Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft
File:                     C_O8-guoLZPRT4VYcCen53NRGmE.mft (raw, json)
Hash identifier:          MkL1/W5vloCxLWl2HfZARh/mjA7m3MPmYzOFQE6l2PE=
Subject key identifier:   AB:75:9B:6A:15:50:21:22:20:3D:F0:C5:37:AC:78:15:02:96:22:FF
Authority key identifier: 0B:F3:BC:FA:0B:A8:2D:93:D1:4F:85:58:70:27:A7:E7:73:51:1A:61
Certificate issuer:       /CN=0bf3bcfa0ba82d93d14f85587027a7e773511a61
Certificate serial:       019E1DFE3247CB6DFA2C609BAFA2776FDFA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C_O8-guoLZPRT4VYcCen53NRGmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft
Manifest number:          088C
Signing time:             Tue 12 May 2026 21:00:58 +0000
Manifest this update:     Tue 12 May 2026 21:00:58 +0000
Manifest next update:     Wed 13 May 2026 21:00:58 +0000
Files and hashes:         1: C_O8-guoLZPRT4VYcCen53NRGmE.crl (hash: 1vArVgNkwCa6NddXgxX65mYQsGbT1fAXKrJX5MLZ1gQ=)
                          2: yfnlg-tNJYqqOyWJj67EGZSv6yo.roa (hash: KnHV4wZ2GDmYibIqluVpP6AfHpgamKHbICtl13z8MtE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C_O8-guoLZPRT4VYcCen53NRGmE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:32:47:cb:6d:fa:2c:60:9b:af:a2:77:6f:df:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bf3bcfa0ba82d93d14f85587027a7e773511a61
        Validity
            Not Before: May 12 21:00:58 2026 GMT
            Not After : May 13 21:00:58 2026 GMT
        Subject: CN=ab759b6a15502122203df0c537ac7815029622ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:af:ed:9f:87:11:b2:f3:60:68:8a:5d:c1:17:
                    ea:71:09:02:5a:48:6b:de:35:36:81:05:d4:c5:5f:
                    2a:17:13:b3:aa:57:a1:95:57:f0:71:0f:78:ec:5b:
                    42:81:e7:e7:a7:ce:08:38:75:e4:7e:ea:65:6d:a0:
                    ea:db:b3:2b:11:70:74:cd:89:81:46:f7:ae:42:f1:
                    d3:8a:f9:01:05:da:58:be:72:31:37:67:1e:fc:9e:
                    bb:47:54:3f:f1:5c:31:a5:0b:3b:d8:0d:d9:55:51:
                    fd:6a:6f:3e:06:f0:88:ef:1d:29:86:65:7c:6c:4b:
                    63:9e:91:76:da:a0:9f:99:d9:ec:89:0b:10:de:a9:
                    1b:56:5c:b8:95:2a:a1:af:94:e1:3d:fd:fa:11:b0:
                    a7:17:4e:e2:a2:71:88:6d:e0:ce:82:01:b0:d7:50:
                    df:ee:ad:9d:ba:c4:8d:bf:4b:5d:f4:ba:61:d1:1d:
                    a1:4d:e0:c1:9a:e5:71:24:71:e4:61:02:08:a8:d5:
                    fa:5d:de:87:76:7c:65:c1:e4:98:07:bb:12:8a:28:
                    bb:7b:98:95:33:33:3f:ba:c4:77:00:4d:09:2c:a4:
                    04:11:11:60:85:6e:92:45:88:67:e1:2b:03:b9:dd:
                    0b:e4:3a:76:8b:8d:43:12:16:2f:34:40:1e:1e:22:
                    fc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:75:9B:6A:15:50:21:22:20:3D:F0:C5:37:AC:78:15:02:96:22:FF
            X509v3 Authority Key Identifier:
                keyid:0B:F3:BC:FA:0B:A8:2D:93:D1:4F:85:58:70:27:A7:E7:73:51:1A:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_O8-guoLZPRT4VYcCen53NRGmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:7e:37:6a:7d:f7:b0:ed:58:c7:b9:78:df:1c:62:06:4d:50:
         12:99:78:16:cc:05:e3:fa:ee:3f:8e:f8:f7:10:c1:e8:aa:ed:
         18:53:c4:ba:c1:f6:fb:6d:f5:5e:60:0d:e6:50:b3:4f:61:07:
         b5:27:c3:d0:23:8f:5d:25:4c:6e:6c:03:2f:93:ed:77:e7:70:
         de:33:f9:73:58:24:61:be:7d:51:3e:cc:7d:22:96:de:90:0f:
         8f:84:20:8f:a3:5f:28:6c:7a:8b:cd:66:25:b8:5b:80:63:ba:
         cf:06:1c:66:1c:ed:0f:80:b5:f2:9d:78:d9:02:a4:19:a6:4b:
         8d:47:e3:1c:fa:ce:6c:f7:ae:a4:29:61:b9:5b:ce:f7:c5:44:
         35:23:7f:39:23:aa:c4:7a:10:e4:e1:d2:9a:a9:d2:77:a1:fb:
         ca:94:7d:49:cc:e7:15:95:8e:83:aa:c6:0e:ca:87:6c:64:cc:
         e4:47:20:f9:c7:6a:b2:fd:7e:c6:0b:4f:8a:0f:4f:5d:98:68:
         f2:1f:75:fb:7a:3d:40:26:ac:3e:a9:e5:5e:2e:3e:cd:be:c5:
         7d:4f:db:8a:ed:16:d5:44:4d:04:0e:b6:54:50:eb:96:a8:45:
         43:cf:cc:40:7c:4d:c1:2c:54:85:24:ff:83:56:b7:e1:d6:a5:
         b2:24:bd:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/jJHy236LGCbr6J3b9+kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZjNiY2ZhMGJhODJkOTNkMTRmODU1ODcwMjdhN2U3NzM1
MTFhNjEwHhcNMjYwNTEyMjEwMDU4WhcNMjYwNTEzMjEwMDU4WjAzMTEwLwYDVQQD
EyhhYjc1OWI2YTE1NTAyMTIyMjAzZGYwYzUzN2FjNzgxNTAyOTYyMmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwq/tn4cRsvNgaIpdwRfqcQkCWkhr
3jU2gQXUxV8qFxOzqlehlVfwcQ947FtCgefnp84IOHXkfuplbaDq27MrEXB0zYmB
RveuQvHTivkBBdpYvnIxN2ce/J67R1Q/8VwxpQs72A3ZVVH9am8+BvCI7x0phmV8
bEtjnpF22qCfmdnsiQsQ3qkbVly4lSqhr5ThPf36EbCnF07ionGIbeDOggGw11Df
7q2dusSNv0td9Lph0R2hTeDBmuVxJHHkYQIIqNX6Xd6HdnxlweSYB7sSiii7e5iV
MzM/usR3AE0JLKQEERFghW6SRYhn4SsDud0L5Dp2i41DEhYvNEAeHiL8uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKt1m2oVUCEiID3wxTeseBUCliL/MB8GA1UdIwQY
MBaAFAvzvPoLqC2T0U+FWHAnp+dzURphMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ19POC1ndW9MWlBSVDRWWWNDZW41M05SR21FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny82ZDQ1YzktYjJjYS00MGI3LTgwZmUt
YTYzMzEyNWI3ZTIzLzEvQ19POC1ndW9MWlBSVDRWWWNDZW41M05SR21FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny82ZDQ1YzktYjJjYS00MGI3LTgwZmUtYTYzMzEyNWI3ZTIz
LzEvQ19POC1ndW9MWlBSVDRWWWNDZW41M05SR21FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGn43an33
sO1Yx7l43xxiBk1QEpl4FswF4/ruP4749xDB6KrtGFPEusH2+231XmAN5lCzT2EH
tSfD0COPXSVMbmwDL5Ptd+dw3jP5c1gkYb59UT7MfSKW3pAPj4Qgj6NfKGx6i81m
JbhbgGO6zwYcZhztD4C18p142QKkGaZLjUfjHPrObPeupClhuVvO98VENSN/OSOq
xHoQ5OHSmqnSd6H7ypR9ScznFZWOg6rGDsqHbGTM5Ecg+cdqsv1+xgtPig9PXZho
8h91+3o9QCasPqnlXi4+zb7FfU/biu0W1URNBA62VFDrlqhFQ8/MQHxNwSxUhST/
g1a34dalsiS9ZQ==
-----END CERTIFICATE-----
Generated at Wed May 13 04:49:31 2026 by rpki-client