Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
File:                     CNC8jFiQLIynu4aewuKDAvpFFek.mft (raw, json)
Hash identifier:          5a9AHzwS1XbIB7QPe0GywH3GLdXal+3Kype9l9uG2go=
Subject key identifier:   69:E1:AA:53:A4:DE:33:FD:29:F5:6E:29:E1:FE:EC:8E:54:8E:33:F5
Authority key identifier: 08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
Certificate issuer:       /CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
Certificate serial:       019E30E0242F74B01D236A9BBD674571C94A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
Manifest number:          1912
Signing time:             Sat 16 May 2026 13:00:56 +0000
Manifest this update:     Sat 16 May 2026 13:00:56 +0000
Manifest next update:     Sun 17 May 2026 13:00:56 +0000
Files and hashes:         1: CNC8jFiQLIynu4aewuKDAvpFFek.crl (hash: mVXsQ6FRmJjv0CZ7Rl/o8PkIwmCC5C4DRCLq/UjkVBA=)
                          2: pJjdeZuekZ9QTR10eFG7UylmsAs.roa (hash: dPPlwFRB2GTwEhBlEXXi16Mfi1J7v+Uwl/hOty31Xtg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:24:2f:74:b0:1d:23:6a:9b:bd:67:45:71:c9:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
        Validity
            Not Before: May 16 13:00:56 2026 GMT
            Not After : May 17 13:00:56 2026 GMT
        Subject: CN=69e1aa53a4de33fd29f56e29e1feec8e548e33f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a9:b8:9e:83:c6:50:0e:70:9b:4c:36:ab:1c:
                    b9:be:26:0c:3b:6d:a5:1b:15:60:b1:24:54:e0:33:
                    99:c1:28:ce:2e:b3:e1:34:89:1b:29:f1:cb:84:8f:
                    ad:47:c5:31:d7:ac:53:e3:4c:ee:bc:a9:1f:14:0b:
                    00:17:47:7b:32:48:52:f1:af:c8:f0:73:72:56:8e:
                    17:c5:19:db:05:6f:b1:aa:e1:4f:f4:72:96:86:44:
                    41:a2:6f:82:64:4a:d9:40:d2:4b:c0:07:87:02:8e:
                    19:5e:9a:c2:4e:40:8c:be:50:3e:8d:b6:a6:47:0a:
                    1d:1a:0b:61:d0:41:24:3b:10:11:18:c6:a8:0a:eb:
                    aa:59:61:e5:dd:3f:c8:c0:3f:ff:01:77:82:f5:04:
                    2e:68:9c:0d:c1:86:b2:ef:22:b4:27:a5:31:73:17:
                    ab:59:20:f1:0d:8e:bc:74:86:92:8e:ab:6c:2a:5d:
                    3a:e4:16:b0:e3:28:0a:e9:35:52:d5:59:eb:69:d9:
                    ff:15:b1:19:c0:b3:55:4e:21:d5:21:2d:1a:4b:3d:
                    02:b9:47:f6:34:e5:a7:47:46:90:82:12:02:c7:d3:
                    6a:f9:ba:f8:e6:ca:2a:81:cc:9f:67:45:43:e0:f2:
                    26:e2:34:21:d2:b3:3a:b9:b4:94:c2:83:d9:71:11:
                    33:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E1:AA:53:A4:DE:33:FD:29:F5:6E:29:E1:FE:EC:8E:54:8E:33:F5
            X509v3 Authority Key Identifier:
                keyid:08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:41:a2:29:ab:27:76:b3:7e:9f:af:73:a7:cb:50:8f:e6:a5:
         ea:fc:5d:f3:73:77:2e:f3:25:c4:f9:2e:56:ba:cb:8c:e1:f6:
         0d:a3:39:f6:5c:c7:01:d4:9c:d7:cd:52:0d:1e:5c:66:ca:8d:
         de:52:bb:48:e0:1b:1d:ef:84:a0:8c:5b:6d:ab:80:71:18:84:
         44:94:9c:a9:1f:d5:ef:20:12:1e:b5:17:08:3f:37:b4:e9:92:
         5c:71:b6:8e:01:cc:1e:2f:98:73:aa:3e:24:f0:71:2f:e6:1d:
         66:72:79:be:c9:7d:d4:68:95:ed:39:b8:da:67:5d:46:5f:95:
         0b:fe:51:89:71:c9:8a:1b:1c:4a:a9:9a:c4:89:81:c6:a4:ec:
         e9:0f:5f:ca:33:d6:e1:95:a2:c0:ac:61:fa:79:78:b1:3e:8d:
         6c:e1:42:7f:51:72:ba:7f:f4:ec:f8:07:51:f0:0d:bc:62:8c:
         c4:2c:75:bf:24:7b:2c:ab:86:e9:3b:56:15:e9:77:42:bb:d4:
         86:17:d5:58:b1:66:f9:9a:12:eb:a0:73:1c:44:d8:0a:76:40:
         9c:5a:5a:e4:40:6d:04:4c:11:28:c5:67:25:37:11:ba:c5:10:
         4e:21:35:9e:11:34:9a:79:77:c0:c6:00:00:ea:94:84:06:6d:
         db:81:f7:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4w4CQvdLAdI2qbvWdFcclKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDBiYzhjNTg5MDJjOGNhN2JiODY5ZWMyZTI4MzAyZmE0
NTE1ZTkwHhcNMjYwNTE2MTMwMDU2WhcNMjYwNTE3MTMwMDU2WjAzMTEwLwYDVQQD
Eyg2OWUxYWE1M2E0ZGUzM2ZkMjlmNTZlMjllMWZlZWM4ZTU0OGUzM2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6m4noPGUA5wm0w2qxy5viYMO22l
GxVgsSRU4DOZwSjOLrPhNIkbKfHLhI+tR8Ux16xT40zuvKkfFAsAF0d7MkhS8a/I
8HNyVo4XxRnbBW+xquFP9HKWhkRBom+CZErZQNJLwAeHAo4ZXprCTkCMvlA+jbam
RwodGgth0EEkOxARGMaoCuuqWWHl3T/IwD//AXeC9QQuaJwNwYay7yK0J6Uxcxer
WSDxDY68dIaSjqtsKl065Baw4ygK6TVS1Vnradn/FbEZwLNVTiHVIS0aSz0CuUf2
NOWnR0aQghICx9Nq+br45soqgcyfZ0VD4PIm4jQh0rM6ubSUwoPZcREz2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGnhqlOk3jP9KfVuKeH+7I5UjjP1MB8GA1UdIwQY
MBaAFAjQvIxYkCyMp7uGnsLigwL6RRXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05DOGpGaVFMSXludTRhZXd1S0RBdnBGRmVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mZjRhNjctNTlmYy00ZjAwLWEzYWQt
YjM3NTRhZmU5NTI5LzEvQ05DOGpGaVFMSXludTRhZXd1S0RBdnBGRmVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9mZjRhNjctNTlmYy00ZjAwLWEzYWQtYjM3NTRhZmU5NTI5
LzEvQ05DOGpGaVFMSXludTRhZXd1S0RBdnBGRmVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnEGiKasn
drN+n69zp8tQj+al6vxd83N3LvMlxPkuVrrLjOH2DaM59lzHAdSc181SDR5cZsqN
3lK7SOAbHe+EoIxbbauAcRiERJScqR/V7yASHrUXCD83tOmSXHG2jgHMHi+Yc6o+
JPBxL+YdZnJ5vsl91GiV7Tm42mddRl+VC/5RiXHJihscSqmaxImBxqTs6Q9fyjPW
4ZWiwKxh+nl4sT6NbOFCf1Fyun/07PgHUfANvGKMxCx1vyR7LKuG6TtWFel3QrvU
hhfVWLFm+ZoS66BzHETYCnZAnFpa5EBtBEwRKMVnJTcRusUQTiE1nhE0mnl3wMYA
AOqUhAZt24H3dQ==
-----END CERTIFICATE-----
Generated at Sat May 16 17:11:15 2026 by rpki-client