Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a718c5-34a1-4baa-b18f-619d9da29826/1/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.mft
File:                     b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.mft (raw, json)
Hash identifier:          t0w4PETIBtTM/0Kc4FxARRVI474eXn+PildlGtLGmHg=
Subject key identifier:   E1:51:12:B7:C6:45:D3:E3:14:13:94:06:23:00:AD:B2:65:47:16:2F
Authority key identifier: 6F:8C:10:C3:83:72:9F:76:14:99:73:B5:65:5B:E9:BF:34:71:1B:24
Certificate issuer:       /CN=6f8c10c383729f76149973b5655be9bf34711b24
Certificate serial:       019E31BB9CA5E01B04C3FAC3012CF4D9F696
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/a718c5-34a1-4baa-b18f-619d9da29826/1/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.mft
Manifest number:          D8
Signing time:             Sat 16 May 2026 17:00:39 +0000
Manifest this update:     Sat 16 May 2026 17:00:39 +0000
Manifest next update:     Sun 17 May 2026 17:00:39 +0000
Files and hashes:         1: b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.crl (hash: KunqJmAJEQv6ZeBTi/Fq/JSLzKCbFi6MsZpLQ4x8tSY=)
                          2: bf-C7XR5rvxVULROY95AnCsiqDE.roa (hash: Xcehpx+K84jAisImHgsCWZZzlMJjIRq9I5PCTggbexM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/a718c5-34a1-4baa-b18f-619d9da29826/1/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/a718c5-34a1-4baa-b18f-619d9da29826/1/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:bb:9c:a5:e0:1b:04:c3:fa:c3:01:2c:f4:d9:f6:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8c10c383729f76149973b5655be9bf34711b24
        Validity
            Not Before: May 16 17:00:39 2026 GMT
            Not After : May 17 17:00:39 2026 GMT
        Subject: CN=e15112b7c645d3e3141394062300adb26547162f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:be:5a:88:10:f3:d6:60:ac:ac:9b:cc:7a:3a:
                    05:29:da:a1:7e:ea:06:b2:09:6c:e9:ce:ce:a1:86:
                    33:9b:a0:db:d8:31:68:f8:54:87:e1:8d:e6:7d:ff:
                    fd:e4:24:d1:9b:24:c8:dd:62:69:7e:5d:05:cd:00:
                    83:6f:12:68:2d:34:7f:73:b4:c6:a3:32:f0:2f:13:
                    c4:72:44:88:8b:17:61:d3:85:c3:08:1d:9b:f3:a5:
                    f6:86:5b:f3:a6:99:c7:c9:88:2f:84:8e:8e:42:b5:
                    53:6a:aa:c4:43:89:f4:a1:b1:8c:e0:3b:81:c8:ca:
                    9d:d6:b6:56:a0:da:90:82:a2:43:78:fb:46:89:dc:
                    61:30:e1:52:b1:02:92:9b:56:2e:54:94:56:ab:86:
                    09:8e:c4:11:da:8e:a7:69:ff:a8:3e:a2:a6:64:c3:
                    f3:ff:9b:2d:64:08:06:40:da:58:e7:6d:6c:b5:98:
                    45:4c:92:03:aa:e8:84:0d:5c:1e:39:ab:d1:55:ea:
                    0d:d1:4e:a5:13:6a:03:cb:cc:af:5f:b1:a3:92:09:
                    94:ff:cb:8d:1e:19:40:e6:ae:2a:d3:81:c9:4c:02:
                    45:aa:09:ec:2f:b1:7e:63:53:a2:7a:68:13:18:6a:
                    96:ea:96:65:5a:cd:7b:ec:8c:5f:db:91:da:68:ea:
                    7f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:51:12:B7:C6:45:D3:E3:14:13:94:06:23:00:AD:B2:65:47:16:2F
            X509v3 Authority Key Identifier:
                keyid:6F:8C:10:C3:83:72:9F:76:14:99:73:B5:65:5B:E9:BF:34:71:1B:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a718c5-34a1-4baa-b18f-619d9da29826/1/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a718c5-34a1-4baa-b18f-619d9da29826/1/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:e5:40:73:ce:db:2d:3b:b9:ea:de:4e:74:3a:58:09:c0:24:
         1c:f8:10:27:c3:fc:62:d7:97:3d:71:db:42:a3:1b:76:12:9a:
         06:81:32:c9:05:3c:af:04:82:c6:7d:6b:23:db:89:78:b5:04:
         26:71:a7:b1:4a:4f:26:14:9f:29:12:ff:da:21:1c:e8:7e:34:
         5b:94:e1:c7:f4:1a:35:a4:10:79:4b:12:f2:f6:1c:e6:12:bb:
         79:39:34:01:7f:4b:6e:33:c4:e3:cb:ca:68:0c:57:39:46:00:
         c4:22:8f:28:bc:27:1b:b8:1c:3d:a3:3f:27:24:39:2a:4a:60:
         34:7d:8e:7d:6b:69:b4:d7:97:5b:33:b6:61:3d:ea:fa:61:eb:
         79:52:b6:34:c0:a3:e6:f7:88:03:1b:a0:b2:79:0a:75:e9:a8:
         44:5c:66:d0:c9:65:52:fa:dc:8f:eb:7e:07:88:3f:c2:dd:7e:
         65:93:5f:98:1b:f4:db:1f:e9:8a:dc:c4:55:7c:84:55:c4:2e:
         9f:5c:ec:9c:b8:d4:ca:c1:c8:fd:94:75:a5:6e:42:d4:05:b7:
         52:5c:a7:db:c0:5f:00:a5:30:3e:80:55:0e:9a:c9:9b:f1:6b:
         18:6b:8d:45:6a:57:b1:01:cc:92:cd:8d:5b:89:9f:bb:60:74:
         ac:a6:4d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 00:29:26 2026 by rpki-client