifier:   4B:8D:7F:77:19:B2:FD:E4:30:6E:05:1E:BD:C5:97:0B:E2:13:C6:0C
Authority key identifier: 88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
Certificate issuer:       /CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Certificate serial:       019E307A39DB51D7D40499841F29B7EE5069
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft
Manifest number:          19C8
Signing time:             Sat 16 May 2026 11:09:36 +0000
Manifest this update:     Sat 16 May 2026 11:09:36 +0000
Manifest next update:     Sun 17 May 2026 11:09:36 +0000
Files and hashes:         1: XMPEmo3VyZNZxdfu5EddVS62vv8.roa (hash: 2ZYUsjgp2DTdjQCWXZ434UAo5JDqjz2ePaAoipm0c8M=)
                          2: YklH_vepZzEkc4R0x2RBX8IDDUk.roa (hash: pv6n+2hKIVBO6+P4Pldjs2VXfAy2gbQUsUHIIXPpa8Q=)
                          3: iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl (hash: UCyhvB4sxu10a1GxWUzPfompW1pD+oGhpMRUFL3DljU=)
                          4: npexauQr8Df9--yrJbccn7TjSfE.roa (hash: ku9Ay7TJGej9M0Yt99SQBrQODtwXu3PiAPvTyr/U67U=)
                          5: woSGWIKQYj2fwrUpkm3Ix7e4uuI.roa (hash: +tXPvde6o4N0Lc12WU1uhZdrn1jrPiXBVqSZmgf/BGA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:09:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:7a:39:db:51:d7:d4:04:99:84:1f:29:b7:ee:50:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
        Validity
            Not Before: May 16 11:09:36 2026 GMT
            Not After : May 17 11:09:36 2026 GMT
        Subject: CN=4b8d7f7719b2fde4306e051ebdc5970be213c60c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:27:30:8f:ef:9a:9a:30:51:bd:80:c1:91:b5:
                    e8:17:f8:94:2f:81:93:3c:33:29:85:44:40:88:99:
                    d0:8a:14:ca:c0:e6:5a:8a:37:61:1b:3a:95:db:2a:
                    ee:55:47:ac:5e:24:ec:27:67:57:34:c4:ba:a5:e7:
                    df:96:74:95:99:97:67:d4:94:e2:1b:49:0a:bf:ec:
                    70:35:75:ab:ef:32:7e:e9:2b:eb:5e:91:75:74:bc:
                    8a:52:18:ca:d0:83:50:7b:83:8e:37:36:b2:3d:25:
                    1a:ae:58:6a:c0:95:a1:af:41:98:2a:35:7c:c3:ec:
                    d4:59:ca:8d:e4:9e:72:3b:9c:55:46:2a:5a:14:23:
                    c8:e1:80:d5:cf:d4:be:13:87:52:c8:6a:01:74:85:
                    3e:df:19:f5:60:ee:68:ff:82:45:f7:6b:ee:f6:f8:
                    e6:10:e7:cd:6d:4b:b3:73:95:76:a6:76:2b:d9:54:
                    82:50:22:fb:75:df:ca:64:20:ee:00:16:b8:3c:80:
                    5b:72:37:0a:40:89:7a:41:93:c8:eb:ce:59:d0:59:
                    ff:f0:00:77:5d:01:10:94:87:77:b6:f8:d5:be:24:
                    1a:0b:16:cf:08:2d:05:13:40:a6:00:24:d8:88:27:
                    36:d1:e8:b4:0f:05:74:e3:0c:70:57:9d:23:f8:72:
                    54:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:8D:7F:77:19:B2:FD:E4:30:6E:05:1E:BD:C5:97:0B:E2:13:C6:0C
            X509v3 Authority Key Identifier:
                keyid:88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:2a:31:f9:54:24:65:8f:4a:f2:82:d3:f0:a4:57:2e:35:1e:
         82:e0:7a:73:98:f1:2c:01:cc:dc:9e:1e:33:71:2f:6f:a8:e2:
         82:44:cf:a1:8c:7c:0f:c9:2c:81:d2:25:80:f4:cf:be:34:5d:
         a8:c1:ad:f7:cb:73:22:8b:b3:b7:71:51:f3:56:fb:58:95:4b:
         5b:22:bd:00:0d:da:22:6f:fe:03:d8:3b:cc:d3:8b:45:fb:1d:
         db:d9:1a:b3:b7:a0:47:b8:b5:e0:40:81:c0:7c:da:4e:87:c5:
         57:2b:64:6d:81:d0:08:aa:60:a2:81:d3:f0:bc:b4:a3:75:98:
         8a:3d:38:69:0e:8f:19:db:cf:a4:d7:00:94:86:b2:4d:0b:c4:
         59:61:d9:1a:91:02:01:4a:f5:b3:e7:87:52:76:57:9d:88:f7:
         10:88:0f:09:d0:86:ef:a7:05:0f:c5:0a:75:cd:96:82:16:4b:
         a6:94:8e:5e:93:13:cb:b4:cd:b8:ea:3e:cf:ce:11:63:94:10:
         39:36:47:07:8d:7d:b0:62:63:cf:13:7c:29:41:2d:42:cd:6b:
         fb:5e:7a:e4:b6:bb:13:ca:58:36:ad:2d:d0:ce:ca:0e:b4:fb:
         d9:c3:b4:95:34:50:a1:db:59:2d:ca:f7:95:25:71:8c:ce:f7:
         1b:bd:db:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wejnbUdfUBJmEHym37lBpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NDdhYTkxYjA2ZDhjNmI4NzI4NGYzZjQ1YTIxZGMyODFm
N2JhNTUwHhcNMjYwNTE2MTEwOTM2WhcNMjYwNTE3MTEwOTM2WjAzMTEwLwYDVQQD
Eyg0YjhkN2Y3NzE5YjJmZGU0MzA2ZTA1MWViZGM1OTcwYmUyMTNjNjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCcwj++amjBRvYDBkbXoF/iUL4GT
PDMphURAiJnQihTKwOZaijdhGzqV2yruVUesXiTsJ2dXNMS6pefflnSVmZdn1JTi
G0kKv+xwNXWr7zJ+6SvrXpF1dLyKUhjK0INQe4OONzayPSUarlhqwJWhr0GYKjV8
w+zUWcqN5J5yO5xVRipaFCPI4YDVz9S+E4dSyGoBdIU+3xn1YO5o/4JF92vu9vjm
EOfNbUuzc5V2pnYr2VSCUCL7dd/KZCDuABa4PIBbcjcKQIl6QZPI685Z0Fn/8AB3
XQEQlId3tvjVviQaCxbPCC0FE0CmACTYiCc20ei0DwV04wxwV50j+HJUTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEuNf3cZsv3kMG4FHr3FlwviE8YMMB8GA1UdIwQY
MBaAFIhHqpGwbYxrhyhPP0WiHcKB97pVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUVlcWtiQnRqR3VIS0U4X1JhSWR3b0gzdWxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9mZGYyOTYtNzVlNS00NjM1LTk1NDYt
Y2VhNzVkMGNkNjcxLzEvaUVlcWtiQnRqR3VIS0U4X1JhSWR3b0gzdWxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9mZGYyOTYtNzVlNS00NjM1LTk1NDYtY2VhNzVkMGNkNjcx
LzEvaUVlcWtiQnRqR3VIS0U4X1JhSWR3b0gzdWxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVyox+VQk
ZY9K8oLT8KRXLjUeguB6c5jxLAHM3J4eM3Evb6jigkTPoYx8D8ksgdIlgPTPvjRd
qMGt98tzIouzt3FR81b7WJVLWyK9AA3aIm/+A9g7zNOLRfsd29kas7egR7i14ECB
wHzaTofFVytkbYHQCKpgooHT8Ly0o3WYij04aQ6PGdvPpNcAlIayTQvEWWHZGpEC
AUr1s+eHUnZXnYj3EIgPCdCG76cFD8UKdc2WghZLppSOXpMTy7TNuOo+z84RY5QQ
OTZHB419sGJjzxN8KUEtQs1r+1565La7E8pYNq0t0M7KDrT72cO0lTRQodtZLcr3
lSVxjM73G73bEw==
-----END CERTIFICATE-----
Generated at Sat May 16 20:19:40 2026 by rpki-client