Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft
File:                     8WsoQW3b85-ySwmWaGrPrOdsmNU.mft (raw, json)
Hash identifier:          dQIx1qzSd1CDJPXEee2pYmcwnndkYBGo1SHF7xupJpQ=
Subject key identifier:   2D:95:77:53:95:D3:6E:BA:0E:1A:F1:B4:31:89:11:CD:AD:1C:19:35
Authority key identifier: F1:6B:28:41:6D:DB:F3:9F:B2:4B:09:96:68:6A:CF:AC:E7:6C:98:D5
Certificate issuer:       /CN=f16b28416ddbf39fb24b0996686acface76c98d5
Certificate serial:       019E31858C47DF0BEC559769AF4D9F7460CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8WsoQW3b85-ySwmWaGrPrOdsmNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft
Manifest number:          1913
Signing time:             Sat 16 May 2026 16:01:36 +0000
Manifest this update:     Sat 16 May 2026 16:01:36 +0000
Manifest next update:     Sun 17 May 2026 16:01:36 +0000
Files and hashes:         1: 8WsoQW3b85-ySwmWaGrPrOdsmNU.crl (hash: o/E6LssRm1toMaDrpS7pfKe8EKXnvovdTAfY9z1NTog=)
                          2: M2iBBMOA3qsSMyjlSglJFjGkADw.roa (hash: cG0ba+40x+sUUIApNoE0kjA0ui/lM0Su8lRnaV2pbUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8WsoQW3b85-ySwmWaGrPrOdsmNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:85:8c:47:df:0b:ec:55:97:69:af:4d:9f:74:60:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f16b28416ddbf39fb24b0996686acface76c98d5
        Validity
            Not Before: May 16 16:01:36 2026 GMT
            Not After : May 17 16:01:36 2026 GMT
        Subject: CN=2d95775395d36eba0e1af1b4318911cdad1c1935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f2:72:ef:41:59:1e:0a:2a:c1:c4:6b:8a:8d:
                    6a:db:19:c4:86:4d:0a:1d:22:60:fd:ae:a0:c0:ec:
                    f8:49:b6:37:87:74:e1:e7:60:91:f6:6c:de:5f:8b:
                    f9:db:bc:24:da:f4:1e:49:ee:13:a7:c1:65:1f:fa:
                    a7:0e:b2:1e:6b:73:3d:d0:56:0b:96:6b:ca:1a:e1:
                    74:df:53:40:1e:ef:34:3a:4d:8f:66:f5:46:aa:35:
                    5b:f7:cd:ad:52:3e:aa:a5:5a:5d:03:34:a7:97:3e:
                    a8:53:dc:95:02:df:1a:60:11:41:86:64:0b:09:e0:
                    d4:90:f1:84:bf:e2:38:89:de:09:bf:90:04:8b:04:
                    c3:2f:79:b6:4b:b3:90:28:9f:f3:8b:1d:dc:15:61:
                    24:6c:f5:4a:37:ca:32:9a:cc:01:78:79:3e:ee:f1:
                    f3:48:bb:a8:21:9e:02:0d:e1:1d:50:a7:1f:29:e3:
                    df:a4:df:d3:ac:99:af:b2:a5:03:e0:16:fc:65:c6:
                    7e:ea:90:8b:20:1e:b7:58:38:09:3b:46:35:6b:0e:
                    ff:7b:c0:f2:4d:30:00:32:15:61:58:76:cc:43:6e:
                    e6:47:2f:42:c4:9f:ea:77:79:87:8e:bd:3f:b6:6e:
                    2a:2c:39:d2:98:e8:df:85:a5:95:25:ce:50:6e:90:
                    36:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:95:77:53:95:D3:6E:BA:0E:1A:F1:B4:31:89:11:CD:AD:1C:19:35
            X509v3 Authority Key Identifier:
                keyid:F1:6B:28:41:6D:DB:F3:9F:B2:4B:09:96:68:6A:CF:AC:E7:6C:98:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WsoQW3b85-ySwmWaGrPrOdsmNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:1a:a0:f6:97:88:fd:25:03:1e:93:8c:0b:db:02:55:a9:a6:
         41:b7:87:17:d2:26:2c:7b:82:b9:44:06:b0:ac:09:d6:36:ee:
         41:80:25:1a:00:fb:4d:76:dd:6f:ff:1b:15:12:1a:93:18:1c:
         f9:2f:fd:5d:a1:42:3e:e9:ab:d2:a9:4e:da:06:b4:be:50:29:
         6d:0d:0a:01:cb:e1:2c:63:b1:2d:41:8f:8b:32:ef:f9:3f:b2:
         5f:3b:99:93:7e:11:37:44:ad:4c:3f:e6:93:c6:d3:32:fc:4a:
         e4:be:df:c8:51:cd:a2:46:e8:5f:64:b2:bf:d7:01:bf:fa:89:
         1c:ab:3d:88:e2:fb:ff:e7:ea:a9:74:b7:bd:45:27:47:5e:89:
         65:13:ac:53:6f:09:52:ab:df:84:aa:d0:5a:65:8a:10:85:75:
         e2:60:c4:53:7b:b5:d1:fa:d1:4e:ef:c5:ff:8c:3b:b3:1a:ab:
         a5:99:b9:f4:d6:43:9c:a5:db:52:d2:2e:f6:d9:a1:0b:ec:49:
         3e:fb:21:6a:b7:55:eb:71:c1:93:ae:53:5a:2a:0a:ae:33:69:
         81:f1:c3:b8:48:43:18:e8:c9:1f:49:fe:7a:e7:58:8e:2d:a0:
         48:90:54:96:89:7d:f8:e4:21:ce:64:e7:e5:dc:f7:c0:00:44:
         16:29:70:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xhYxH3wvsVZdpr02fdGDPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNmIyODQxNmRkYmYzOWZiMjRiMDk5NjY4NmFjZmFjZTc2
Yzk4ZDUwHhcNMjYwNTE2MTYwMTM2WhcNMjYwNTE3MTYwMTM2WjAzMTEwLwYDVQQD
EygyZDk1Nzc1Mzk1ZDM2ZWJhMGUxYWYxYjQzMTg5MTFjZGFkMWMxOTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPJy70FZHgoqwcRrio1q2xnEhk0K
HSJg/a6gwOz4SbY3h3Th52CR9mzeX4v527wk2vQeSe4Tp8FlH/qnDrIea3M90FYL
lmvKGuF031NAHu80Ok2PZvVGqjVb982tUj6qpVpdAzSnlz6oU9yVAt8aYBFBhmQL
CeDUkPGEv+I4id4Jv5AEiwTDL3m2S7OQKJ/zix3cFWEkbPVKN8oymswBeHk+7vHz
SLuoIZ4CDeEdUKcfKePfpN/TrJmvsqUD4Bb8ZcZ+6pCLIB63WDgJO0Y1aw7/e8Dy
TTAAMhVhWHbMQ27mRy9CxJ/qd3mHjr0/tm4qLDnSmOjfhaWVJc5QbpA24wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC2Vd1OV0266DhrxtDGJEc2tHBk1MB8GA1UdIwQY
MBaAFPFrKEFt2/OfsksJlmhqz6znbJjVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFdzb1FXM2I4NS15U3dtV2FHclByT2RzbU5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9iMTY1Y2EtMmYzMy00ZThlLWE4OTYt
Y2RhYTU4MTUxOGYzLzEvOFdzb1FXM2I4NS15U3dtV2FHclByT2RzbU5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9iMTY1Y2EtMmYzMy00ZThlLWE4OTYtY2RhYTU4MTUxOGYz
LzEvOFdzb1FXM2I4NS15U3dtV2FHclByT2RzbU5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdBqg9peI
/SUDHpOMC9sCVammQbeHF9ImLHuCuUQGsKwJ1jbuQYAlGgD7TXbdb/8bFRIakxgc
+S/9XaFCPumr0qlO2ga0vlApbQ0KAcvhLGOxLUGPizLv+T+yXzuZk34RN0StTD/m
k8bTMvxK5L7fyFHNokboX2Syv9cBv/qJHKs9iOL7/+fqqXS3vUUnR16JZROsU28J
UqvfhKrQWmWKEIV14mDEU3u10frRTu/F/4w7sxqrpZm59NZDnKXbUtIu9tmhC+xJ
PvshardV63HBk65TWioKrjNpgfHDuEhDGOjJH0n+eudYji2gSJBUlol9+OQhzmTn
5dz3wABEFilwDQ==
-----END CERTIFICATE-----
Generated at Sat May 16 19:29:32 2026 by rpki-client