Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.mft
File:                     _J8k6-8Ri5Fl5S9hypk77kMGTsI.mft (raw, json)
Hash identifier:          R8tY2Ju9Mez0VgwRQGbjL5Tn2mszba134faKZfh53rc=
Subject key identifier:   B3:DA:24:2B:CC:AD:7E:2A:EB:01:97:2A:7B:C4:06:F9:A7:61:75:10
Authority key identifier: FC:9F:24:EB:EF:11:8B:91:65:E5:2F:61:CA:99:3B:EE:43:06:4E:C2
Certificate issuer:       /CN=fc9f24ebef118b9165e52f61ca993bee43064ec2
Certificate serial:       019E1EA33D7D5CFB605EE961BDBDE92BCB84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_J8k6-8Ri5Fl5S9hypk77kMGTsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.mft
Manifest number:          189A
Signing time:             Wed 13 May 2026 00:01:14 +0000
Manifest this update:     Wed 13 May 2026 00:01:14 +0000
Manifest next update:     Thu 14 May 2026 00:01:14 +0000
Files and hashes:         1: 7B0JN3TZzsWH3xWnjPsFalxLsrU.roa (hash: RqRaE/k1aztxqp++Q0wssZB3S2oxh71O7HLy7VlmBJg=)
                          2: _J8k6-8Ri5Fl5S9hypk77kMGTsI.crl (hash: uf4Vc67qwHcWijtSXy9OwPn6v8ejAAucdxb4my5UZ4k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_J8k6-8Ri5Fl5S9hypk77kMGTsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:3d:7d:5c:fb:60:5e:e9:61:bd:bd:e9:2b:cb:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9f24ebef118b9165e52f61ca993bee43064ec2
        Validity
            Not Before: May 13 00:01:14 2026 GMT
            Not After : May 14 00:01:14 2026 GMT
        Subject: CN=b3da242bccad7e2aeb01972a7bc406f9a7617510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bc:8c:4b:e2:d2:52:d6:c7:ae:08:4d:41:39:
                    90:b4:fa:e9:ec:fb:20:4f:1b:8a:47:e3:dd:83:5c:
                    07:fd:d0:5f:85:f4:a2:e8:d2:29:a2:cf:82:09:fc:
                    52:3a:e2:91:2d:7c:08:68:60:0b:ab:cf:b2:8e:ec:
                    d2:ee:4a:3c:45:39:4f:c2:c0:a8:17:12:7c:89:91:
                    d8:49:74:c7:69:3e:c0:69:63:2a:85:c8:6e:81:49:
                    d4:88:cf:d0:04:62:ce:bf:37:79:d5:93:6d:08:ac:
                    14:7e:7e:c5:47:da:3b:9a:4f:71:9b:15:91:4e:12:
                    4f:7d:a0:89:83:5d:0d:00:e9:d7:a2:ff:da:67:b5:
                    87:65:26:b0:fd:c2:be:6b:36:1b:3d:c0:07:3c:2f:
                    4e:9b:df:b8:b2:19:c8:de:e4:e4:5d:95:19:93:f7:
                    24:79:95:5f:c2:41:fd:88:76:7d:30:eb:15:de:e2:
                    64:9a:52:8f:bd:05:d9:46:8e:06:7e:c1:0b:86:d3:
                    e6:93:61:de:85:b1:06:a0:91:bb:61:bd:7f:c6:18:
                    56:36:30:c9:87:88:57:36:a9:da:b8:97:7d:23:1e:
                    80:b2:3f:85:df:f0:fa:fc:a1:81:4b:19:5e:c0:4f:
                    2a:30:75:4d:aa:7b:d8:d6:6b:6c:5f:67:75:55:52:
                    62:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:DA:24:2B:CC:AD:7E:2A:EB:01:97:2A:7B:C4:06:F9:A7:61:75:10
            X509v3 Authority Key Identifier:
                keyid:FC:9F:24:EB:EF:11:8B:91:65:E5:2F:61:CA:99:3B:EE:43:06:4E:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_J8k6-8Ri5Fl5S9hypk77kMGTsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:08:c3:e4:b9:ad:ed:cf:35:e5:04:37:22:4b:9a:a0:b8:f5:
         4d:a2:04:8d:4e:de:d1:7b:98:8d:1d:b3:79:ac:d0:45:75:d9:
         17:c8:7c:22:67:99:83:ad:32:2d:34:11:6d:c3:9d:54:24:7a:
         5f:fa:cc:91:b5:b5:7f:0d:fe:00:88:1e:47:b2:05:be:f0:4b:
         a7:12:33:d9:1e:36:f2:7a:d6:d5:f4:28:16:5f:a1:42:aa:f4:
         fc:27:17:a7:23:7c:a6:dd:e6:bc:04:7b:86:26:86:b1:87:2f:
         70:e5:10:61:b8:f9:fd:36:86:96:21:88:50:b8:4a:21:bc:d3:
         86:5a:ba:85:48:81:d3:f9:0d:15:64:5e:78:f9:07:e3:b5:66:
         81:1c:5a:1c:9b:9d:2d:28:87:c8:c3:6f:15:3e:36:49:61:06:
         78:81:e0:ae:4f:cc:73:8a:fb:b1:c1:ee:9a:1d:46:ec:ee:55:
         ea:b7:48:38:df:a2:0d:d8:fe:3c:3b:f1:0b:cd:96:f0:b1:78:
         9f:4e:18:93:d4:38:e1:70:98:8c:be:43:1f:fd:cc:e2:d9:fd:
         4d:55:8a:81:93:61:8a:92:b1:35:db:a0:56:f3:b8:91:61:bf:
         ee:8f:ee:7f:f6:9c:17:6f:7d:7c:a6:45:3b:6d:0b:8f:ed:57:
         45:cd:f9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:44:22 2026 by rpki-client