Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.mft
File:                     iyTYS_9MkhfR3vpd0zTIyFMiams.mft (raw, json)
Hash identifier:          wOF4sBZOSzblvHrnwZ6MPZyvgIawREHgKTYwpDXlOy4=
Subject key identifier:   C1:F9:8E:F9:0B:DC:6B:DA:C5:D5:A8:96:61:84:88:CC:4F:45:24:47
Authority key identifier: 8B:24:D8:4B:FF:4C:92:17:D1:DE:FA:5D:D3:34:C8:C8:53:22:6A:6B
Certificate issuer:       /CN=8b24d84bff4c9217d1defa5dd334c8c853226a6b
Certificate serial:       019E1F47DE7B0A1AF7302AB201A68747A3F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iyTYS_9MkhfR3vpd0zTIyFMiams.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.mft
Manifest number:          0115
Signing time:             Wed 13 May 2026 03:01:04 +0000
Manifest this update:     Wed 13 May 2026 03:01:04 +0000
Manifest next update:     Thu 14 May 2026 03:01:04 +0000
Files and hashes:         1: iyTYS_9MkhfR3vpd0zTIyFMiams.crl (hash: rmK/29w3j8I3LulXy65RENZHXPfhZAcgVQoRDQQJIDU=)
                          2: uv1ygUlcXrGSDECbU5SJQezpERk.roa (hash: heh+HmefIR2zFpP0zIec4O9N2L5u5pbDsZ881lNVG4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iyTYS_9MkhfR3vpd0zTIyFMiams.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:47:de:7b:0a:1a:f7:30:2a:b2:01:a6:87:47:a3:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b24d84bff4c9217d1defa5dd334c8c853226a6b
        Validity
            Not Before: May 13 03:01:04 2026 GMT
            Not After : May 14 03:01:04 2026 GMT
        Subject: CN=c1f98ef90bdc6bdac5d5a896618488cc4f452447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:00:cc:db:c1:a1:e8:3b:94:5e:dd:98:4f:51:
                    00:f5:e8:9c:32:54:2c:8f:ff:68:85:38:0c:d0:64:
                    b9:38:69:10:15:eb:70:4b:68:f0:e5:2b:98:af:09:
                    57:d4:dc:b0:b5:6c:79:d4:d1:19:60:78:90:b5:e6:
                    e9:9e:2f:fe:87:a6:26:e3:95:67:8e:3d:23:b0:c4:
                    ef:7d:55:44:b8:00:4b:8f:17:f2:f0:e8:7b:66:37:
                    83:ce:43:8c:99:1e:a8:85:15:e4:cb:6b:41:af:c5:
                    2b:91:35:de:14:94:aa:b9:71:12:4d:d3:43:7e:c6:
                    e3:1c:49:a0:56:de:c7:4c:97:03:df:23:fb:9f:f8:
                    e5:54:ec:ee:b3:57:41:ea:b3:9c:48:8a:b4:e0:ce:
                    3f:24:2f:49:f3:5b:df:3e:f3:75:34:11:be:5b:91:
                    09:08:e1:1a:93:b3:3b:e9:60:33:61:35:7f:27:62:
                    6e:9c:b6:94:3a:5a:39:fb:c4:5d:d3:cd:6a:95:89:
                    97:64:05:85:5f:d1:65:4b:b6:4e:de:2a:56:8e:0f:
                    be:37:c2:41:ee:a9:d7:75:83:df:e6:77:1c:d9:46:
                    be:31:0d:6b:56:1f:3f:cc:dd:fa:a9:40:80:d0:c5:
                    84:00:0b:fd:17:8a:80:43:a7:7d:5a:97:a6:ab:e6:
                    a6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F9:8E:F9:0B:DC:6B:DA:C5:D5:A8:96:61:84:88:CC:4F:45:24:47
            X509v3 Authority Key Identifier:
                keyid:8B:24:D8:4B:FF:4C:92:17:D1:DE:FA:5D:D3:34:C8:C8:53:22:6A:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iyTYS_9MkhfR3vpd0zTIyFMiams.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:fb:8f:62:01:7e:00:6e:57:c6:1b:98:c8:0e:ef:07:61:30:
         fd:55:ce:da:f3:e8:9c:d8:d5:1d:0c:2f:6f:fe:2e:7c:ed:ff:
         26:c3:9d:66:f4:c2:e5:9e:6a:45:99:e0:13:a6:27:50:ff:88:
         cf:54:cf:49:8c:87:c3:6b:b4:e2:8d:2a:60:77:de:a0:21:df:
         7a:19:27:fe:85:a5:34:1d:32:9f:66:2e:29:e5:3e:0e:22:be:
         1e:3e:c4:ee:68:cb:3a:6b:8f:e5:fd:7b:c2:26:55:18:c9:09:
         aa:74:43:b1:bf:50:fa:a8:46:0d:c2:f9:d2:5e:bf:51:c0:48:
         9c:b6:10:6e:3c:e4:2c:19:dd:27:29:6c:89:2b:02:3e:8e:2b:
         63:e0:99:ca:6f:f5:35:e7:73:6c:ad:15:1a:59:4c:22:22:bb:
         40:cb:5d:a2:d8:8c:61:93:06:a1:5f:d6:15:54:10:81:28:0d:
         ca:f0:de:c6:ba:16:e2:e2:93:1e:09:be:f3:a2:df:62:b7:04:
         f3:d6:a5:9d:86:13:1d:a0:d9:a1:af:cf:42:8f:1d:1b:a8:0b:
         87:63:f3:1d:78:bc:a4:f2:32:fd:a8:1e:1b:d8:78:38:10:ee:
         53:79:e8:71:8f:63:07:e9:f5:0f:31:84:5a:f8:33:b5:a1:6c:
         d7:76:93:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:08:15 2026 by rpki-client