Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
File:                     g8bKhlGbVtTRhzr24lfefpfzyKw.mft (raw, json)
Hash identifier:          0pWIiOoDVTfUMklx1joVjaS3wD1rcSOV1F51ua5EcM4=
Subject key identifier:   2D:CB:DF:C4:3E:F8:BA:98:12:DB:97:01:18:E5:14:75:26:EA:10:3A
Authority key identifier: 83:C6:CA:86:51:9B:56:D4:D1:87:3A:F6:E2:57:DE:7E:97:F3:C8:AC
Certificate issuer:       /CN=83c6ca86519b56d4d1873af6e257de7e97f3c8ac
Certificate serial:       019E1FB5C6CD0BEC382DD00DB2C0BC82DE41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
Manifest number:          0E01
Signing time:             Wed 13 May 2026 05:01:07 +0000
Manifest this update:     Wed 13 May 2026 05:01:07 +0000
Manifest next update:     Thu 14 May 2026 05:01:07 +0000
Files and hashes:         1: fPLCcx5H4vWt-QPjiq-SI0ctgqs.roa (hash: rnGcIrJs7Q+bQMqz23kcZC8Vb081NJ16W91BEzEb8U4=)
                          2: g8bKhlGbVtTRhzr24lfefpfzyKw.crl (hash: /jYSt2/AVBbWY0EApk2vtIOIqhvXstxgsuPCg5lfKQY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 05:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:c6:cd:0b:ec:38:2d:d0:0d:b2:c0:bc:82:de:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83c6ca86519b56d4d1873af6e257de7e97f3c8ac
        Validity
            Not Before: May 13 05:01:07 2026 GMT
            Not After : May 14 05:01:07 2026 GMT
        Subject: CN=2dcbdfc43ef8ba9812db970118e5147526ea103a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:48:ea:15:1f:87:98:91:32:35:89:9b:9d:b7:
                    80:01:1f:e7:5e:50:be:ed:29:ce:c1:3e:6c:80:ba:
                    92:d2:e0:49:cc:b5:82:09:70:46:ee:04:aa:2e:fe:
                    20:d9:24:a8:cd:16:c2:90:8e:e2:b2:a5:61:3b:75:
                    e9:d2:5d:02:c3:27:cb:e8:e8:3d:df:c2:4f:ba:b1:
                    6f:df:46:70:ef:6f:d3:81:43:55:8f:4b:7f:7a:be:
                    23:b9:31:0b:90:92:1f:d7:a4:ef:31:dc:f8:c4:87:
                    b6:4f:79:f2:fa:92:14:0d:66:4c:ac:f6:3a:35:d6:
                    ff:21:52:ff:74:4e:d9:e8:f8:2a:4a:99:84:62:f2:
                    0f:13:bb:75:7a:d4:35:2e:01:1b:f4:94:58:a2:4b:
                    eb:e3:49:7a:53:03:54:56:8c:97:0f:65:d8:21:da:
                    37:a2:51:7e:c3:6b:4a:cc:9e:73:b3:e3:cc:c2:a7:
                    08:b1:43:64:cf:70:8d:42:2c:31:31:d7:33:69:33:
                    6f:de:02:cc:d1:27:00:33:8d:3e:54:a8:a5:6e:ed:
                    86:6c:83:62:3d:79:cb:02:81:02:d1:96:38:a1:a0:
                    b4:5c:98:9d:fb:83:f3:e3:73:ef:db:83:c1:ae:51:
                    9a:bd:9f:68:6e:72:f4:a3:55:a8:39:da:ff:d7:19:
                    de:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:CB:DF:C4:3E:F8:BA:98:12:DB:97:01:18:E5:14:75:26:EA:10:3A
            X509v3 Authority Key Identifier:
                keyid:83:C6:CA:86:51:9B:56:D4:D1:87:3A:F6:E2:57:DE:7E:97:F3:C8:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:f1:79:81:76:32:98:d2:fe:84:5c:4b:3a:c9:d5:3b:33:21:
         e5:c4:92:3d:53:a3:18:c5:76:41:b2:34:49:3e:d6:56:b9:89:
         ef:2a:ed:60:81:bb:32:2f:6c:b5:41:e3:8a:01:40:c5:de:6c:
         9c:bd:f8:8b:2b:07:91:2d:a8:9f:18:e5:d2:74:71:e7:6c:f2:
         c2:67:1b:e4:76:e5:49:cd:66:8a:e2:06:3f:41:81:d5:de:3b:
         6c:8e:df:49:57:00:a9:bd:af:7a:86:5f:1b:0c:0e:13:01:e4:
         b1:c3:0c:39:f4:a8:e7:bd:d2:63:6e:c1:33:59:52:b2:91:8d:
         9f:ce:f3:21:66:bd:eb:a9:e0:04:6c:cc:1e:24:40:de:a6:c3:
         e2:8a:4f:d3:b0:fb:02:3f:e2:ae:15:5e:fa:43:38:d5:bc:3a:
         70:95:69:e7:df:d3:3f:45:2c:87:8c:12:a0:30:b6:a7:0b:b9:
         1c:a1:30:e1:ea:f0:d0:f0:70:85:c7:08:11:9d:ba:5b:80:ea:
         53:e0:64:d3:bd:00:83:87:3b:ec:3c:c1:6f:5b:fd:e7:69:4c:
         32:56:6e:89:bf:9e:0d:ce:14:a2:35:d0:b4:b3:a3:f1:2a:43:
         83:1b:be:c2:7c:4b:7a:ae:f7:87:c5:19:4e:56:7e:a3:37:41:
         37:81:42:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:16:06 2026 by rpki-client