Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft
File:                     8-NiIsy8bHIhNgVAurOp26nyN6A.mft (raw, json)
Hash identifier:          aB4G7+LSRMHuAyjq3I3eBtHvFrRHu/gYqDQvfdxlBfE=
Subject key identifier:   9A:1D:78:0F:EF:56:45:E5:5F:53:E2:B7:DF:91:01:52:7C:DA:80:22
Authority key identifier: F3:E3:62:22:CC:BC:6C:72:21:36:05:40:BA:B3:A9:DB:A9:F2:37:A0
Certificate issuer:       /CN=f3e36222ccbc6c7221360540bab3a9dba9f237a0
Certificate serial:       019E1BD9303E92BE19E36F4EFD77679C7AC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft
Manifest number:          16C5
Signing time:             Tue 12 May 2026 11:01:18 +0000
Manifest this update:     Tue 12 May 2026 11:01:18 +0000
Manifest next update:     Wed 13 May 2026 11:01:18 +0000
Files and hashes:         1: 8-NiIsy8bHIhNgVAurOp26nyN6A.crl (hash: Tnl0kt3fMca3EiwlkUjhmibb6g0p87oQNHibNsRLoj8=)
                          2: A0z7IQh1Pr8fvyL5I4TT_hj-k0Q.roa (hash: z/I+DSZiJhEoYfti3DU2Ke90Z0Knyu3rdi+RgDuTITU=)
                          3: PUhDyJdQbqGBAoiIPQqOIuxt2NE.roa (hash: WjBKvJrOfiKeEL68xDsyhZV8pUdA94BoBT1vP1PsXEY=)
                          4: orvP4nORXq0UzKjHkst8J153qic.roa (hash: eMGuLib/+B5pjoOYYUaTYix8ol70cyONihtgI6VfEKE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 11:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1b:d9:30:3e:92:be:19:e3:6f:4e:fd:77:67:9c:7a:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3e36222ccbc6c7221360540bab3a9dba9f237a0
        Validity
            Not Before: May 12 11:01:18 2026 GMT
            Not After : May 13 11:01:18 2026 GMT
        Subject: CN=9a1d780fef5645e55f53e2b7df9101527cda8022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:93:03:a7:ad:50:23:9f:92:54:64:c4:78:97:
                    6e:11:00:23:4f:34:ce:06:a6:d4:44:bc:a4:9c:25:
                    51:18:6b:28:b2:d7:8e:26:ab:87:70:0b:2e:a6:34:
                    80:5e:ed:55:4c:e0:3e:7f:90:bc:af:1f:ec:2d:6f:
                    82:23:06:8d:5b:4b:22:a0:e9:7e:66:22:ef:71:f0:
                    7b:7e:31:ed:ec:2f:f5:68:34:36:40:9b:a0:23:00:
                    6d:36:5c:6f:1e:68:1a:51:e1:fb:ea:63:b5:fe:f7:
                    a0:34:60:a2:65:50:a5:44:e1:3a:7f:7a:ec:70:59:
                    bb:33:ac:9a:7f:ee:cc:8e:53:ce:b9:95:27:0f:12:
                    82:67:a2:ab:65:e7:00:c3:dd:dd:f3:8f:c1:07:d0:
                    e1:7e:5d:98:4d:f0:7f:92:d2:43:41:99:9d:e4:cc:
                    70:d6:51:6a:69:83:0d:7c:d4:50:44:18:e0:46:f7:
                    53:12:a6:67:b1:b6:f8:f7:d5:9d:f9:aa:2b:da:bb:
                    25:d2:de:2c:c6:e9:d9:24:2b:db:c3:9d:fc:2d:24:
                    5f:11:5a:8b:4f:11:dc:7a:5c:e5:d2:09:b1:8f:90:
                    70:be:a5:b6:20:96:53:4e:9e:b5:ce:05:75:7f:a8:
                    01:bb:9f:20:a3:74:a1:1f:b8:c1:c4:fe:ba:5a:82:
                    96:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:1D:78:0F:EF:56:45:E5:5F:53:E2:B7:DF:91:01:52:7C:DA:80:22
            X509v3 Authority Key Identifier:
                keyid:F3:E3:62:22:CC:BC:6C:72:21:36:05:40:BA:B3:A9:DB:A9:F2:37:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:c0:d6:6f:b5:fd:41:10:14:12:8f:5d:a0:40:a0:e7:54:88:
         f5:0f:94:d2:ef:06:c3:59:53:57:cd:49:4e:38:a2:2b:47:cc:
         55:28:89:d0:6c:7c:d0:5c:00:8a:4a:58:e7:27:45:09:10:d4:
         c2:ab:df:a8:99:ba:32:7a:e4:1e:bd:b0:41:ae:d1:90:20:28:
         00:66:ef:11:e9:a2:26:b6:ed:22:5c:71:4d:bb:bb:61:10:16:
         b0:78:b0:20:2c:72:df:1e:c9:51:63:83:df:1e:2c:35:e9:e4:
         94:e2:f4:3c:d4:28:ee:ab:2a:29:b9:18:13:73:c8:b6:1b:e2:
         78:53:4a:44:3e:28:a5:a1:bb:22:d7:e7:2c:8f:31:91:7d:62:
         a3:dc:ce:a3:a7:00:d0:e4:43:03:6e:6e:5b:bc:fc:fa:1e:17:
         b8:24:4c:cd:d1:0f:92:4f:ba:b5:dd:74:dd:7a:40:37:ca:cb:
         4c:4a:36:ac:c7:1e:cb:6f:e6:f3:e0:87:89:22:c6:51:8f:10:
         31:1a:1b:2a:0c:48:d5:c9:20:eb:38:a2:72:3e:ac:0d:4d:60:
         46:81:94:34:05:09:7d:e7:75:51:1c:21:e3:d6:0c:ea:bf:89:
         f2:e8:cf:62:db:f8:67:e6:48:06:f7:91:07:17:64:2d:65:60:
         1b:04:08:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:26 2026 by rpki-client