Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.mft
File:                     80YWUeW-JFCXcpdbqYxw7G7jzXs.mft (raw, json)
Hash identifier:          /SYpwmNwKplfLk3isZ2jo46lNipI1ukPcomSiclGq5c=
Subject key identifier:   DA:48:5A:3B:29:77:4F:83:E5:D7:D6:52:8E:0C:25:AC:35:53:ED:C3
Authority key identifier: F3:46:16:51:E5:BE:24:50:97:72:97:5B:A9:8C:70:EC:6E:E3:CD:7B
Certificate issuer:       /CN=f3461651e5be24509772975ba98c70ec6ee3cd7b
Certificate serial:       019E1D231463059A01D2E939F08F81465A4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/80YWUeW-JFCXcpdbqYxw7G7jzXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.mft
Manifest number:          036B
Signing time:             Tue 12 May 2026 17:01:38 +0000
Manifest this update:     Tue 12 May 2026 17:01:38 +0000
Manifest next update:     Wed 13 May 2026 17:01:38 +0000
Files and hashes:         1: 80YWUeW-JFCXcpdbqYxw7G7jzXs.crl (hash: ft56sHO41270bvg2iy44mEPB8V22GplVm4fdkOXBNak=)
                          2: Qtc_zuFzRUz7J07L37X5qvUUnhs.roa (hash: D6SdWG5JeosyZFAglIkmKFjIaBi039zmz2skeCVDiYg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/80YWUeW-JFCXcpdbqYxw7G7jzXs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:23:14:63:05:9a:01:d2:e9:39:f0:8f:81:46:5a:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3461651e5be24509772975ba98c70ec6ee3cd7b
        Validity
            Not Before: May 12 17:01:38 2026 GMT
            Not After : May 13 17:01:38 2026 GMT
        Subject: CN=da485a3b29774f83e5d7d6528e0c25ac3553edc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0f:9c:6f:0a:72:ef:47:09:e5:a0:19:4e:39:
                    fb:9f:d3:fd:3a:ed:9f:11:3b:af:36:46:40:5d:88:
                    a6:1c:84:b6:3f:d7:c9:dc:d1:e9:ae:7f:65:16:03:
                    89:2d:ef:f1:6c:95:ed:2e:0c:4f:a5:23:ba:57:14:
                    55:ef:ff:39:40:69:f0:72:62:72:ca:53:17:19:20:
                    d6:d4:fc:bb:bf:dc:43:b7:2a:48:97:8c:d9:ad:c8:
                    c6:3a:10:bb:6e:99:21:e2:9b:d9:21:73:56:1a:30:
                    e5:93:bb:d8:f1:64:b9:e9:6b:c1:f8:d4:e6:82:9a:
                    60:2d:a9:3b:79:bd:8a:b1:67:e2:9b:c5:98:ac:3d:
                    77:b5:25:f8:8d:b9:6d:30:d0:a9:15:e0:3c:62:42:
                    16:b0:c0:dc:79:87:37:53:fe:cb:8c:85:c4:b9:c5:
                    d1:89:84:88:7b:1d:05:0f:8a:72:95:cb:d7:12:92:
                    0a:7f:da:70:fe:f3:de:2c:32:23:71:ae:5d:e6:5e:
                    aa:db:16:a3:f9:bb:e0:8b:c4:56:6f:8c:bb:af:1a:
                    eb:48:da:9f:cf:e3:c1:b9:e0:15:f8:b9:d6:94:dd:
                    9d:bd:f2:31:f5:f2:4c:4f:96:b9:41:dc:4f:f3:c4:
                    d3:1d:1a:5b:c6:d4:01:19:5e:7d:fd:1b:a4:d7:a9:
                    e4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:48:5A:3B:29:77:4F:83:E5:D7:D6:52:8E:0C:25:AC:35:53:ED:C3
            X509v3 Authority Key Identifier:
                keyid:F3:46:16:51:E5:BE:24:50:97:72:97:5B:A9:8C:70:EC:6E:E3:CD:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80YWUeW-JFCXcpdbqYxw7G7jzXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:a4:e1:91:8f:65:2f:6a:d0:5e:67:6c:4a:ea:d1:89:c8:0f:
         8c:de:c7:bb:27:4c:d5:02:30:14:c7:8b:dc:02:ce:0d:16:36:
         16:34:64:3b:c5:7f:67:d6:23:cb:dd:49:41:69:a7:bb:d5:4c:
         42:ce:15:1f:81:cc:33:23:73:0d:98:5d:24:24:28:1c:02:d9:
         c5:e0:76:ee:57:8a:74:88:9d:ce:76:7a:d8:ea:0d:76:74:e3:
         16:81:25:1e:e5:22:93:0a:e6:7d:13:9e:21:a0:8a:a0:4f:09:
         06:a2:0e:1e:fd:7d:e9:5d:0e:35:9c:c8:42:03:52:4f:5f:ed:
         24:55:74:0d:25:e9:be:96:70:4e:83:59:41:65:4d:b5:df:77:
         4d:ef:69:04:5d:dd:36:f4:27:09:a3:2f:94:06:60:a3:7a:72:
         ab:fc:4b:64:1b:5d:da:37:0e:ed:09:25:b8:78:dc:68:fe:d4:
         33:3e:4b:89:1b:93:f7:29:06:dc:b3:78:d7:61:51:22:ab:75:
         7b:ca:19:06:53:8d:ef:dc:46:a5:26:ee:47:e6:8b:d0:a4:67:
         cb:37:50:c2:b1:d4:5c:5a:04:e2:35:c8:de:6b:2b:3a:20:f8:
         69:dd:f0:a8:8e:4c:c8:f6:8d:27:66:8f:53:6b:c4:e4:a6:a4:
         e1:46:aa:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:51:15 2026 by rpki-client