Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
File:                     0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft (raw, json)
Hash identifier:          YRAH7K9mW7jmXtbyMunGJVHoX3WiHXcp50cj2YOdyls=
Subject key identifier:   3F:85:D8:6E:65:2D:4B:26:9F:F3:D5:29:EF:80:26:84:E2:D2:53:04
Authority key identifier: D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
Certificate issuer:       /CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Certificate serial:       019E1BD90F50C5E2E6EB3727F8F16E6FD794
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
Manifest number:          163C
Signing time:             Tue 12 May 2026 11:01:10 +0000
Manifest this update:     Tue 12 May 2026 11:01:10 +0000
Manifest next update:     Wed 13 May 2026 11:01:10 +0000
Files and hashes:         1: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl (hash: nkoaogOymcNjtjPyB5KjWEw7ceW0tavvF4Nl/0U+cDs=)
                          2: a6NDP_sdQRIyavB-C2u1iT6I1vI.roa (hash: 45VvDyynPZqMh80rBZVmGivQ3m/ZKBBtliCy4kfcaYA=)
                          3: bMBeJP4kSoTWFEKBQ7ire7C9GmM.roa (hash: DgOfwTafwxtmSdbTDyercNseVLl1yi6nAKrwiwQ4Ggo=)
                          4: s-r4X6WFzZl_DjwTvg6rx1Dd8H0.roa (hash: jWgwdzxUJDbOjXM/9fnH2+wJvWnEGw4EF7mGjO4+epM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 11:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1b:d9:0f:50:c5:e2:e6:eb:37:27:f8:f1:6e:6f:d7:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d283616f1362c25d82ec2a70c4b9750565b1197f
        Validity
            Not Before: May 12 11:01:10 2026 GMT
            Not After : May 13 11:01:10 2026 GMT
        Subject: CN=3f85d86e652d4b269ff3d529ef802684e2d25304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5b:e0:d2:07:d7:be:75:e0:0f:c0:d6:bb:1e:
                    4c:aa:84:33:d1:91:a6:44:2e:90:6c:55:2b:a8:fc:
                    89:8e:8b:59:1c:a9:58:22:d6:c5:fe:c7:2b:49:c4:
                    84:7a:97:c9:89:73:69:8e:2f:42:0b:e0:da:16:ec:
                    b3:5c:d1:4d:b9:d4:17:94:d1:8e:b5:5e:43:6f:0d:
                    e6:7c:83:ba:d1:01:aa:4a:ee:33:4d:91:b1:41:46:
                    d7:26:2c:f2:3d:c0:21:4f:16:1e:4b:6a:4a:81:6e:
                    fa:fe:42:6d:62:2b:db:02:4d:63:07:bd:66:22:d4:
                    49:81:85:88:c1:d8:06:6c:f8:43:15:d0:6b:ee:9f:
                    8f:a9:cf:92:77:28:1b:ce:dd:32:d9:87:2e:57:86:
                    2b:9e:1f:f9:38:ba:22:be:9b:89:b7:d6:c2:e4:8b:
                    2f:d0:c4:84:4d:56:17:51:ab:fc:19:d4:2a:ea:b9:
                    40:d7:6e:ec:ef:76:05:75:86:a4:c9:8a:ca:9f:4c:
                    ed:f3:27:aa:76:3b:9e:5c:67:fd:40:0d:8b:aa:db:
                    1c:8d:ff:50:37:a6:24:18:0a:62:f1:22:a8:b9:fe:
                    0c:bc:4c:1a:64:8f:da:b6:97:3c:8a:68:7c:2d:d3:
                    d1:b5:99:7d:17:22:76:59:64:7a:d4:8b:dc:0d:29:
                    d1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:85:D8:6E:65:2D:4B:26:9F:F3:D5:29:EF:80:26:84:E2:D2:53:04
            X509v3 Authority Key Identifier:
                keyid:D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:b7:05:9c:8d:39:f8:d6:8d:3f:11:4b:ac:19:2a:46:f4:a8:
         76:62:26:10:b3:e8:54:b5:ee:04:f8:1f:2f:7a:d2:74:7e:6d:
         a1:21:b1:0e:71:cf:22:c3:53:19:01:09:5f:4a:69:c0:cf:42:
         39:e9:01:65:38:fe:cb:27:26:ef:34:25:17:b2:3d:a8:03:5f:
         70:9b:c2:e4:cc:ce:92:bd:e5:d3:42:56:ee:ca:ca:15:00:c2:
         4c:6d:19:b7:17:7a:b4:9a:8c:f7:06:58:49:cd:4d:bd:c6:91:
         64:1a:e1:1f:7a:ed:51:af:0e:77:8d:70:e3:76:b1:97:f5:7f:
         54:0f:78:d3:b4:96:ae:f2:bd:ab:a3:d9:36:9a:62:41:36:d8:
         1f:ce:02:ea:2a:7e:36:e5:60:c5:ca:b5:6b:4d:b5:99:21:ad:
         03:30:02:60:df:9a:1c:02:18:d8:26:35:05:d2:1a:1a:91:a6:
         af:be:74:da:f6:08:cb:89:7a:48:a5:9e:6d:ec:bb:63:4a:b4:
         79:6a:f2:ed:da:c3:a9:28:c8:60:8c:39:b7:91:56:a9:88:49:
         69:b8:f5:82:ae:f4:74:6b:5b:5d:26:a8:22:c8:c9:fa:96:38:
         3b:92:ed:13:0b:66:57:57:6c:39:ca:d2:50:1b:55:07:ec:56:
         56:53:9b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:17 2026 by rpki-client