Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
File:                     i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft (raw, json)
Hash identifier:          8hbmvPnOp1pkcoV/XAWTW9RfxgK7qCag2WN124vmt2c=
Subject key identifier:   47:4B:3E:B4:90:D1:3C:B4:2A:72:1F:70:50:8C:CD:1C:E9:A5:21:5B
Authority key identifier: 8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
Certificate issuer:       /CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Certificate serial:       019E1CEBAD93355A0F6536465CB36086D4D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
Manifest number:          191C
Signing time:             Tue 12 May 2026 16:01:07 +0000
Manifest this update:     Tue 12 May 2026 16:01:07 +0000
Manifest next update:     Wed 13 May 2026 16:01:07 +0000
Files and hashes:         1: 4jNVPAJmLO9c6pL_yxre_7Qg83Q.asa (hash: 8bMdcGTnGljv1AHWzdlj2piSPGzoCzVunMnP41YGxLk=)
                          2: A_sUqXNJn9Rojoy-SannfwQKt2w.roa (hash: 7MgWH2+po5ITevBMtb9RWW486i9XpZGlyB9u24ejDDA=)
                          3: CwYtcY0RzoREVsUncN6feXvLhC8.roa (hash: ySt5zeOhGaWSVgsdZWXLp4TRyQYCT9hlwJu376Il+vE=)
                          4: Ju5bZFbzxZDEu6_EWVUu55SHf94.roa (hash: 3V3wg3sXHNBt7AEjJ/DpnJhsu+XXYKgeytuHR/IQBII=)
                          5: aontSbFahoS7z7yeQkm0W4LHsPo.roa (hash: nj6whxPf9P8SD5zY0uyTbTulc/A+27qSNJjJoDzd5t0=)
                          6: i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl (hash: RbJc2SNXdUClr8AYyiP1H4ErqxkHRYStLnH+xqGJ2k4=)
                          7: iZdJ0QX0G1vfk69oMHVFQ34W6Zg.asa (hash: oKspxLsKbdfZFXIMEqaNBaecIl0lk1KJLeO2odsQH/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:ad:93:35:5a:0f:65:36:46:5c:b3:60:86:d4:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b69fc6128be591401acf82bc2461af636ebe8e6
        Validity
            Not Before: May 12 16:01:07 2026 GMT
            Not After : May 13 16:01:07 2026 GMT
        Subject: CN=474b3eb490d13cb42a721f70508ccd1ce9a5215b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c1:6d:34:43:70:97:a6:29:ed:44:f5:4a:b4:
                    cb:21:38:76:d8:9c:21:86:9d:08:d4:72:ac:e7:47:
                    00:7f:e1:b9:36:cb:c8:c1:71:ac:91:29:7a:2e:fd:
                    25:6f:60:c0:c8:5d:20:c3:32:c4:9b:f0:c4:9d:20:
                    9f:1d:2c:03:f6:43:2c:c7:d3:2f:5a:37:a7:20:3e:
                    ee:bf:7d:16:42:8f:4e:9d:c5:de:f5:27:a5:3f:04:
                    43:f2:f0:5e:d6:54:d5:5f:a8:26:0c:c6:f2:20:45:
                    a9:f4:34:98:72:25:40:b3:3a:bb:fe:aa:20:2c:d4:
                    c9:41:4a:a7:1f:73:92:46:7b:86:65:64:7b:1d:93:
                    ca:8c:b9:1f:95:28:92:01:bf:c1:31:26:e5:17:21:
                    19:dd:03:a0:e7:0b:72:c7:55:49:12:dd:60:c1:68:
                    4a:66:30:11:b4:95:23:34:cb:c4:ed:9b:04:93:15:
                    63:3c:dd:58:42:96:fc:c1:b7:ef:66:b6:53:9f:89:
                    32:8a:7b:42:b8:3e:6a:da:34:02:30:d4:4e:74:33:
                    89:5b:95:b8:a4:91:b2:e1:f9:8f:a6:75:9d:11:47:
                    bc:d1:3f:bb:d7:2e:04:7d:45:fb:a0:93:6a:88:a5:
                    24:24:8e:f8:4a:62:e0:f8:64:a1:5d:11:be:0d:ba:
                    10:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:4B:3E:B4:90:D1:3C:B4:2A:72:1F:70:50:8C:CD:1C:E9:A5:21:5B
            X509v3 Authority Key Identifier:
                keyid:8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:6f:19:04:66:c4:16:c7:63:61:0d:04:31:9e:73:08:00:80:
         b8:a9:f7:48:1b:4a:c3:7b:7e:74:e6:19:74:f4:7f:9a:ee:73:
         91:97:5f:ab:55:25:cc:ee:73:dc:f8:fb:5d:4a:c5:cd:2f:a2:
         52:aa:c9:21:85:b0:dd:5c:6e:dc:a8:77:61:44:dc:4e:4a:2d:
         81:39:b3:14:d9:ca:aa:d2:89:d4:95:d1:41:35:8b:ad:f5:74:
         da:82:d6:95:b1:c0:63:40:3b:d7:72:48:e1:42:a8:15:89:53:
         6e:f7:39:d0:cd:5d:4d:c5:cb:46:ba:de:0e:7e:d7:97:96:49:
         0e:e7:04:c4:98:fa:2a:76:9e:5b:4c:09:77:c7:c8:3b:96:15:
         6a:51:88:a7:1f:12:2e:2d:12:83:97:c5:0a:5f:e2:67:39:6c:
         ec:3f:af:b0:ef:84:71:ed:c3:5b:8a:e9:87:8b:e0:ca:67:3f:
         05:40:cc:11:71:ad:5d:16:e9:be:00:77:b1:70:ec:51:20:9a:
         d2:ed:63:81:cc:e7:f4:1c:f4:8b:d1:f8:3d:01:30:ca:cf:7c:
         ea:b0:6e:ca:87:8d:94:bb:06:fa:6e:e5:30:2a:d7:79:dd:20:
         e7:eb:98:52:73:73:e3:a3:dd:34:94:14:4f:75:ac:55:19:eb:
         77:53:67:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:24:07 2026 by rpki-client