Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/4c18da-4f54-4203-ba75-53a5d322bcc3/1/C8XuRXN7LZSa5t8lkGox-VkD-Fk.mft
File:                     C8XuRXN7LZSa5t8lkGox-VkD-Fk.mft (raw, json)
Hash identifier:          jij39dq9H6N85OfVklPQEnZFRBS7q/1PJfcIc41kV/Y=
Subject key identifier:   8A:A9:1D:B2:02:A2:CC:B8:42:71:DE:8D:6A:80:FE:04:A0:F0:8A:E3
Authority key identifier: 0B:C5:EE:45:73:7B:2D:94:9A:E6:DF:25:90:6A:31:F9:59:03:F8:59
Certificate issuer:       /CN=0bc5ee45737b2d949ae6df25906a31f95903f859
Certificate serial:       019E1BD8B91EA896103D752990921B51B7C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C8XuRXN7LZSa5t8lkGox-VkD-Fk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/4c18da-4f54-4203-ba75-53a5d322bcc3/1/C8XuRXN7LZSa5t8lkGox-VkD-Fk.mft
Manifest number:          97
Signing time:             Tue 12 May 2026 11:00:48 +0000
Manifest this update:     Tue 12 May 2026 11:00:48 +0000
Manifest next update:     Wed 13 May 2026 11:00:48 +0000
Files and hashes:         1: 2ki4F5C_f4OJd8bWDxEOfjMY2BA.roa (hash: SNZLfY0Dnu+nD0hrhPKZ/k/SnrH65xlGDQNmAoLOL0k=)
                          2: C8XuRXN7LZSa5t8lkGox-VkD-Fk.crl (hash: ZYrHewInqmzeEpCBACob9GUbuc8eSbjArYoUUH2CAuk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/4c18da-4f54-4203-ba75-53a5d322bcc3/1/C8XuRXN7LZSa5t8lkGox-VkD-Fk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/4c18da-4f54-4203-ba75-53a5d322bcc3/1/C8XuRXN7LZSa5t8lkGox-VkD-Fk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C8XuRXN7LZSa5t8lkGox-VkD-Fk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 11:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1b:d8:b9:1e:a8:96:10:3d:75:29:90:92:1b:51:b7:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bc5ee45737b2d949ae6df25906a31f95903f859
        Validity
            Not Before: May 12 11:00:48 2026 GMT
            Not After : May 13 11:00:48 2026 GMT
        Subject: CN=8aa91db202a2ccb84271de8d6a80fe04a0f08ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:20:18:0f:30:a4:4c:c0:10:ed:ac:ea:f0:cb:
                    24:ca:e3:b5:16:19:d7:6f:6a:cf:a7:30:ff:69:d1:
                    70:8f:be:a7:b0:ff:a9:05:d5:26:a0:37:98:67:1f:
                    de:ba:f5:8c:5a:1e:d0:35:69:31:75:6d:4c:ac:c8:
                    b2:2f:d4:25:0e:88:3f:7c:63:ac:7b:87:9a:2a:76:
                    88:e0:d4:2e:ce:e2:bd:92:61:b3:2a:d4:98:08:ae:
                    5b:9c:6e:6a:ac:f8:f1:b1:93:a7:85:e5:2d:9c:8f:
                    b3:50:89:b2:80:df:a3:63:57:b0:20:3a:89:92:06:
                    83:07:d6:6e:d1:23:3b:55:6c:ff:27:c1:21:d3:dd:
                    a6:e6:30:8b:db:fa:c0:40:88:d4:e3:e3:a9:26:6c:
                    02:71:aa:14:05:45:78:52:08:21:e7:9a:f5:4a:f6:
                    a6:47:ca:a2:e1:41:2c:75:18:80:87:43:a8:86:fd:
                    0d:71:81:fa:3f:20:31:15:f7:9d:27:aa:43:e3:74:
                    92:0f:5d:db:fa:09:30:eb:b4:a7:c0:ff:87:40:b5:
                    57:57:3b:cb:5c:a2:59:91:c5:be:37:d2:3d:47:58:
                    c6:2f:f3:26:e7:46:4c:0e:7a:f1:02:03:6d:98:04:
                    bb:c9:6a:65:b0:b3:d1:62:3d:18:ea:c2:f1:39:c5:
                    c8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A9:1D:B2:02:A2:CC:B8:42:71:DE:8D:6A:80:FE:04:A0:F0:8A:E3
            X509v3 Authority Key Identifier:
                keyid:0B:C5:EE:45:73:7B:2D:94:9A:E6:DF:25:90:6A:31:F9:59:03:F8:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8XuRXN7LZSa5t8lkGox-VkD-Fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4c18da-4f54-4203-ba75-53a5d322bcc3/1/C8XuRXN7LZSa5t8lkGox-VkD-Fk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4c18da-4f54-4203-ba75-53a5d322bcc3/1/C8XuRXN7LZSa5t8lkGox-VkD-Fk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:8a:21:18:61:ac:d4:c3:95:f6:c1:6a:d6:bb:ce:ff:05:76:
         f7:05:39:db:3c:1c:3c:e9:b4:31:bf:d4:f2:27:bb:74:0c:ba:
         30:f6:0d:49:48:e7:6b:79:ad:d6:d4:6c:37:e2:4f:16:f9:d3:
         42:c8:c0:ac:6b:8f:c0:46:00:9e:fd:94:0d:5f:ca:27:d8:c9:
         97:c4:6d:b8:20:63:21:00:4d:c7:66:f1:30:72:5e:bf:b9:66:
         c0:e7:d6:31:e8:9f:52:4b:27:c4:ac:10:40:75:70:7e:ad:a0:
         57:a2:1f:c7:1f:bb:67:75:5b:0b:96:4e:6b:a9:07:3f:63:e7:
         92:1e:11:db:ee:77:3a:a1:95:a2:e6:8a:78:02:03:35:03:cc:
         5c:d3:9b:da:09:39:92:47:58:ea:73:fd:e6:33:d3:82:f6:f2:
         94:84:82:63:4e:86:68:f9:2f:4e:fe:9b:a2:a0:a5:06:dc:c3:
         b9:0f:4e:27:9c:ab:a1:37:85:b5:07:43:60:07:2b:31:e4:58:
         af:b4:d5:04:c9:22:7a:46:50:e0:5b:98:88:4e:76:d0:b6:08:
         c0:81:87:a5:2d:3c:7d:b4:34:d1:f5:c0:a9:ac:a3:b9:ee:bb:
         b7:a3:b4:e5:05:56:9b:0e:f8:a3:f5:04:41:88:ed:34:3e:a8:
         86:99:55:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:55 2026 by rpki-client