Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft
File:                     SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft (raw, json)
Hash identifier:          XQvzeH74noLDqNH2Xz+SNikFGHgBH2J1g7v9zz9IC4Q=
Subject key identifier:   81:B9:95:93:9A:F0:B3:57:90:2C:CB:AF:57:EA:DA:4B:93:F3:7C:FC
Authority key identifier: 49:F3:9D:6C:8B:23:FC:DC:20:E5:31:74:E9:2F:B3:F5:6C:AA:8B:61
Certificate issuer:       /CN=49f39d6c8b23fcdc20e53174e92fb3f56caa8b61
Certificate serial:       019E314E90E1E64C80B8625EF1F62FF58DC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft
Manifest number:          18A1
Signing time:             Sat 16 May 2026 15:01:32 +0000
Manifest this update:     Sat 16 May 2026 15:01:32 +0000
Manifest next update:     Sun 17 May 2026 15:01:32 +0000
Files and hashes:         1: RQT8IM5YpZZwOG6-oLbHqe47a-w.roa (hash: blADeokcP6llo8Gy54kWFLivb2CKCeXJKcNiIgYk8iI=)
                          2: SfOdbIsj_Nwg5TF06S-z9Wyqi2E.crl (hash: zWhZdhct+jLsI/5bysJx9WjYfjlyitnMf9m1i/zTKNQ=)
                          3: iO3SkKO1UQLda-9awSqU8lYbgSU.roa (hash: rqIW3vWhfYP/PXzk9vOJK+ndWvAPgxulGED/LkU7CuE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4e:90:e1:e6:4c:80:b8:62:5e:f1:f6:2f:f5:8d:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49f39d6c8b23fcdc20e53174e92fb3f56caa8b61
        Validity
            Not Before: May 16 15:01:32 2026 GMT
            Not After : May 17 15:01:32 2026 GMT
        Subject: CN=81b995939af0b357902ccbaf57eada4b93f37cfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:24:69:ee:14:c2:09:f6:41:3f:69:80:be:50:
                    e4:f0:51:7b:6e:4c:30:8f:30:08:3e:5c:8e:84:ec:
                    54:20:75:62:38:f1:59:b0:59:40:5d:09:0a:87:8d:
                    40:3b:4b:42:da:e5:1e:b2:b0:c4:3b:6d:0a:5f:a1:
                    dd:a4:67:ae:28:c3:00:42:fa:a5:d4:96:3c:f8:f5:
                    53:2c:3a:9b:f2:22:19:ba:c5:82:02:be:fe:4c:b4:
                    b1:c8:ae:c7:8e:54:45:b0:15:ae:c5:05:b4:5e:8b:
                    6d:01:6d:ee:42:fb:73:9b:bd:8b:56:8f:1b:8f:8a:
                    6f:0a:72:5a:ea:33:72:1c:d2:94:39:3d:fa:95:6a:
                    22:ab:18:42:03:10:9e:8a:a7:c1:ff:20:6a:fe:9b:
                    cc:c1:02:90:c7:62:b3:18:1c:52:3d:77:74:b5:c1:
                    a9:d4:bd:cc:12:1a:a9:d5:00:26:cc:b4:76:61:44:
                    c2:6c:a6:40:95:ea:c7:36:e1:3f:09:98:2a:86:bd:
                    b1:52:7a:f1:8f:6c:49:aa:14:73:f6:12:ef:d4:f3:
                    34:8d:3f:c1:51:bc:6f:27:67:da:87:8f:93:24:27:
                    95:23:49:67:7d:38:c7:80:47:32:d2:6f:bf:5d:a8:
                    a7:a7:d5:b3:4e:9d:53:b9:71:63:86:77:f1:15:88:
                    4e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B9:95:93:9A:F0:B3:57:90:2C:CB:AF:57:EA:DA:4B:93:F3:7C:FC
            X509v3 Authority Key Identifier:
                keyid:49:F3:9D:6C:8B:23:FC:DC:20:E5:31:74:E9:2F:B3:F5:6C:AA:8B:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:94:b6:7c:a6:12:c6:ad:07:c6:1b:6e:1b:02:cd:3b:9e:16:
         6a:20:16:df:7a:90:d9:cd:42:c6:97:aa:46:90:ce:50:ec:37:
         c7:5e:54:2f:24:a0:3e:4c:51:af:2b:bd:6f:2f:c1:bf:fa:17:
         35:19:46:db:cc:01:9a:34:ec:88:65:93:9e:1e:6b:66:54:cf:
         3f:a7:50:93:89:fe:25:22:01:c3:ba:20:ed:82:45:34:fa:c3:
         0e:38:b8:17:b0:91:31:52:f6:2f:90:d1:c7:fc:0a:0f:3f:33:
         db:08:d2:01:d3:9f:79:30:ba:2c:ba:1f:a5:97:6d:a6:aa:e9:
         40:f1:6f:f7:3f:4a:f8:34:63:0f:e2:2c:7a:b5:87:53:09:95:
         cf:a0:fe:eb:1f:8e:25:e3:71:82:b7:72:8f:be:ef:db:ee:24:
         ae:cb:f8:6e:9f:15:34:77:83:aa:a1:06:bf:cb:6d:e6:0f:46:
         2e:d7:8f:4c:82:2e:9c:d9:0c:69:a5:20:69:53:10:84:11:4a:
         45:f0:a9:2f:66:6d:d9:39:25:52:77:2e:37:6f:10:73:a7:0e:
         ec:d4:2d:e8:d5:49:80:7d:ca:03:56:a9:8e:8f:5f:67:09:9f:
         6c:21:f2:d0:10:fb:59:e4:e7:ff:bf:39:fa:8f:a0:2e:2e:2b:
         bb:43:90:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:01:34 2026 by rpki-client