Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.mft
File:                     ji88c55RceTAJtqW5bUP_CZ9YG8.mft (raw, json)
Hash identifier:          dN6ViAJLXJJFq1OCrvqkAqmupqdHqEmqPyUkItT1PZQ=
Subject key identifier:   E1:C5:47:FB:63:29:2B:AC:FF:FD:FB:1F:55:C7:E8:D0:E8:DB:37:FF
Authority key identifier: 8E:2F:3C:73:9E:51:71:E4:C0:26:DA:96:E5:B5:0F:FC:26:7D:60:6F
Certificate issuer:       /CN=8e2f3c739e5171e4c026da96e5b50ffc267d606f
Certificate serial:       019E1E6CA725DA1DE76F9873EE2101B3A72A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ji88c55RceTAJtqW5bUP_CZ9YG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.mft
Manifest number:          01E8
Signing time:             Tue 12 May 2026 23:01:37 +0000
Manifest this update:     Tue 12 May 2026 23:01:37 +0000
Manifest next update:     Wed 13 May 2026 23:01:37 +0000
Files and hashes:         1: VxvYbuSfG0RJoqSS3rt4zAO_Ka4.roa (hash: rSBhJErUYfpEXMJHn/N2TLGG8HzzTS+TuaT38co035w=)
                          2: ji88c55RceTAJtqW5bUP_CZ9YG8.crl (hash: cJRUdt1S95pxuzfAJySTSQAwUfh7pAbGdCbAMTHbIvg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ji88c55RceTAJtqW5bUP_CZ9YG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:a7:25:da:1d:e7:6f:98:73:ee:21:01:b3:a7:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3c739e5171e4c026da96e5b50ffc267d606f
        Validity
            Not Before: May 12 23:01:37 2026 GMT
            Not After : May 13 23:01:37 2026 GMT
        Subject: CN=e1c547fb63292bacfffdfb1f55c7e8d0e8db37ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a6:40:b4:27:a6:d0:14:19:ef:30:2a:b1:9f:
                    74:09:da:6e:1c:90:03:57:2f:15:09:5a:b9:f1:df:
                    d4:42:42:67:6a:39:91:2f:c4:99:42:2b:9d:54:ec:
                    1e:71:5e:21:a1:4f:8f:be:45:c7:9b:15:2a:fb:33:
                    d6:a3:67:2e:c8:f0:21:dc:2e:24:e7:da:d6:aa:c1:
                    e0:a1:65:05:c8:09:f4:f9:f9:63:e9:3f:1e:38:43:
                    f8:42:e5:fa:c9:02:8e:05:eb:c7:eb:a8:17:06:fe:
                    c4:b9:52:a5:00:05:5e:01:06:12:0b:ae:21:69:8a:
                    f1:22:3b:28:30:67:54:81:ec:0f:88:4d:4c:09:4f:
                    c8:5c:65:f9:3b:b1:08:1f:28:52:f3:e7:b7:da:73:
                    2b:65:46:65:09:e7:00:5b:58:bf:2d:ee:54:1c:a5:
                    e6:f1:99:03:8e:08:33:09:b4:00:b6:3e:5c:6d:72:
                    56:c3:82:09:29:ac:b5:7c:e8:02:16:14:68:fc:a2:
                    af:13:9c:32:01:97:9e:8d:a2:19:ca:73:e0:47:0e:
                    92:1c:8e:64:31:0c:d9:7a:24:c8:a4:5e:5a:4a:79:
                    f2:01:0d:0c:fc:20:45:90:6d:17:0d:6f:60:b0:d8:
                    ad:85:ab:56:0d:b1:82:ee:f3:0d:c3:3d:54:dc:cd:
                    6c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C5:47:FB:63:29:2B:AC:FF:FD:FB:1F:55:C7:E8:D0:E8:DB:37:FF
            X509v3 Authority Key Identifier:
                keyid:8E:2F:3C:73:9E:51:71:E4:C0:26:DA:96:E5:B5:0F:FC:26:7D:60:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ji88c55RceTAJtqW5bUP_CZ9YG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:66:31:a8:d9:bc:e0:60:01:57:f8:ef:88:fc:25:37:16:ea:
         fd:65:48:7c:ba:89:5b:97:87:f6:9e:ed:e8:ce:e6:69:ef:7f:
         ea:f7:39:b0:9f:f4:26:06:d3:a6:45:81:a9:2d:38:3b:e8:2b:
         64:17:60:d8:cc:74:4d:74:be:8a:35:37:a8:59:25:24:2d:43:
         0c:41:14:76:23:d3:ea:d4:04:cd:5b:b3:61:ae:cc:da:85:cc:
         95:9c:95:a1:cf:c6:0e:6f:5e:28:43:84:ea:58:61:5b:5a:56:
         30:4c:de:09:bb:12:80:24:0a:8b:f5:0a:cd:8e:c1:d1:ad:68:
         4d:75:3e:a1:90:03:57:9d:e9:9f:7b:25:03:a8:85:c5:73:3e:
         43:03:28:0c:2f:01:53:c7:d0:c5:37:d4:c2:77:24:fb:27:21:
         02:df:df:d0:66:d0:14:0a:9a:01:be:6e:69:e9:4f:97:c3:26:
         c4:7b:82:df:54:f7:8f:4d:21:51:9c:3c:74:dd:39:43:21:e5:
         90:77:06:e3:14:67:97:e6:99:84:6b:a4:47:ea:0e:40:78:aa:
         42:70:94:bc:62:7c:87:39:e2:0e:00:c2:e8:64:8c:2c:bc:6d:
         c9:af:35:63:98:9a:47:8b:ef:77:f8:f1:57:72:36:4e:8e:fd:
         65:fb:11:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:42:33 2026 by rpki-client