Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft
File:                     y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft (raw, json)
Hash identifier:          CTZzprbMjQLQBHnW2j5mxg5IwCxSchNvI3pOTmKfMtI=
Subject key identifier:   52:0E:E8:E4:B9:2E:CE:5C:29:25:44:B9:49:12:9C:5B:9C:D7:EC:BD
Authority key identifier: CB:C8:3C:39:2C:54:21:C5:95:CD:5F:B7:94:28:E8:27:5B:DB:59:4C
Certificate issuer:       /CN=cbc83c392c5421c595cd5fb79428e8275bdb594c
Certificate serial:       019E1EA355AF36B7A564FCD3C7ED99D5EECD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft
Manifest number:          02F5
Signing time:             Wed 13 May 2026 00:01:21 +0000
Manifest this update:     Wed 13 May 2026 00:01:21 +0000
Manifest next update:     Thu 14 May 2026 00:01:21 +0000
Files and hashes:         1: 8MxTJlqau9S1ZV5fA_n_hiU2OjQ.roa (hash: ZFi66z5+x2HZHjEf8Mnf2qe4zKNsSEknPsHvSK6VhIc=)
                          2: DNbiYi8RnmHbs53ufR4Wo4EOQD4.roa (hash: 1O4zlMEhLqsXNNh16SOVPGWJLESJzqVd3J7KSAE8smE=)
                          3: EBV1N0nyc3uDjy8VuxK9uZr58ys.roa (hash: Ua/lKqQMivBauR1brwmNmnYyYEQG+PCmKakmmH7OZoQ=)
                          4: wgW5ViWtyw-hcjNoVsfmKE4EIG8.roa (hash: HhTkFaNAcVHstP72WGd6nJS+mIOkBQF6lfIRGmZJYHI=)
                          5: y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl (hash: Ue/blOD1f1mwUSyxHxOtf/8zfvRBwQwtdIgiuE/pdik=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:55:af:36:b7:a5:64:fc:d3:c7:ed:99:d5:ee:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbc83c392c5421c595cd5fb79428e8275bdb594c
        Validity
            Not Before: May 13 00:01:21 2026 GMT
            Not After : May 14 00:01:21 2026 GMT
        Subject: CN=520ee8e4b92ece5c292544b949129c5b9cd7ecbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:6e:b7:53:89:d7:a4:e8:f5:ad:50:32:e5:aa:
                    2e:0c:dc:92:dd:e0:49:78:16:fb:82:eb:f7:9a:5d:
                    6b:25:5e:03:0a:36:2a:df:a6:87:fc:d2:7d:30:82:
                    60:1a:f8:4d:49:f6:63:e0:50:b4:3a:38:82:d7:ad:
                    11:2b:99:1d:ba:76:49:82:26:3e:77:9b:6a:d1:59:
                    6a:6f:67:7e:f0:6b:52:ab:d6:b1:3e:f0:f0:86:a6:
                    d9:d3:19:d3:07:01:f1:a8:ec:a0:ff:d4:1c:43:0e:
                    87:72:60:d6:42:af:a3:a5:4b:03:aa:88:8f:9e:48:
                    5a:13:0f:cc:ae:74:11:d1:bd:8c:3d:02:2d:af:35:
                    f7:9b:0a:b7:9a:81:f0:86:53:21:16:10:79:c6:d3:
                    ff:2e:8f:4b:99:c2:19:03:de:b0:90:6b:61:8d:e8:
                    fc:79:b2:27:b7:a8:40:b1:95:d4:87:d8:06:d7:29:
                    f6:69:c0:f5:e8:26:55:7d:f7:f9:44:55:ef:74:ab:
                    c6:2d:bf:09:bd:d1:6a:3e:bc:2a:39:d4:db:73:4d:
                    a9:95:0b:fb:02:24:8b:8a:f7:e5:0a:71:15:a8:c9:
                    cc:45:ad:0f:22:00:96:06:df:8a:6b:cf:84:0d:62:
                    f6:21:09:b7:2d:db:17:55:bb:c2:e4:08:4a:e9:73:
                    d5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:0E:E8:E4:B9:2E:CE:5C:29:25:44:B9:49:12:9C:5B:9C:D7:EC:BD
            X509v3 Authority Key Identifier:
                keyid:CB:C8:3C:39:2C:54:21:C5:95:CD:5F:B7:94:28:E8:27:5B:DB:59:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:b1:22:0e:81:e4:5d:69:00:21:72:06:c9:8d:3a:17:d9:d4:
         3b:5a:d8:c0:68:02:47:e9:9b:d9:ad:88:f4:f8:9e:91:2a:15:
         c0:fc:2b:cc:d7:be:78:76:e1:4e:d2:30:95:36:f8:ea:60:d1:
         52:08:9f:2f:08:e5:0b:2e:67:6d:a2:ac:de:fb:5b:1b:29:b0:
         29:a5:21:47:29:6c:60:56:93:98:c8:79:31:4a:a5:d9:77:9a:
         25:f2:2a:c5:3a:97:70:a5:39:41:d2:26:01:09:24:10:ca:43:
         b8:c9:17:4e:a1:67:4b:21:dc:37:69:27:8c:a4:e8:a9:b3:88:
         f2:c6:3d:b6:60:48:99:7c:d0:a4:b6:6c:12:87:93:82:21:47:
         bd:22:af:eb:fa:03:5f:41:04:d3:0c:aa:74:b0:54:ba:e5:70:
         60:99:27:c4:e3:ae:37:b2:0a:a9:8e:4b:74:8b:79:0e:39:37:
         79:05:4a:0c:d4:ab:e2:f4:1a:f5:e9:72:6d:3e:cb:5b:c4:09:
         f2:a4:c0:18:f4:f1:3e:60:38:f4:45:59:93:96:2f:a3:4b:76:
         33:51:0b:a1:3d:7c:7d:ed:f4:00:40:fa:73:c6:ec:be:fa:20:
         c0:ca:73:f1:cf:50:ab:3b:36:77:64:58:1a:89:a8:36:d4:38:
         ee:b0:5f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:29:48 2026 by rpki-client