Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft
File:                     F1pykOwpjBtk2YYwbxsk09M2aYY.mft (raw, json)
Hash identifier:          XUZ2kp15au4XLX45LavOch88MMfyiFWVhGj450m2tPY=
Subject key identifier:   9F:CD:90:D5:52:5A:AD:F4:18:E4:2A:E9:79:F8:6E:62:A2:D4:D1:94
Authority key identifier: 17:5A:72:90:EC:29:8C:1B:64:D9:86:30:6F:1B:24:D3:D3:36:69:86
Certificate issuer:       /CN=175a7290ec298c1b64d986306f1b24d3d3366986
Certificate serial:       019E1D22FF331D16D1CE225A8A7430FB51EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1pykOwpjBtk2YYwbxsk09M2aYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft
Manifest number:          01AD
Signing time:             Tue 12 May 2026 17:01:33 +0000
Manifest this update:     Tue 12 May 2026 17:01:33 +0000
Manifest next update:     Wed 13 May 2026 17:01:33 +0000
Files and hashes:         1: F1pykOwpjBtk2YYwbxsk09M2aYY.crl (hash: kZCEHN0J4JmhApafPmFNwujVx88z75y7H/8WteGqAWM=)
                          2: gCCPOIqrilObRY-20jJBuOKvlg4.roa (hash: SYvt+ifw0BqFAbOybuBVVwfG7PXUsxmnVp0Phqp9hmI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F1pykOwpjBtk2YYwbxsk09M2aYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:ff:33:1d:16:d1:ce:22:5a:8a:74:30:fb:51:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=175a7290ec298c1b64d986306f1b24d3d3366986
        Validity
            Not Before: May 12 17:01:33 2026 GMT
            Not After : May 13 17:01:33 2026 GMT
        Subject: CN=9fcd90d5525aadf418e42ae979f86e62a2d4d194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ce:40:0a:f4:9e:75:16:bf:72:4a:73:f1:9d:
                    82:18:5e:c0:9a:46:8d:b7:81:10:51:b2:e9:b3:6e:
                    3b:35:94:72:9e:d5:a6:8a:7f:75:7e:f3:ed:46:0d:
                    dd:ad:e3:c9:10:b9:1d:93:c3:d1:cf:b0:18:e4:43:
                    20:8c:f0:62:50:05:eb:52:3a:a5:e8:e6:65:29:b4:
                    c5:25:96:67:db:77:fd:cb:6f:1d:b9:7a:4b:7b:ff:
                    da:40:ca:17:f4:69:8f:b1:57:ee:40:53:a0:75:fb:
                    45:87:bd:30:ea:22:68:a0:cb:cb:06:05:1f:4c:43:
                    48:83:7a:7b:3c:22:25:a6:c8:f6:22:c0:31:16:75:
                    7f:52:a2:14:1f:eb:0c:91:d7:56:db:5b:19:cf:91:
                    b3:ef:f7:ae:f0:66:68:28:c8:38:41:dc:cc:df:83:
                    c8:ff:1d:aa:da:22:ac:f8:fa:5e:d2:32:d0:0a:86:
                    10:27:a8:80:5b:d9:1d:a2:d0:4d:da:64:2d:e7:2b:
                    ff:70:c4:96:7b:99:91:f8:b4:cf:71:1b:00:bb:d6:
                    95:19:50:a1:67:cb:3a:f4:fe:9d:28:b6:7c:0b:ee:
                    e6:1e:63:b6:98:d2:9b:43:85:7c:73:47:a2:cd:8e:
                    4b:d9:37:c2:4f:76:fa:3e:27:f7:0a:5f:3a:ed:78:
                    ba:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:CD:90:D5:52:5A:AD:F4:18:E4:2A:E9:79:F8:6E:62:A2:D4:D1:94
            X509v3 Authority Key Identifier:
                keyid:17:5A:72:90:EC:29:8C:1B:64:D9:86:30:6F:1B:24:D3:D3:36:69:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1pykOwpjBtk2YYwbxsk09M2aYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:82:42:3a:bb:2f:a2:08:32:c6:9d:0b:68:a1:6e:24:23:0a:
         b5:79:e0:61:0c:87:f8:24:c2:2f:ca:89:3c:57:a3:f1:14:12:
         60:49:69:00:38:1f:a7:75:bf:ab:23:ae:3c:74:32:a4:11:c4:
         f7:52:13:05:ad:2a:57:a1:c3:d6:74:a6:9b:4c:b5:01:b0:37:
         2f:89:80:4a:90:89:91:ea:43:a8:a0:f1:41:5a:ee:35:2c:a2:
         a4:04:3c:20:53:2f:d2:6b:cb:13:db:8f:72:9b:32:64:29:70:
         14:07:e3:35:f0:a9:4f:fe:7d:c4:6b:82:55:65:dc:d8:02:d3:
         25:30:08:14:f9:c9:87:92:3e:48:1d:fd:8b:75:2e:75:db:b1:
         80:ca:38:0f:24:b5:fe:15:a3:64:1c:95:e6:8e:40:f0:f0:9a:
         79:ae:cb:c1:01:63:83:36:3b:c1:a0:de:33:d4:55:0b:fe:76:
         33:72:ad:86:3c:51:00:48:3c:c1:a0:c0:c0:f7:31:49:55:c7:
         f9:59:17:04:db:16:86:77:f1:1c:97:4f:38:af:2d:93:16:78:
         c6:8c:29:78:30:27:9a:78:6d:44:d4:ce:69:56:10:5c:21:89:
         42:14:98:45:ce:a0:e7:b1:ae:c8:aa:a0:76:d1:17:9e:66:96:
         c1:06:98:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:44:01 2026 by rpki-client