Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
File:                     cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft (raw, json)
Hash identifier:          CCx2oqEMiFtRKJfRKr1bACjHIjDOBr2EM9QUNT6EUJM=
Subject key identifier:   D9:7B:96:A7:5A:28:74:79:D5:E1:03:63:CA:A8:D7:2A:DA:F4:5F:1F
Authority key identifier: 70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59
Certificate issuer:       /CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59
Certificate serial:       019E1F113B6F263295D29AF6F89FE8F66230
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
Manifest number:          1550
Signing time:             Wed 13 May 2026 02:01:23 +0000
Manifest this update:     Wed 13 May 2026 02:01:23 +0000
Manifest next update:     Thu 14 May 2026 02:01:23 +0000
Files and hashes:         1: cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl (hash: j2N81Q+08uL71qmsaApgzPwtDfBgpJYhUefCK99mrT4=)
                          2: fb3NlfyiI12-2naS91KzEXDuLcM.roa (hash: xFi8qis3wYM7XGFa9w0jwhmsTCg5KkrRoqZqwdJaBxs=)
                          3: lbi2EEOv7Zrhga3le8zAYXKzasA.roa (hash: cxSzMHs1P7K5DFoalN/ZGFsw0iciyI3MRqOB+G9rhGs=)
                          4: rroLiEQZHgTeW99j0qiBIrwu5EA.roa (hash: VmsVwoTJ6PHL/2Ntb43rkgeOI/CytWooyIbWbTn6sKE=)
                          5: ugJS22ubb1YAQxxSrPhzSyT4d4g.roa (hash: SMm0KdkJcDZcOqPotbm0PXIQqsivUC/ILvOz2gqm9+o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:3b:6f:26:32:95:d2:9a:f6:f8:9f:e8:f6:62:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59
        Validity
            Not Before: May 13 02:01:23 2026 GMT
            Not After : May 14 02:01:23 2026 GMT
        Subject: CN=d97b96a75a287479d5e10363caa8d72adaf45f1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:5e:77:df:b0:d2:b7:7d:28:83:4f:f9:79:06:
                    f0:a3:ac:98:f7:b4:b8:e0:ea:4e:09:0b:12:e1:03:
                    c8:8b:98:fa:6c:70:e1:ac:ca:bb:9c:79:74:c3:80:
                    33:fd:28:be:de:27:73:09:5d:49:e0:f2:40:5d:dc:
                    6f:22:c5:bb:df:11:11:78:d6:4b:2d:ce:b5:d8:ab:
                    01:a3:ea:4e:50:e5:bc:a7:5c:cf:99:92:70:9d:b1:
                    10:57:c5:33:36:09:62:60:41:07:6f:bf:53:ff:7a:
                    ac:11:b1:b5:39:63:06:b3:66:86:30:08:19:3a:08:
                    e0:18:9a:27:91:77:89:4b:a8:3a:58:f8:cc:07:09:
                    5c:32:30:4a:1b:ac:bd:73:bd:e2:9f:de:dc:82:2c:
                    c8:3e:62:ff:ab:ba:5e:80:df:64:7f:3f:72:ca:01:
                    ea:62:c4:6f:f4:f1:ea:5b:7b:a2:ba:18:62:f7:3d:
                    0e:6e:8c:a8:cb:cd:0e:52:f5:6d:37:44:00:9a:d2:
                    da:b0:d5:b6:b8:e6:08:c6:6d:9f:65:a8:4f:61:63:
                    8c:03:4e:c5:37:43:fc:69:d8:dc:bc:47:03:6b:ff:
                    f9:f2:ed:e6:ff:a3:37:bb:32:01:6b:e0:18:ba:56:
                    ca:4b:91:e1:67:d2:91:eb:fa:ff:41:4c:f8:e7:7a:
                    41:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:7B:96:A7:5A:28:74:79:D5:E1:03:63:CA:A8:D7:2A:DA:F4:5F:1F
            X509v3 Authority Key Identifier:
                keyid:70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:39:de:f4:8c:1d:3e:25:5d:c3:6e:55:a2:af:dd:6b:b2:76:
         d8:8e:61:42:99:dd:70:49:4c:7e:58:b5:79:ec:87:c0:6e:c8:
         a4:ed:af:98:51:ce:21:ea:b1:b6:2f:8a:92:6d:0a:c1:a8:99:
         55:6b:27:0e:d5:09:a0:fe:a1:20:db:bd:3c:94:c1:46:79:9d:
         da:1d:36:e8:0c:00:72:94:93:e8:e6:23:99:b4:b8:a2:82:e6:
         e4:4d:4a:b3:97:9d:21:ea:7e:57:7a:57:56:6d:be:ca:89:ad:
         22:84:2f:cb:13:f7:5a:cb:f4:1f:12:1b:0c:c1:8d:2d:77:d3:
         86:a7:45:13:45:31:d3:25:e2:0b:65:37:24:8a:a5:ec:60:7f:
         5f:91:42:9b:b4:ca:bf:be:f7:c1:ff:59:55:27:03:df:e4:4a:
         cc:aa:55:e7:a5:fc:8c:4c:98:be:d5:0b:d4:63:c5:7f:b8:98:
         ae:df:1c:0f:ba:88:9b:96:b1:56:51:07:25:39:43:37:0b:f4:
         a4:0d:0a:54:cb:3e:c7:b9:a7:b0:34:ca:c3:ce:85:d2:b3:9a:
         78:77:6b:d9:c1:ff:89:f4:b2:18:2a:fb:94:0f:4b:ed:60:5e:
         1d:94:be:6c:4c:55:85:5c:d5:98:95:26:0a:de:34:fb:4c:d3:
         84:9c:70:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fETtvJjKV0pr2+J/o9mIwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYjE5MGQ2Zjg5YTQzNGNjZTVjYjhjMGQ0YjM4YTE2Njlk
ZWZiNTkwHhcNMjYwNTEzMDIwMTIzWhcNMjYwNTE0MDIwMTIzWjAzMTEwLwYDVQQD
EyhkOTdiOTZhNzVhMjg3NDc5ZDVlMTAzNjNjYWE4ZDcyYWRhZjQ1ZjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg15337DSt30og0/5eQbwo6yY97S4
4OpOCQsS4QPIi5j6bHDhrMq7nHl0w4Az/Si+3idzCV1J4PJAXdxvIsW73xEReNZL
Lc612KsBo+pOUOW8p1zPmZJwnbEQV8UzNgliYEEHb79T/3qsEbG1OWMGs2aGMAgZ
OgjgGJonkXeJS6g6WPjMBwlcMjBKG6y9c73in97cgizIPmL/q7pegN9kfz9yygHq
YsRv9PHqW3uiuhhi9z0Oboyoy80OUvVtN0QAmtLasNW2uOYIxm2fZahPYWOMA07F
N0P8adjcvEcDa//58u3m/6M3uzIBa+AYulbKS5HhZ9KR6/r/QUz453pBoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNl7lqdaKHR51eEDY8qo1yra9F8fMB8GA1UdIwQY
MBaAFHCxkNb4mkNMzly4wNSzihZp3vtZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0xHUTF2aWFRMHpPWExqQTFMT0tGbW5lLTFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8yM2RjNjEtN2U5ZC00MGIzLTkxYjYt
NDZiZDdkNzk0ZmI2LzEvY0xHUTF2aWFRMHpPWExqQTFMT0tGbW5lLTFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8yM2RjNjEtN2U5ZC00MGIzLTkxYjYtNDZiZDdkNzk0ZmI2
LzEvY0xHUTF2aWFRMHpPWExqQTFMT0tGbW5lLTFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsDne9Iwd
PiVdw25Voq/da7J22I5hQpndcElMfli1eeyHwG7IpO2vmFHOIeqxti+Kkm0KwaiZ
VWsnDtUJoP6hINu9PJTBRnmd2h026AwAcpST6OYjmbS4ooLm5E1Ks5edIep+V3pX
Vm2+yomtIoQvyxP3Wsv0HxIbDMGNLXfThqdFE0Ux0yXiC2U3JIql7GB/X5FCm7TK
v773wf9ZVScD3+RKzKpV56X8jEyYvtUL1GPFf7iYrt8cD7qIm5axVlEHJTlDNwv0
pA0KVMs+x7mnsDTKw86F0rOaeHdr2cH/ifSyGCr7lA9L7WBeHZS+bExVhVzVmJUm
Ct40+0zThJxwgg==
-----END CERTIFICATE-----
Generated at Wed May 13 06:54:25 2026 by rpki-client