Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft
File:                     8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft (raw, json)
Hash identifier:          Gz+Ujyg3LQmVlcEDSZRNeoZVhIlbrcC5rSO/lmstDAU=
Subject key identifier:   78:AA:99:CC:BF:1E:4A:D6:C5:08:8E:23:A7:85:EC:87:EA:AE:6D:E7
Authority key identifier: F2:61:FA:1F:E6:DC:09:FA:54:D1:AF:59:C2:E1:00:CD:14:12:C7:F0
Certificate issuer:       /CN=f261fa1fe6dc09fa54d1af59c2e100cd1412c7f0
Certificate serial:       019E30E07684F47A366170B2359D2D17FA39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft
Manifest number:          190E
Signing time:             Sat 16 May 2026 13:01:17 +0000
Manifest this update:     Sat 16 May 2026 13:01:17 +0000
Manifest next update:     Sun 17 May 2026 13:01:17 +0000
Files and hashes:         1: 8mH6H-bcCfpU0a9ZwuEAzRQSx_A.crl (hash: haL+9MexO/j4dXeugpDSXSKNBbzrfyHPyRgiaB1Lsbs=)
                          2: D0hPX_cQdsaP42kw__DQw0Fz_yc.roa (hash: LtUEAUpBvXQgL6TVsY4N5ahD34Iyyko8ridz4ffMENc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:76:84:f4:7a:36:61:70:b2:35:9d:2d:17:fa:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f261fa1fe6dc09fa54d1af59c2e100cd1412c7f0
        Validity
            Not Before: May 16 13:01:17 2026 GMT
            Not After : May 17 13:01:17 2026 GMT
        Subject: CN=78aa99ccbf1e4ad6c5088e23a785ec87eaae6de7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5b:2e:12:31:66:dc:93:59:e7:31:69:e4:78:
                    27:b1:ab:fc:71:c7:07:df:5e:f2:ee:b2:56:76:67:
                    71:44:62:04:a7:6c:c1:d9:be:4c:da:ac:1d:31:1f:
                    c9:f6:d2:6a:02:85:84:7a:ea:3c:43:90:a4:b7:9d:
                    ff:f4:77:49:ae:46:32:8d:71:27:98:85:7d:e2:c2:
                    85:1e:6a:d6:25:38:62:18:6f:9b:f0:7a:a1:89:d7:
                    8c:bd:b4:e0:e6:ba:7f:dd:88:10:6a:34:85:08:11:
                    82:64:2b:2f:d0:85:c3:89:f0:d1:ce:ef:74:ca:9a:
                    fc:3e:6a:c7:a5:7b:9a:ff:1a:73:f7:df:46:9b:90:
                    c8:35:c4:a9:55:65:c2:91:33:84:a7:a1:23:d5:bc:
                    ac:6c:8d:10:f5:5a:2b:10:e0:4a:a8:3d:47:64:9f:
                    cc:24:2d:6e:44:8d:fa:aa:ea:70:f7:b7:8b:2b:dc:
                    c9:25:1e:93:25:5c:53:57:a6:7d:43:be:75:5e:66:
                    58:10:3b:60:90:6f:3b:39:58:f6:71:3b:1b:99:7f:
                    39:06:e6:27:8f:84:2a:61:0c:ec:f5:5a:f7:b0:43:
                    3a:d9:7e:6d:49:aa:7d:ed:37:5f:b4:6f:26:25:19:
                    2b:97:14:3b:fb:5e:2d:f9:d9:e3:25:38:ee:6d:88:
                    db:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:AA:99:CC:BF:1E:4A:D6:C5:08:8E:23:A7:85:EC:87:EA:AE:6D:E7
            X509v3 Authority Key Identifier:
                keyid:F2:61:FA:1F:E6:DC:09:FA:54:D1:AF:59:C2:E1:00:CD:14:12:C7:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:dc:9b:31:1e:b5:25:b4:56:3a:e1:6a:df:1b:2c:47:68:b4:
         c2:be:5e:e2:bc:63:30:a7:86:85:ca:35:1b:4a:b6:d7:21:6b:
         be:1d:1d:fc:57:3f:24:2c:ca:73:29:26:05:08:e6:61:c3:53:
         42:71:fc:7b:40:ee:cd:48:c3:11:04:15:4f:73:28:19:f8:97:
         c9:b9:f0:d4:ad:b0:c4:29:6d:b0:e1:fc:c4:ea:4f:ed:d9:51:
         e1:08:ec:23:fa:46:af:59:82:ec:13:cb:63:5a:04:24:49:54:
         96:b8:73:b5:4b:71:51:69:da:6a:eb:54:7c:1e:6b:51:f1:3e:
         d3:81:8f:41:44:17:8a:79:2a:53:31:b1:5b:c5:00:a9:1a:af:
         d7:d2:c5:8d:6f:29:73:44:1b:c4:ff:d2:62:39:84:b7:b6:30:
         5b:75:2d:aa:11:4e:17:5b:b0:68:4a:a1:42:97:24:66:9f:11:
         6d:2a:82:f1:d6:16:03:09:12:d9:78:7f:c2:04:bd:b2:90:89:
         8c:41:a5:3d:03:c7:12:c2:5e:c0:b7:2c:23:ea:28:4f:80:5b:
         56:69:fd:05:ac:40:9c:4d:52:c0:c6:22:45:30:ff:14:11:b3:
         67:42:ed:d5:84:f7:e9:e1:81:58:e7:98:6a:2e:28:a2:0d:b9:
         f5:20:bd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:24:47 2026 by rpki-client