Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
File:                     oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft (raw, json)
Hash identifier:          kB9N9FjxcZ+9/epLX8lJ1mjTirnbs3LTvDNUnqufflQ=
Subject key identifier:   6E:CC:FC:97:AC:AF:70:58:9B:52:8B:D2:5D:15:24:2E:FD:FE:DA:82
Authority key identifier: A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38
Certificate issuer:       /CN=a088b0547f09fe9224050d70a523da5bedbe0738
Certificate serial:       019E1D22AB66D00EFE25F1E19543D2639F27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
Manifest number:          0CE5
Signing time:             Tue 12 May 2026 17:01:11 +0000
Manifest this update:     Tue 12 May 2026 17:01:11 +0000
Manifest next update:     Wed 13 May 2026 17:01:11 +0000
Files and hashes:         1: 04FbY6kBRpqiGP3AkiBuCWu5Bes.roa (hash: HoNtS+1Oc+MT8EGjXP3z2c8KS6IAUrdzH1rtxmawMCg=)
                          2: FD9UserVnd9g-B97_3OHBh6hGow.roa (hash: alF7jO0INJ/TLd2wbZJoqP534uCICHCvkQ7BKchM5M0=)
                          3: cbaJKNAhgJAhFE_4zoZbKJm5V5s.roa (hash: Rcxed2Cw/y7WBNPlRsNkcmXlhqGDs0w++1hNx6Mbo5U=)
                          4: oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl (hash: Eo93IZHuWu+w9gsL2ncxlxBAxUSzK6GCLg+cIsusJHI=)
                          5: uUoKvpcOk1MN1N-RCShYaCzs_Ms.roa (hash: kQd1YigGHb1xiD3rBDQj/Z4qQiqNkv9K2U3Hpfudh9s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:ab:66:d0:0e:fe:25:f1:e1:95:43:d2:63:9f:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a088b0547f09fe9224050d70a523da5bedbe0738
        Validity
            Not Before: May 12 17:01:11 2026 GMT
            Not After : May 13 17:01:11 2026 GMT
        Subject: CN=6eccfc97acaf70589b528bd25d15242efdfeda82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:78:dd:46:12:3b:78:42:be:fb:b0:62:98:99:
                    cf:b3:67:6d:77:33:72:5f:70:4c:45:d5:8a:0f:b9:
                    64:a6:33:9d:0b:8e:8d:67:87:ef:35:c8:fa:11:e8:
                    fe:aa:e3:6c:21:b6:b1:f3:fb:39:1f:94:9c:f9:9e:
                    9a:00:0a:cb:5f:33:67:f9:55:04:fc:18:63:dc:60:
                    31:73:b7:d7:9a:08:1e:01:81:d1:33:cf:ff:d3:69:
                    49:34:ba:ae:6f:5d:7e:58:43:49:11:ef:3e:a8:df:
                    14:27:6a:bd:e2:c1:5f:0a:72:f3:7e:c6:7a:a6:77:
                    61:ea:20:38:3b:0f:9b:dd:7c:11:dc:de:a5:38:a9:
                    5f:08:5a:e5:03:7d:cf:59:5c:be:a9:99:84:5d:09:
                    46:4e:dc:e3:ea:fd:a2:e7:d9:e9:c9:bf:1b:af:34:
                    19:8d:ff:26:d2:59:90:73:c3:c5:6f:30:e6:f2:02:
                    84:0d:46:9f:96:d6:33:91:bd:d0:da:64:e3:69:45:
                    2b:59:f0:27:32:b8:8c:80:92:51:9d:a5:93:b6:d5:
                    ef:ee:ac:4a:b6:52:ff:10:69:99:0c:6a:82:46:60:
                    00:45:23:4a:72:f9:7a:c4:33:34:bf:34:a8:a8:82:
                    c9:6b:a3:fa:9b:3e:e0:2b:19:7b:3b:c9:1d:a1:07:
                    6c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:CC:FC:97:AC:AF:70:58:9B:52:8B:D2:5D:15:24:2E:FD:FE:DA:82
            X509v3 Authority Key Identifier:
                keyid:A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:50:8e:e5:4d:0f:e5:dc:89:3e:e4:30:d3:7b:57:cf:a9:50:
         bf:fe:0f:57:a1:28:3a:72:66:59:2a:65:f5:83:4c:ab:97:c6:
         56:c6:8b:9c:b1:11:51:83:57:f5:f8:3e:1e:20:57:6d:14:92:
         96:e1:12:35:eb:a7:b4:34:a1:4a:37:53:47:26:41:88:5b:7c:
         ee:47:7a:b5:e6:7c:0d:f2:37:73:2b:47:96:05:41:db:ec:a7:
         37:25:65:a4:37:4f:8e:57:d4:14:ae:d3:18:97:f1:1d:58:fa:
         96:68:fd:c3:ab:e7:5e:d9:4d:cc:ce:b5:26:f5:ed:08:0e:50:
         e4:eb:8a:90:12:41:70:18:02:75:16:ea:f9:b9:44:74:d4:20:
         76:4f:7f:b3:b9:57:d7:6d:37:a0:6c:d3:86:bc:fd:b9:e5:4f:
         62:e9:91:dd:82:57:94:87:e6:b1:a3:f1:22:fd:41:30:3a:ef:
         6f:1a:0d:fe:9a:de:22:f0:aa:3b:09:67:88:18:47:19:c7:d7:
         39:05:da:43:00:15:f9:59:15:08:d9:76:fe:56:55:61:27:b9:
         7a:9e:07:51:dd:5f:e7:cf:69:37:7c:01:66:7b:69:ac:d6:6e:
         c9:29:ef:83:0d:d2:83:5e:8e:6f:9c:f8:ce:c9:2a:ab:f3:8d:
         22:e4:19:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:12:27 2026 by rpki-client