Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/16153d-fe58-4625-ba6e-092b9fb6a541/1/b1GlChfEHhkEHD-xCwqDkielyQU.mft
File:                     b1GlChfEHhkEHD-xCwqDkielyQU.mft (raw, json)
Hash identifier:          vP3VWZmQBLSzrWXF6JNraVc+jdWKVRkFlmqPrKHOT08=
Subject key identifier:   44:43:50:23:94:F9:C4:F8:AA:53:A7:59:6A:44:E1:1D:82:10:42:B5
Authority key identifier: 6F:51:A5:0A:17:C4:1E:19:04:1C:3F:B1:0B:0A:83:92:27:A5:C9:05
Certificate issuer:       /CN=6f51a50a17c41e19041c3fb10b0a839227a5c905
Certificate serial:       019E3229AAF82E24F80A9AFC7F6C19F39784
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b1GlChfEHhkEHD-xCwqDkielyQU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/16153d-fe58-4625-ba6e-092b9fb6a541/1/b1GlChfEHhkEHD-xCwqDkielyQU.mft
Manifest number:          90
Signing time:             Sat 16 May 2026 19:00:51 +0000
Manifest this update:     Sat 16 May 2026 19:00:51 +0000
Manifest next update:     Sun 17 May 2026 19:00:51 +0000
Files and hashes:         1: PZMuJ8QpgBXhv1xbGqZzJ29BgDQ.roa (hash: jrIRAMtDwbYUDnGzpj0BHU287oxSgfwbWoyH7EMZ7jI=)
                          2: b1GlChfEHhkEHD-xCwqDkielyQU.crl (hash: J5mUo0Kl6s1eoNNpiD+T3ulHhG9O9lQA5rv1a/UaNec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/16153d-fe58-4625-ba6e-092b9fb6a541/1/b1GlChfEHhkEHD-xCwqDkielyQU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/16153d-fe58-4625-ba6e-092b9fb6a541/1/b1GlChfEHhkEHD-xCwqDkielyQU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b1GlChfEHhkEHD-xCwqDkielyQU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:29:aa:f8:2e:24:f8:0a:9a:fc:7f:6c:19:f3:97:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f51a50a17c41e19041c3fb10b0a839227a5c905
        Validity
            Not Before: May 16 19:00:51 2026 GMT
            Not After : May 17 19:00:51 2026 GMT
        Subject: CN=4443502394f9c4f8aa53a7596a44e11d821042b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7b:9a:2a:c3:39:84:86:38:2c:0c:51:f1:d8:
                    40:0b:24:20:40:c9:9c:81:61:01:ab:72:3e:2e:c5:
                    32:af:cc:a5:65:fe:82:3a:1f:85:46:1c:42:74:b3:
                    06:63:3f:6b:3e:83:f8:74:3e:39:f7:dd:90:77:7a:
                    6e:d1:60:c2:96:09:55:c1:d2:35:6c:f0:cd:d1:0e:
                    cb:f7:c8:22:a2:91:67:3e:c1:80:a3:c9:f6:5a:2b:
                    9b:cb:aa:b1:4b:b1:f2:88:72:d1:fd:23:35:cb:8d:
                    3e:da:a8:12:63:5e:06:40:91:6c:00:49:7e:e1:64:
                    a7:c2:7e:a3:ee:57:fd:bb:5e:d3:e7:6e:fd:2e:3d:
                    88:84:08:f3:42:d0:27:5d:ed:20:9e:40:ba:ed:c0:
                    6f:09:f5:c8:e6:7f:f8:bc:92:8a:c0:b4:99:f7:92:
                    19:9b:10:ce:89:0b:32:6c:b3:05:20:2f:af:20:2a:
                    5b:0e:ad:f1:6a:7d:9e:75:94:d1:cf:79:36:62:c7:
                    04:ca:e5:a3:2d:3f:a3:a0:bc:c8:45:ef:37:68:68:
                    d6:08:74:3d:49:a1:22:40:19:78:08:9c:bf:c8:e4:
                    ed:19:2d:6c:1c:06:36:cf:40:36:27:fd:df:9c:44:
                    5e:65:f0:1d:97:ab:8c:2c:4b:f6:38:a1:72:71:5c:
                    23:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:43:50:23:94:F9:C4:F8:AA:53:A7:59:6A:44:E1:1D:82:10:42:B5
            X509v3 Authority Key Identifier:
                keyid:6F:51:A5:0A:17:C4:1E:19:04:1C:3F:B1:0B:0A:83:92:27:A5:C9:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1GlChfEHhkEHD-xCwqDkielyQU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/16153d-fe58-4625-ba6e-092b9fb6a541/1/b1GlChfEHhkEHD-xCwqDkielyQU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/16153d-fe58-4625-ba6e-092b9fb6a541/1/b1GlChfEHhkEHD-xCwqDkielyQU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:f1:ea:ae:55:0c:b1:d5:80:a6:f4:74:1b:1b:a3:b4:24:8d:
         d5:08:a5:81:86:3a:ab:10:f4:b4:72:4e:7a:4b:38:21:6f:80:
         43:60:c1:f7:0d:cc:64:64:ee:74:40:d9:f9:53:8b:06:c0:4d:
         8e:62:44:e7:13:3f:74:58:24:f8:15:4d:f4:df:6f:94:9a:48:
         ff:ae:5e:1b:e9:23:33:6b:c2:89:06:4b:d7:cc:57:44:16:00:
         53:8a:76:f7:14:bb:ac:2f:70:b9:89:17:e2:e4:cb:64:64:b1:
         2d:26:4a:49:bd:62:6f:84:52:5a:c5:40:55:41:69:91:a6:9f:
         4f:11:49:c0:ed:6d:bd:12:ad:b2:9a:28:46:4f:b3:2e:77:50:
         dc:48:1c:04:cf:5d:ad:58:92:33:66:86:aa:fb:83:af:e3:24:
         31:2f:78:0a:45:ca:43:7a:5a:5f:47:5a:03:9a:eb:9b:07:46:
         b6:97:e6:43:8f:f5:de:83:e5:b7:3c:db:f5:7e:fb:82:8a:65:
         91:ff:d2:be:7f:52:13:ac:c4:3d:a8:ef:7e:d6:96:9e:56:ba:
         80:40:07:ac:f5:dc:e9:62:57:61:90:78:e4:66:c7:75:aa:3d:
         c8:b5:e4:db:2e:76:95:7a:62:97:0b:b2:b9:14:9d:d7:24:0b:
         0f:3a:f2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 23:31:32 2026 by rpki-client