Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
File:                     0o_L31cryvk-FUTeEKF2yzARBrs.mft (raw, json)
Hash identifier:          o9XlE1ZnbFn+q99LI0NvMqomAiQICFO5rC8ZI2UUxWM=
Subject key identifier:   19:00:53:EB:C1:9D:FD:31:51:8D:D0:1A:63:0E:E2:98:B0:DC:B2:85
Authority key identifier: D2:8F:CB:DF:57:2B:CA:F9:3E:15:44:DE:10:A1:76:CB:30:11:06:BB
Certificate issuer:       /CN=d28fcbdf572bcaf93e1544de10a176cb301106bb
Certificate serial:       019E3072C59DC7C6AAC9F45F285997AE1115
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
Manifest number:          180F
Signing time:             Sat 16 May 2026 11:01:28 +0000
Manifest this update:     Sat 16 May 2026 11:01:28 +0000
Manifest next update:     Sun 17 May 2026 11:01:28 +0000
Files and hashes:         1: 0o_L31cryvk-FUTeEKF2yzARBrs.crl (hash: 7a9NxUk3Cl7RYcSPkMdIszDOGewAA5gs0VHw4eKxMvs=)
                          2: cjgT7b7LYeNp4gJNcn-t-JKsvkw.roa (hash: 8t1u0wHQqLOP5QRswUwGb0F26EqFaE1jpZ2Y496m/4o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:c5:9d:c7:c6:aa:c9:f4:5f:28:59:97:ae:11:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d28fcbdf572bcaf93e1544de10a176cb301106bb
        Validity
            Not Before: May 16 11:01:28 2026 GMT
            Not After : May 17 11:01:28 2026 GMT
        Subject: CN=190053ebc19dfd31518dd01a630ee298b0dcb285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1f:2c:58:14:4b:b1:ef:a3:68:36:bb:f2:12:
                    ee:57:67:8e:dc:70:b7:ed:3e:63:47:90:24:2c:ea:
                    33:1f:be:3f:a9:fd:d8:aa:36:52:b1:55:c0:9e:b2:
                    43:48:88:1d:b3:1c:55:45:5d:88:0c:10:23:c3:39:
                    60:21:cf:96:68:ed:92:22:a7:23:00:44:e0:3d:fe:
                    9c:b7:94:aa:ac:53:0f:a0:e8:75:e1:ce:5e:d4:cd:
                    76:d5:e2:77:e9:4a:62:40:ea:f1:1f:62:79:d7:93:
                    9f:55:96:64:6b:d8:47:3f:ab:56:8f:6c:28:08:2c:
                    b7:47:ee:96:66:1d:fa:12:15:c5:07:6e:1d:48:8f:
                    dc:65:6d:81:3d:cc:88:e1:9c:37:b8:44:8e:c8:10:
                    79:9e:b8:2b:50:fa:e3:2e:3b:db:94:36:c6:53:e1:
                    e0:27:59:99:29:e5:61:c4:c1:79:f4:71:8b:3e:23:
                    80:73:af:b3:7c:4d:96:bc:aa:57:f4:21:94:ea:fd:
                    02:be:83:5b:46:0f:59:cb:d2:36:dc:4e:30:69:86:
                    1b:5d:99:b7:6d:5d:dc:70:1b:8d:8a:5d:91:3c:55:
                    cb:60:d6:3c:94:d9:44:d0:e2:95:ec:45:1c:c6:dc:
                    14:81:9b:34:f2:6d:79:77:69:e7:d2:fb:80:7e:ac:
                    49:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:00:53:EB:C1:9D:FD:31:51:8D:D0:1A:63:0E:E2:98:B0:DC:B2:85
            X509v3 Authority Key Identifier:
                keyid:D2:8F:CB:DF:57:2B:CA:F9:3E:15:44:DE:10:A1:76:CB:30:11:06:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:a4:1e:94:97:9c:e8:af:bb:28:cc:c2:4c:8c:f2:87:6a:5c:
         3b:2a:5e:88:82:c0:a9:83:a2:54:3a:97:72:49:b6:67:e9:51:
         17:7a:76:c7:a6:c9:04:b7:c7:e4:37:5d:35:68:8c:a7:80:d9:
         dd:6a:da:ce:54:85:b4:28:ed:3a:f5:32:1b:6a:a7:d6:c1:44:
         2d:37:b2:80:2a:6a:61:ef:4e:30:df:d6:ec:4a:9a:8d:38:db:
         ad:9e:13:0f:70:68:4f:26:f5:09:dd:68:a5:34:ca:fc:90:66:
         a5:2f:cc:8a:28:7c:5c:e8:fd:2b:ae:b5:65:83:77:ac:82:38:
         bf:9c:70:dc:59:d1:08:ef:40:d0:14:5e:ab:78:f0:a0:56:e0:
         74:68:3d:2f:2d:b1:dc:80:59:43:ad:a1:fe:06:fd:68:1b:b1:
         a2:80:85:fe:0d:9d:53:c5:7f:cf:16:6c:1f:29:86:ff:34:06:
         90:a5:92:3c:12:66:91:8f:79:05:06:07:ee:91:a6:25:b5:e4:
         3a:27:cb:70:0d:12:18:cb:c5:ed:17:dd:ba:b4:94:9b:f1:60:
         00:49:4e:51:cf:9b:49:e0:35:bd:08:bf:fa:c5:a2:8e:a7:df:
         91:3d:8a:2e:93:15:ca:85:3a:d2:62:08:ca:a9:b7:05:33:79:
         3d:88:cb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:24:32 2026 by rpki-client