Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
File:                     1-iWi8osetikWERKHCUKl7RgbUZ8.mft (raw, json)
Hash identifier:          9djZJ+okxctz7btvSi9mghA2DHyMRaBrpztk7fxzTBc=
Subject key identifier:   C6:11:25:BE:DE:BC:B8:BC:DB:04:E7:0A:85:61:7C:1C:5D:A7:AA:61
Authority key identifier: FA:25:A2:F2:8B:1E:B6:29:16:11:12:87:09:42:A5:ED:18:1B:51:9F
Certificate issuer:       /CN=fa25a2f28b1eb629161112870942a5ed181b519f
Certificate serial:       019E3117555C1003CB2E02568F65E4A0B50D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-iWi8osetikWERKHCUKl7RgbUZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
Manifest number:          0160
Signing time:             Sat 16 May 2026 14:01:13 +0000
Manifest this update:     Sat 16 May 2026 14:01:13 +0000
Manifest next update:     Sun 17 May 2026 14:01:13 +0000
Files and hashes:         1: 1-iWi8osetikWERKHCUKl7RgbUZ8.crl (hash: OHUwEmJJ8LoHioVGwECmRvUW4S0ApP9ZtgHKjI94OZc=)
                          2: npTp4Du46e6L-gb7_xi1R_gV0tY.roa (hash: AYItR+eYoLuQ57cxd9qVNl7nClhJqimYPK8LL9esiTU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-iWi8osetikWERKHCUKl7RgbUZ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:55:5c:10:03:cb:2e:02:56:8f:65:e4:a0:b5:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa25a2f28b1eb629161112870942a5ed181b519f
        Validity
            Not Before: May 16 14:01:13 2026 GMT
            Not After : May 17 14:01:13 2026 GMT
        Subject: CN=c61125bedebcb8bcdb04e70a85617c1c5da7aa61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:cf:97:4a:f8:10:dc:bd:c1:aa:17:36:19:2f:
                    73:04:1b:2b:d2:f7:8d:4b:a4:47:90:2e:26:7e:19:
                    5b:ed:cf:16:62:f3:57:6d:41:80:51:51:b7:6b:50:
                    28:6d:0b:16:c4:82:d9:66:a4:2f:29:46:eb:ba:32:
                    04:45:88:52:fa:aa:fd:fa:63:e9:63:a2:c7:d6:99:
                    4f:f6:cc:5f:58:ae:4d:e8:32:81:1d:2b:49:24:f2:
                    6e:ba:84:b9:bf:18:15:2e:55:e8:fe:35:c9:3c:c0:
                    47:88:5b:c9:57:66:1b:94:23:6f:0f:b4:f5:66:7f:
                    68:0a:c3:9e:83:4d:41:ae:ac:8a:f6:a4:90:b4:76:
                    1b:67:f3:9f:96:44:3e:8c:93:39:4a:d4:c5:56:20:
                    f2:4c:cf:9b:97:26:7f:e9:66:0e:47:a6:fb:30:40:
                    4d:d1:29:19:dd:b9:75:dc:44:61:83:a5:91:fb:5b:
                    a3:12:fa:2e:e6:88:35:6a:ca:b5:ec:86:94:2b:2b:
                    a0:1a:d5:65:ed:35:03:10:e2:f7:67:f0:22:d0:13:
                    34:d3:29:b5:09:93:51:2d:27:79:39:19:4e:b0:5c:
                    5b:09:d6:ff:4d:f8:99:89:43:8c:e2:cf:03:23:48:
                    83:96:c0:d3:22:00:33:ad:d5:d7:3a:0f:c5:1d:59:
                    9b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:11:25:BE:DE:BC:B8:BC:DB:04:E7:0A:85:61:7C:1C:5D:A7:AA:61
            X509v3 Authority Key Identifier:
                keyid:FA:25:A2:F2:8B:1E:B6:29:16:11:12:87:09:42:A5:ED:18:1B:51:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-iWi8osetikWERKHCUKl7RgbUZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:8b:b9:7f:9c:8c:b6:2c:41:10:6e:33:85:8d:e7:55:8e:ef:
         c3:69:11:c9:23:6a:99:f8:ff:a6:18:51:d0:a5:16:51:18:21:
         28:0a:89:0a:40:4f:94:25:42:45:49:b3:21:41:75:98:c6:8f:
         2a:fe:85:f1:25:af:7c:6c:73:d3:31:e1:5c:04:f1:29:1a:33:
         cc:2b:57:92:4e:70:e7:f0:18:b3:2f:70:ab:03:3b:b1:e5:48:
         ea:2e:60:28:40:8c:24:e3:5e:8c:7f:66:b8:69:b4:25:17:be:
         d3:9f:70:95:74:36:05:38:85:7f:10:88:c5:80:56:bb:68:75:
         e1:ad:b7:d5:5b:a5:f7:02:3a:dc:a5:57:eb:96:c1:0f:c8:80:
         f6:07:67:52:cb:01:c5:a8:d8:2e:30:0d:68:e4:6b:f5:f0:b5:
         62:e4:33:95:45:07:c0:21:14:34:b1:10:56:3b:7a:0a:29:18:
         85:3c:65:88:58:bb:a3:96:4a:5b:a9:6a:d6:ed:c0:74:be:e7:
         0a:2e:73:bf:0b:87:3c:0f:79:a5:38:ae:a3:1f:a8:86:31:30:
         22:a8:f3:6d:fa:ae:66:d9:35:cf:25:64:32:d3:81:e7:93:1c:
         b2:c0:89:94:ed:92:d4:a6:16:31:b3:2f:0d:5a:0b:d9:55:9f:
         4f:4a:ef:86
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ4xF1VcEAPLLgJWj2XkoLUNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMjVhMmYyOGIxZWI2MjkxNjExMTI4NzA5NDJhNWVkMTgx
YjUxOWYwHhcNMjYwNTE2MTQwMTEzWhcNMjYwNTE3MTQwMTEzWjAzMTEwLwYDVQQD
EyhjNjExMjViZWRlYmNiOGJjZGIwNGU3MGE4NTYxN2MxYzVkYTdhYTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5s+XSvgQ3L3Bqhc2GS9zBBsr0veN
S6RHkC4mfhlb7c8WYvNXbUGAUVG3a1AobQsWxILZZqQvKUbrujIERYhS+qr9+mPp
Y6LH1plP9sxfWK5N6DKBHStJJPJuuoS5vxgVLlXo/jXJPMBHiFvJV2YblCNvD7T1
Zn9oCsOeg01BrqyK9qSQtHYbZ/OflkQ+jJM5StTFViDyTM+blyZ/6WYOR6b7MEBN
0SkZ3bl13ERhg6WR+1ujEvou5og1asq17IaUKyugGtVl7TUDEOL3Z/Ai0BM00ym1
CZNRLSd5ORlOsFxbCdb/TfiZiUOM4s8DI0iDlsDTIgAzrdXXOg/FHVmbAQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFMYRJb7evLi82wTnCoVhfBxdp6phMB8GA1UdIwQY
MBaAFPolovKLHrYpFhEShwlCpe0YG1GfMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1pV2k4b3NldGlrV0VSS0hDVUtsN1JnYlVaOC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzkvNjQ0NDNlLTAzZjgtNDM3NS05NDFj
LWUxZDE5NWFjMzVkMi8xLzEtaVdpOG9zZXRpa1dFUktIQ1VLbDdSZ2JVWjgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2M5LzY0NDQzZS0wM2Y4LTQzNzUtOTQxYy1lMWQxOTVhYzM1
ZDIvMS8xLWlXaThvc2V0aWtXRVJLSENVS2w3UmdiVVo4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATou5
f5yMtixBEG4zhY3nVY7vw2kRySNqmfj/phhR0KUWURghKAqJCkBPlCVCRUmzIUF1
mMaPKv6F8SWvfGxz0zHhXATxKRozzCtXkk5w5/AYsy9wqwM7seVI6i5gKECMJONe
jH9muGm0JRe+059wlXQ2BTiFfxCIxYBWu2h14a231Vul9wI63KVX65bBD8iA9gdn
UssBxajYLjANaORr9fC1YuQzlUUHwCEUNLEQVjt6CikYhTxliFi7o5ZKW6lq1u3A
dL7nCi5zvwuHPA95pTiuox+ohjEwIqjzbfquZtk1zyVkMtOB55McssCJlO2S1KYW
MbMvDVoL2VWfT0rvhg==
-----END CERTIFICATE-----
Generated at Sat May 16 20:20:39 2026 by rpki-client