Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft
File:                     0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft (raw, json)
Hash identifier:          8BzZlYip+bVeKM3ISbzjCMbgCFxREfVcgn3ZXpAdScU=
Subject key identifier:   E0:77:59:26:89:34:41:B7:16:44:C5:AE:56:FF:FF:E7:2E:18:A7:94
Authority key identifier: D2:23:09:3C:E1:50:87:40:16:D7:93:F4:39:F4:3D:2E:64:40:C3:F2
Certificate issuer:       /CN=d223093ce150874016d793f439f43d2e6440c3f2
Certificate serial:       019DEDEDA2AB70191879193ACC2D2B58C1B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft
Manifest number:          18EB
Signing time:             Sun 03 May 2026 13:01:06 +0000
Manifest this update:     Sun 03 May 2026 13:01:06 +0000
Manifest next update:     Mon 04 May 2026 13:01:06 +0000
Files and hashes:         1: 0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl (hash: 6l4I7rV7cB/JQnsioLV9EBjcMFhRQSAiOv+TVmndHeM=)
                          2: dIQUiyCohK8UIKP3Wc_vpehQ9jQ.roa (hash: 4z4Cff5T7C1kMcuabXqlqC9vzDBKDpLEEFDPaDQ1Shs=)
                          3: lU-M6Rbwn_sYPtT01bjpJTpzM_c.roa (hash: aE61BcYLJ+s8wneEHCKlvN2g4ojZACwiHGtJ3iEG3YI=)
                          4: qgZQRIByCSALcE73ENt-q4UPqdY.roa (hash: GR9g1THKzvFcNqQhXU+wmTdELTKbBSkjvvOetVfO1p8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 May 2026 05:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ed:ed:a2:ab:70:19:18:79:19:3a:cc:2d:2b:58:c1:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d223093ce150874016d793f439f43d2e6440c3f2
        Validity
            Not Before: May  3 13:01:06 2026 GMT
            Not After : May  4 13:01:06 2026 GMT
        Subject: CN=e0775926893441b71644c5ae56ffffe72e18a794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:32:87:ae:3b:e7:0c:44:4c:76:0a:4f:4e:f0:
                    ae:48:ca:5d:aa:9a:80:0b:12:45:3c:f6:f7:bf:e6:
                    28:ae:e7:1c:17:59:db:a1:95:4a:cf:73:62:de:62:
                    2d:8e:f3:8b:46:d3:0a:35:e9:37:eb:49:95:fc:3f:
                    06:7e:f3:b5:3c:60:f9:cb:c9:e2:70:82:72:d8:8a:
                    dd:d9:32:1f:01:30:69:91:8a:3e:45:ab:a1:62:95:
                    7e:38:02:18:80:e3:28:3b:c9:c5:6a:5e:70:6e:ab:
                    78:83:e6:dc:30:ef:eb:3f:39:22:6d:a8:e9:bf:e7:
                    8a:c3:4b:59:04:dc:8f:28:c4:bf:ed:49:91:db:56:
                    a1:66:3d:0d:b2:c0:57:ae:8f:fc:63:9c:65:18:b4:
                    8a:ed:81:61:f1:a5:87:e1:b9:d6:27:16:38:4d:03:
                    63:33:82:f9:e0:bb:18:73:de:9a:41:ba:cd:04:81:
                    07:2e:e8:96:da:89:f2:bd:df:a9:09:c2:cc:d3:3b:
                    71:3b:16:a9:1b:27:0e:8c:ca:c5:95:24:71:7b:b2:
                    94:ce:d2:f6:58:66:33:69:54:8a:12:ad:b7:1b:6d:
                    58:8d:b6:21:d8:70:02:46:57:a1:86:db:c2:a0:14:
                    38:9e:b0:e0:0e:3d:9d:f1:06:29:9d:d5:7b:14:25:
                    ee:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:77:59:26:89:34:41:B7:16:44:C5:AE:56:FF:FF:E7:2E:18:A7:94
            X509v3 Authority Key Identifier:
                keyid:D2:23:09:3C:E1:50:87:40:16:D7:93:F4:39:F4:3D:2E:64:40:C3:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:c0:79:77:fe:e3:cd:1e:80:60:3a:a6:5e:24:87:d6:1e:42:
         a8:22:17:12:98:6a:32:ac:3c:29:bd:27:be:46:2a:7e:a6:85:
         75:b6:85:21:b3:bf:0b:f6:b9:09:c5:33:62:87:58:a8:ff:07:
         f8:51:dd:a9:c7:83:92:aa:7f:b9:a9:c6:1f:0c:51:ee:8f:a0:
         3a:21:66:46:28:96:5a:b9:d9:93:fb:d0:9d:46:c0:27:f3:8c:
         62:0f:90:bb:90:07:24:5d:1d:5e:60:8b:3d:e0:a7:e5:42:34:
         06:a8:a2:89:8f:01:fd:2a:cc:a0:ad:61:8f:56:df:a2:ea:c6:
         c0:98:eb:1c:f4:5f:0b:f9:d3:01:c4:f3:e2:4e:d8:5c:03:e6:
         85:9b:33:36:27:1b:cf:7f:7f:ed:3f:ce:b4:15:57:dc:2d:e0:
         a2:8d:c1:48:a5:07:2a:01:e6:40:57:ff:47:c6:46:d4:65:20:
         72:53:19:c0:b4:bd:e7:e1:c3:54:ae:2c:5d:c0:09:59:c3:21:
         73:e2:30:a2:6b:d4:83:67:fe:4d:87:89:f6:40:20:92:72:17:
         bd:f7:b8:09:d1:07:26:29:0f:f9:e9:38:c9:7f:d8:1b:8d:b2:
         c3:73:bf:13:9e:90:40:f2:bc:44:40:79:f5:eb:44:f7:5f:aa:
         41:57:45:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 15:33:34 2026 by rpki-client