Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
File:                     G87kBAWu-22hejQO7xWc6cTRgyI.mft (raw, json)
Hash identifier:          QgoONPgW1n/RuweOjkTI70G6R0ElI66pCFj6CCh08b8=
Subject key identifier:   D4:5A:C6:42:8B:6F:96:3B:B8:78:7C:B1:6F:0B:B8:BB:E4:EC:57:84
Authority key identifier: 1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
Certificate issuer:       /CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Certificate serial:       019E1F113265E339CCF0736841580021CD46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
Manifest number:          161F
Signing time:             Wed 13 May 2026 02:01:21 +0000
Manifest this update:     Wed 13 May 2026 02:01:21 +0000
Manifest next update:     Thu 14 May 2026 02:01:21 +0000
Files and hashes:         1: 1-6iaGXxnmZAQPnrgq_8F_icO1g4.roa (hash: 0E9/yZaAdb1/Mv9Vi0wA6mVdKYXwLD+kDlf9BylOAkE=)
                          2: G87kBAWu-22hejQO7xWc6cTRgyI.crl (hash: lqAaPlNILackqI1P9IDfyS8a4oqZoVBpJHRxtbZR8xc=)
                          3: cDH3zRFxxa5MCdHGhfO_X-DrZiY.roa (hash: XO1nhE/daEhAYwuXZgOrEgjLVoR1QTpbhv4y3qZNEo0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:32:65:e3:39:cc:f0:73:68:41:58:00:21:cd:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bcee40405aefb6da17a340eef159ce9c4d18322
        Validity
            Not Before: May 13 02:01:21 2026 GMT
            Not After : May 14 02:01:21 2026 GMT
        Subject: CN=d45ac6428b6f963bb8787cb16f0bb8bbe4ec5784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bd:33:35:78:18:ac:f4:3e:dc:16:31:c1:a2:
                    83:15:a2:30:fc:ac:65:61:e8:ba:4b:d4:2e:91:8d:
                    7f:48:29:2f:83:b5:1b:81:aa:21:88:44:0a:49:47:
                    90:5b:38:c5:0a:8d:93:e1:76:5b:9a:a7:84:f4:7f:
                    8a:0e:fb:26:0b:48:79:b8:1a:f3:f7:94:e6:5a:b2:
                    e3:e4:20:cc:68:98:96:1f:2e:5e:a4:d3:76:fb:93:
                    bf:ef:a1:1e:2f:1a:2f:64:80:55:5d:c1:74:25:e7:
                    7c:3e:13:50:0a:13:ef:91:69:cc:8f:b5:36:67:60:
                    58:d7:31:88:d8:84:16:cd:59:3b:aa:8c:98:80:45:
                    3a:a4:fd:65:17:15:82:ed:60:b6:27:62:4a:85:2c:
                    1f:f9:8e:2a:66:56:85:79:a8:41:50:9f:67:78:e0:
                    02:e3:27:39:fa:57:b8:a9:4f:47:d7:3e:fe:ac:9c:
                    ff:49:5d:7f:a9:12:a1:62:75:da:b7:c2:94:4a:cc:
                    73:77:26:f7:18:e0:81:df:4e:80:98:5e:fa:1c:49:
                    15:bb:57:be:ae:90:23:e3:14:60:77:68:85:b0:d4:
                    98:51:05:d5:2e:7e:da:ee:86:12:55:e5:c1:7f:9a:
                    07:e9:47:25:46:3e:fa:60:cc:0f:52:76:94:44:80:
                    4b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:5A:C6:42:8B:6F:96:3B:B8:78:7C:B1:6F:0B:B8:BB:E4:EC:57:84
            X509v3 Authority Key Identifier:
                keyid:1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:5a:e1:59:86:f2:27:dc:b8:08:f5:d8:30:5e:38:ce:a0:4c:
         c2:3a:4c:04:0e:b3:fa:a6:7e:8a:84:1b:51:f0:72:4f:df:f7:
         e9:e7:b4:f9:9e:43:c3:ac:c4:3d:2b:b8:a4:f3:c6:b0:23:a2:
         5d:11:4b:92:82:f8:6e:ea:a7:80:0c:a2:cb:98:d5:8e:ee:6c:
         dd:68:46:88:7d:20:79:a2:90:55:46:ad:1b:98:8d:02:ad:54:
         fb:c1:60:62:9a:69:0b:1b:9b:03:20:95:8d:d9:ce:65:3c:88:
         3b:1b:4d:87:6d:c9:b5:ad:1e:e1:d3:48:cb:2d:ed:84:37:51:
         d9:53:3b:1b:18:77:a4:8f:4c:46:50:ea:4d:c9:a9:4f:24:77:
         57:83:9e:b6:7c:3c:9c:f6:8c:85:7e:69:d9:13:4d:ad:62:43:
         8e:10:bd:12:72:a8:db:da:a7:af:15:a9:3d:d2:47:52:e5:71:
         f6:6f:58:39:08:44:af:c2:bf:9e:c9:56:45:a3:1e:5b:da:34:
         87:63:68:4e:64:8b:f7:fc:ca:8c:7a:b6:08:bb:11:08:42:57:
         70:b5:b0:be:c0:e6:87:a1:ee:64:b1:0f:74:93:e5:3d:50:4a:
         d9:85:d8:66:4c:b5:8c:aa:f1:0f:77:4f:38:a4:63:b2:95:2a:
         84:cd:57:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fETJl4znM8HNoQVgAIc1GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiY2VlNDA0MDVhZWZiNmRhMTdhMzQwZWVmMTU5Y2U5YzRk
MTgzMjIwHhcNMjYwNTEzMDIwMTIxWhcNMjYwNTE0MDIwMTIxWjAzMTEwLwYDVQQD
EyhkNDVhYzY0MjhiNmY5NjNiYjg3ODdjYjE2ZjBiYjhiYmU0ZWM1Nzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0b0zNXgYrPQ+3BYxwaKDFaIw/Kxl
Yei6S9QukY1/SCkvg7UbgaohiEQKSUeQWzjFCo2T4XZbmqeE9H+KDvsmC0h5uBrz
95TmWrLj5CDMaJiWHy5epNN2+5O/76EeLxovZIBVXcF0Jed8PhNQChPvkWnMj7U2
Z2BY1zGI2IQWzVk7qoyYgEU6pP1lFxWC7WC2J2JKhSwf+Y4qZlaFeahBUJ9neOAC
4yc5+le4qU9H1z7+rJz/SV1/qRKhYnXat8KUSsxzdyb3GOCB306AmF76HEkVu1e+
rpAj4xRgd2iFsNSYUQXVLn7a7oYSVeXBf5oH6UclRj76YMwPUnaURIBLBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNRaxkKLb5Y7uHh8sW8LuLvk7FeEMB8GA1UdIwQY
MBaAFBvO5AQFrvttoXo0Du8VnOnE0YMiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzg3a0JBV3UtMjJoZWpRTzd4V2M2Y1RSZ3lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hZjg5ZDgtOGMzNS00YzhjLWIxNWQt
N2U0NmFkNzQ4NDg0LzEvRzg3a0JBV3UtMjJoZWpRTzd4V2M2Y1RSZ3lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9hZjg5ZDgtOGMzNS00YzhjLWIxNWQtN2U0NmFkNzQ4NDg0
LzEvRzg3a0JBV3UtMjJoZWpRTzd4V2M2Y1RSZ3lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZlrhWYby
J9y4CPXYMF44zqBMwjpMBA6z+qZ+ioQbUfByT9/36ee0+Z5Dw6zEPSu4pPPGsCOi
XRFLkoL4buqngAyiy5jVju5s3WhGiH0geaKQVUatG5iNAq1U+8FgYpppCxubAyCV
jdnOZTyIOxtNh23Jta0e4dNIyy3thDdR2VM7Gxh3pI9MRlDqTcmpTyR3V4Oetnw8
nPaMhX5p2RNNrWJDjhC9EnKo29qnrxWpPdJHUuVx9m9YOQhEr8K/nslWRaMeW9o0
h2NoTmSL9/zKjHq2CLsRCEJXcLWwvsDmh6HuZLEPdJPlPVBK2YXYZky1jKrxD3dP
OKRjspUqhM1XWQ==
-----END CERTIFICATE-----
Generated at Wed May 13 09:01:25 2026 by rpki-client