Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
File:                     _JEop2LO62tZ9UMVaLwT_OQauhI.mft (raw, json)
Hash identifier:          L6UPgQim8WIn2rCv164YHf6OevCruv5v/4PbkA0gWpY=
Subject key identifier:   F3:88:C2:9A:4D:1D:E5:5B:C7:22:82:33:49:E8:6D:16:8F:44:CC:7A
Authority key identifier: FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12
Certificate issuer:       /CN=fc9128a762ceeb6b59f5431568bc13fce41aba12
Certificate serial:       019E51EB99DF527BC45A1651255301485B3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
Manifest number:          0785
Signing time:             Fri 22 May 2026 23:00:55 +0000
Manifest this update:     Fri 22 May 2026 23:00:55 +0000
Manifest next update:     Sat 23 May 2026 23:00:55 +0000
Files and hashes:         1: 8mlX01dUhb6-6rm4Tg_A6iylZK8.roa (hash: aWWMzk3BVnWIBBzTyM865wpiSTi7X2ELFihppDyLczk=)
                          2: _JEop2LO62tZ9UMVaLwT_OQauhI.crl (hash: 0oq4BheCSrffFFwEc07vuCnQAmzC0DVlqIfv5pBjrj0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 May 2026 17:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:51:eb:99:df:52:7b:c4:5a:16:51:25:53:01:48:5b:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9128a762ceeb6b59f5431568bc13fce41aba12
        Validity
            Not Before: May 22 23:00:55 2026 GMT
            Not After : May 23 23:00:55 2026 GMT
        Subject: CN=f388c29a4d1de55bc722823349e86d168f44cc7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6f:9d:00:b7:e6:27:57:b2:71:49:96:1f:cd:
                    02:31:fe:96:47:47:4b:84:4f:a1:97:7b:ae:1b:6f:
                    b3:95:15:26:bc:76:93:2a:50:62:eb:bc:e8:24:ff:
                    1d:4d:e9:f0:c9:41:81:a4:51:0e:90:bb:17:da:bf:
                    4e:ef:ec:c5:a8:ad:da:1b:87:f8:0b:1b:75:5f:2b:
                    80:c9:f4:54:58:48:c8:69:56:2a:48:63:af:f9:fa:
                    21:0c:4c:bd:5d:90:fa:d9:da:69:9b:28:ca:2b:8f:
                    dd:d4:cb:f2:03:78:1c:5b:bf:3c:51:66:6b:5b:d1:
                    d4:cf:38:24:44:fb:13:b5:42:95:78:66:6e:ec:98:
                    83:bd:16:b2:45:80:0e:1b:a4:97:c6:0b:78:ee:57:
                    fc:dd:e2:2d:c9:71:8d:fb:2c:60:a8:87:65:ed:5e:
                    6b:de:84:4a:1f:63:3c:c6:dc:d3:a1:5a:cf:d1:ef:
                    c5:9a:a9:9b:c2:00:e9:c1:ba:e0:5a:8b:e5:e2:e3:
                    1d:ce:1e:70:83:ad:86:65:d5:af:8b:d3:66:71:4c:
                    52:37:62:26:ba:5d:9b:65:11:82:cc:1b:91:b0:f7:
                    7c:5a:41:67:4a:e8:c5:9a:b7:c4:c1:b2:e5:c3:1c:
                    05:e8:b5:e1:14:f5:f1:ec:c2:3a:39:96:7d:6a:7a:
                    48:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:88:C2:9A:4D:1D:E5:5B:C7:22:82:33:49:E8:6D:16:8F:44:CC:7A
            X509v3 Authority Key Identifier:
                keyid:FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:0c:4e:b9:24:78:6d:3c:ca:81:c0:50:1b:b6:da:c5:88:31:
         7b:5e:e3:77:dc:7d:95:f9:cc:5a:7f:15:9f:39:3a:3d:8a:55:
         84:71:f1:d0:b0:31:61:d1:5c:8f:1c:af:ad:90:31:1e:73:03:
         af:6f:90:ad:ef:95:27:b2:ee:2c:73:49:98:8c:f2:8e:b2:bb:
         e9:d7:c5:9a:66:17:56:50:99:2f:45:89:dc:23:34:92:ba:b5:
         7d:4a:3b:f6:6e:0e:03:0a:cc:9d:d0:70:35:46:82:34:f9:0b:
         b7:87:9b:e5:bb:51:b8:de:7e:3f:68:3f:f1:bd:07:52:c0:4b:
         da:36:33:c4:d2:cb:4e:09:fa:46:04:1b:ce:a9:a3:fe:26:3b:
         aa:07:92:e5:bc:73:68:78:36:1d:d9:d7:c6:48:9c:cf:c8:0d:
         2f:3f:fa:89:2c:b2:9b:a5:49:61:2b:a0:50:8e:da:98:83:31:
         ed:ab:bf:9a:ac:3c:8f:92:e0:1d:aa:b6:74:0e:78:76:55:24:
         bb:1d:d2:72:3e:b3:d0:dd:a3:8e:ae:e5:67:86:de:bb:73:1b:
         4f:fc:d6:1a:5e:8b:bd:65:8f:80:1e:19:39:49:b8:21:bc:45:
         94:65:db:6f:da:37:aa:8f:47:21:ef:f3:63:3a:96:8a:41:ab:
         a4:e0:f1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 03:47:38 2026 by rpki-client