Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
File:                     j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft (raw, json)
Hash identifier:          S9YoofSegKFIVR9485pb76gFeulZCywFaOzMl6p32YA=
Subject key identifier:   C3:2A:20:9C:5D:11:13:CB:34:9A:F6:CE:D4:64:31:4E:A7:5E:25:5E
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Certificate issuer:       /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial:       019E1D23514E787FD433986518E4C4CECDDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
Manifest number:          1497
Signing time:             Tue 12 May 2026 17:01:54 +0000
Manifest this update:     Tue 12 May 2026 17:01:54 +0000
Manifest next update:     Wed 13 May 2026 17:01:54 +0000
Files and hashes:         1: 0wV5g4EVRhgoKZWB0l4u4NCoebc.roa (hash: x9f29Pup33svef1VwpyK5xHxGxbt4thAXHF+Oyzm5bM=)
                          2: 4CZjW2K05gjTWVSm5HCC1YhuGFM.roa (hash: YUklznotWSasG+NPzST/0VXBFbDg9f0JqUM1FXRqVpI=)
                          3: 5h6kFRQXVVJn7vc_7-eg5_4Zx1M.roa (hash: 7n1WW6ereLymBeWVUlfPXwnYkLa0bK40qeD55u+vgDQ=)
                          4: 7Y-dcG1ts9XBr6M2neYbzLiBIE0.roa (hash: fa0hkAmckPv2az2FBEeIwpMqvvWjXXDG2d/nbEmckOA=)
                          5: CRGHJQj4lZiRn9TWiVjqPSQiI_s.roa (hash: LhY2OVqSV8kBseD85misaxGvwCTS5KLte3vYc1JA8OE=)
                          6: Dja78ruX4o7MO5yCfGzKSVMuXBo.roa (hash: 2yO1oHN3Azbfysz52/wvWwgKaNjr723EJVJe38YhZHk=)
                          7: JKAnK2en3odHT3-Pq6Exoze1jvQ.roa (hash: qU0dNd/ElxDWuoJrBPmPXPS+v87iZmcyX83uBVkJOdg=)
                          8: MPO8HbcFWMOeE2iBKVv-IWpWPxk.roa (hash: CZOBmBd1hbGjq3AqK4WkUgTLjxnhfpm1Rc52Dylmg/w=)
                          9: MpLOwnyu2anoLVlED_5oFKlDxB4.roa (hash: 8o1FX8BBhwIHnjoaP2OfRA6v8Ril1Bvaqiop7L5Ytzg=)
                          10: OY4yu33kRTHXIDvS06hD5g3ZU1I.roa (hash: MO3P51CXchSgKn4Y84H+Th8p16bdsxGFK2fbYdmXi5Y=)
                          11: QsaJUx8IySwAVJKdDaCVAV_WeG8.roa (hash: vu/oFsB63dNb0RilkgFUkxuOJfKjYLkKFMHoBUDzCU4=)
                          12: RQYIGLLVSIftKc72IB8Q5fGhyLA.roa (hash: du2s9GjbjtVis5okEfEtz3NF056oJiz3iauob6CPdOw=)
                          13: S2NE7ivxA_6uSF3faj9xM7QLVgw.roa (hash: qDphZ//ssVu7S99t/OF3SeD4wpZPqNUE9vHt5D6PaMI=)
                          14: W_DUPmMWXfw6_1KwWt3waPIqT-s.roa (hash: cneq7hYbqTf+UiD+t4E82O4maYI9qUbQh2f/R56QLF8=)
                          15: imB7m_SSkD-EKaGcH3WYOVA3UFA.roa (hash: QaG4X81jQlLRNJJxryf942TxAMPUaQpIxGX6diK8mSM=)
                          16: j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl (hash: OdVy272oUTrFoeDMisggJYMBlggucfTxLHl+HnFFz4E=)
                          17: lLhmEw7IEMb-qUjY7M3kCd8cWOA.roa (hash: ynq1BksMwSLgFJR9WzfdR5gm2pKZhnJLRvt2UFC0YIk=)
                          18: rcJDPkI4eynfWrTLoSdqLg60fG4.roa (hash: EXzqiGJMATe2PwXCIjt1gE9L/khTBoqYQQscvLJnOxM=)
                          19: s1BOsr_SL1rErib0eleQtkSspyY.roa (hash: YIrdM89Nie4pypUTkAA2EhoG4aHCBtnPq36XIULi8J4=)
                          20: vTjdy81Ui1f2cDgZ1hxqEJxmLlo.roa (hash: VYtXHqRevYtaXeI9lQQ4d+QNrCRIHyo5F1ekiS2/Np0=)
                          21: yxBWMEqUTuUpppX4kQbNWZMUag8.roa (hash: GfoDixWxoGP9Yf1RA/HAN8eaFxjgurmqtoh7fzztQM4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:23:51:4e:78:7f:d4:33:98:65:18:e4:c4:ce:cd:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
        Validity
            Not Before: May 12 17:01:54 2026 GMT
            Not After : May 13 17:01:54 2026 GMT
        Subject: CN=c32a209c5d1113cb349af6ced464314ea75e255e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:4f:94:00:2a:ba:79:36:ce:f6:2c:12:2c:7b:
                    c1:fb:bd:da:67:0d:8b:be:19:f6:12:25:06:1c:ce:
                    25:bd:db:f8:b8:f9:0b:4d:6e:bb:47:09:0c:d7:75:
                    af:7a:a1:3a:04:31:ce:7a:2e:a3:55:83:56:aa:bd:
                    ea:98:8a:77:27:44:c7:97:a0:c6:d9:86:16:9f:31:
                    af:0e:07:2d:91:1e:78:9e:38:3c:43:5b:c1:c8:19:
                    ef:83:c1:1f:de:8b:8b:62:ff:d7:dd:ff:bc:29:c6:
                    26:58:c0:44:41:b1:ec:1e:29:9c:4b:f6:ea:b5:62:
                    88:73:36:07:4d:94:a3:49:5a:24:13:18:9e:31:63:
                    c0:ec:66:6d:a0:8d:ea:b2:85:80:ac:95:8c:58:58:
                    10:16:f5:e0:68:e1:54:f2:85:62:c7:a4:72:59:1e:
                    0d:f8:85:93:f4:12:9c:a6:80:51:7a:0e:50:15:a7:
                    51:1e:61:d1:f6:93:d9:5c:13:f3:0b:79:80:09:ff:
                    86:70:4f:1c:26:a1:fc:7a:7d:ec:ab:76:68:dd:53:
                    48:ab:9e:52:50:17:23:51:ae:46:3b:32:b9:44:d0:
                    01:c0:fb:ad:f6:ac:da:4a:72:40:1f:2b:3c:83:81:
                    a0:fe:31:ca:9b:0e:2b:4d:fc:98:f7:71:da:d9:2c:
                    5f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:2A:20:9C:5D:11:13:CB:34:9A:F6:CE:D4:64:31:4E:A7:5E:25:5E
            X509v3 Authority Key Identifier:
                keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:4e:ec:eb:ad:36:4e:7c:cb:22:33:78:e4:af:9e:ba:42:fa:
         f2:40:c2:15:19:fe:c0:85:89:09:8d:a3:dc:fc:ed:72:07:1b:
         ba:48:9b:db:a5:c4:05:88:6a:07:7a:ff:50:1e:f6:d3:58:50:
         27:f5:5e:1d:dd:aa:e9:6b:d1:58:a3:81:ee:01:52:81:34:05:
         2f:a0:9f:1c:bf:8f:9e:0b:00:d7:e3:32:08:33:6c:7a:fe:3b:
         1c:d9:6a:fd:29:4a:4c:77:72:ff:7a:91:7a:0f:56:66:17:6b:
         46:98:8c:5a:60:ad:d9:64:cb:45:20:c4:f1:37:48:82:43:15:
         c9:6f:9a:14:fc:03:5f:40:70:5d:7d:ac:2b:dc:71:fa:71:47:
         f7:47:85:86:5a:07:05:f9:eb:b0:39:06:a0:91:13:98:0b:e0:
         1d:70:b0:60:19:d4:ae:db:1c:23:f1:5e:74:0d:fe:af:a6:c8:
         db:37:bd:4c:80:ca:5c:f0:1e:0f:51:4f:3b:a3:36:51:40:2e:
         63:f5:54:cc:3f:8f:17:e3:d7:d9:f6:03:1f:a3:9d:50:d9:2e:
         4f:98:af:8a:4b:46:57:cc:f7:91:4b:72:f4:b5:c5:7b:2e:a6:
         f7:ae:ba:63:ea:db:b7:68:a7:27:b7:28:c6:ca:56:bf:c4:57:
         3a:46:e7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:27:00 2026 by rpki-client