Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
File:                     G8GZTqY9UNvItDrOytKEK03BV1k.mft (raw, json)
Hash identifier:          w/Txo5yMvIZZ4+ii6j7jUTtfLiZxt3GhCnaISrxDn/I=
Subject key identifier:   66:F0:5A:64:21:A9:05:E5:2D:13:B7:4E:8C:F3:62:E5:E6:3C:BD:37
Authority key identifier: 1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59
Certificate issuer:       /CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759
Certificate serial:       019E1F480767296686CA11C22293E5411E56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
Manifest number:          164D
Signing time:             Wed 13 May 2026 03:01:14 +0000
Manifest this update:     Wed 13 May 2026 03:01:14 +0000
Manifest next update:     Thu 14 May 2026 03:01:14 +0000
Files and hashes:         1: G8GZTqY9UNvItDrOytKEK03BV1k.crl (hash: OVvU4AyHn6anWGnsiLlfB6n9TuK43GbTA1NjlCdHtug=)
                          2: lEqsPfJ-qWwA6TQd-ohXS0Li1gU.roa (hash: hs8ieBVGRJNin3fquHZxIlGRfOUPqdHhIELx12VmaoE=)
                          3: rkV3SDP19OQE0LF_g47eoLW0kdQ.roa (hash: WeYDPKsZ8dv4/mxbMaGVfQRu6h+w3pCGRVmTTR7BPpE=)
                          4: xG_Z_AN9TZQ2gJ2PV0YaepCBTsQ.roa (hash: nKSNO2Ekt5+NEphgm5cEzzq+4O/tpyRO5FtPgeeUWyk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 03:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:48:07:67:29:66:86:ca:11:c2:22:93:e5:41:1e:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759
        Validity
            Not Before: May 13 03:01:14 2026 GMT
            Not After : May 14 03:01:14 2026 GMT
        Subject: CN=66f05a6421a905e52d13b74e8cf362e5e63cbd37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2a:91:c4:17:39:c7:0e:92:52:78:ff:18:c4:
                    d2:cd:ea:ca:7c:f8:c3:37:29:c4:d2:7e:7a:d4:3c:
                    2d:44:2e:05:52:5a:d2:b8:a7:04:1b:2a:39:8f:94:
                    fd:8c:25:cb:cc:51:79:a8:8a:f7:2c:6b:c8:9b:19:
                    eb:d2:1a:35:01:00:a7:c0:5c:ff:a8:c1:97:06:20:
                    b9:1b:cc:f5:c8:87:1d:49:af:0e:e0:2a:13:88:05:
                    e7:4c:b9:d7:8f:30:88:ee:df:f2:be:26:b6:c4:fb:
                    ca:c4:13:14:47:4e:ca:7a:31:a1:cb:ac:8a:c5:e4:
                    37:20:69:a0:21:e2:85:b9:95:79:53:61:cb:33:04:
                    08:3b:8b:28:0f:d0:33:18:a1:2c:24:1a:fb:49:8b:
                    03:2a:cb:e2:ec:4b:0c:9e:ae:11:ba:87:25:35:0d:
                    7a:d4:b5:76:26:3e:75:34:31:8d:10:e6:9b:e7:35:
                    b4:7f:b2:8b:8e:66:9e:f6:e6:7d:fd:e4:75:e3:c9:
                    f4:46:48:2e:4a:23:5e:8a:df:be:9b:3e:7e:63:44:
                    ce:d8:2a:36:52:a1:71:e8:87:ce:bb:eb:0f:39:d6:
                    25:64:dd:34:d0:6a:fe:c2:d8:b6:c6:88:79:ea:24:
                    ab:43:2e:37:99:20:2b:81:0d:35:05:89:8b:2f:b8:
                    58:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:F0:5A:64:21:A9:05:E5:2D:13:B7:4E:8C:F3:62:E5:E6:3C:BD:37
            X509v3 Authority Key Identifier:
                keyid:1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:1a:24:f2:46:13:c5:fb:2d:35:c2:a9:2e:f0:f3:7f:9b:ea:
         15:c5:88:5a:04:cf:ba:09:de:4b:e0:dc:00:84:99:64:3b:55:
         13:fe:ce:eb:57:b0:4b:1c:31:96:74:5d:db:12:21:95:8d:2c:
         35:c2:dc:0f:af:5a:c2:26:87:51:3a:88:a1:e6:65:0c:1b:46:
         e3:3b:10:e7:06:b3:0d:6c:8b:e1:36:91:bc:e4:3c:d9:a8:39:
         27:66:2b:e9:12:92:6a:0f:b8:1d:dc:2d:51:9b:28:53:3f:4f:
         d3:1c:8f:10:13:d2:5d:0c:3f:e6:e6:52:33:b5:61:6f:03:79:
         94:37:68:82:5e:fb:4e:bd:05:97:c1:6c:61:02:15:2c:2a:b7:
         fe:62:e1:15:76:02:9b:fc:ee:f7:88:08:bc:53:6b:2c:13:25:
         e4:fd:a2:db:2b:45:3e:0a:b8:9c:ac:de:bb:eb:88:7a:f2:bd:
         11:6b:9b:43:22:8e:d2:a1:41:95:aa:75:65:92:34:d9:e8:bf:
         20:9c:b2:07:a3:aa:b0:80:56:4c:b9:92:aa:ab:38:b7:09:b4:
         03:47:4a:10:43:7d:a0:c1:33:d3:1e:53:ac:b7:37:a9:43:d9:
         5d:4f:83:37:84:59:fa:f5:40:85:8c:f5:1c:8c:31:eb:e4:3b:
         97:7b:85:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:13:18 2026 by rpki-client