Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft
File:                     rvy2RB1w0usQ12M9pzGaPT_5d64.mft (raw, json)
Hash identifier:          uvEzcGn1LuAl1PX6lc5Ca6spA/8MpTvIH1vzt/TDHTI=
Subject key identifier:   08:BD:7A:D1:A9:E6:0A:DB:22:28:47:BB:0A:44:EB:FF:9A:F6:5F:D9
Authority key identifier: AE:FC:B6:44:1D:70:D2:EB:10:D7:63:3D:A7:31:9A:3D:3F:F9:77:AE
Certificate issuer:       /CN=aefcb6441d70d2eb10d7633da7319a3d3ff977ae
Certificate serial:       019E20911E21AD162F0909A58699CE6A0EFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rvy2RB1w0usQ12M9pzGaPT_5d64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft
Manifest number:          097E
Signing time:             Wed 13 May 2026 09:00:41 +0000
Manifest this update:     Wed 13 May 2026 09:00:41 +0000
Manifest next update:     Thu 14 May 2026 09:00:41 +0000
Files and hashes:         1: rvy2RB1w0usQ12M9pzGaPT_5d64.crl (hash: qpv6ebNB5Cwh7omv65VibdfW5c2RPncCzu6PzAbgYOA=)
                          2: v-7IGItX2vWlgw_6szj3vzKNbn4.roa (hash: ziLYn2+2odOsQ2gscP24iW1EJ2eDq8mEnY99Q2B6Rfo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rvy2RB1w0usQ12M9pzGaPT_5d64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:91:1e:21:ad:16:2f:09:09:a5:86:99:ce:6a:0e:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aefcb6441d70d2eb10d7633da7319a3d3ff977ae
        Validity
            Not Before: May 13 09:00:41 2026 GMT
            Not After : May 14 09:00:41 2026 GMT
        Subject: CN=08bd7ad1a9e60adb222847bb0a44ebff9af65fd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e5:f1:7e:2c:f3:16:bd:cb:15:92:d5:90:6e:
                    11:29:5d:eb:69:31:06:ba:7c:a4:77:1d:b8:ca:ea:
                    89:79:e0:45:de:e3:01:31:00:b2:06:54:48:69:a9:
                    4c:cf:cd:d5:6a:46:d3:4e:2f:72:b2:ec:58:b4:a6:
                    1f:0c:5a:67:8d:0f:e8:3d:aa:c1:7b:97:5c:82:9e:
                    b7:ad:1b:c1:f2:61:d6:93:43:17:b9:44:cf:3f:1e:
                    dd:23:2f:03:2d:7d:73:7c:41:d4:1f:25:6e:6c:82:
                    ba:2a:33:06:0a:7e:f3:dd:aa:0f:17:8c:76:cc:7f:
                    44:1f:94:2d:2c:37:b7:2f:4f:0d:f7:39:68:35:f2:
                    83:da:dc:21:11:a7:ed:97:18:ce:50:e9:c5:34:43:
                    d2:25:0d:98:54:08:b1:65:3a:8b:c0:4c:c5:d0:af:
                    80:3c:26:a2:f7:4e:20:c2:48:58:bb:2c:6d:3f:e4:
                    1d:96:e9:74:12:34:ae:88:03:de:c1:c7:71:a0:d0:
                    4d:7b:20:1c:8e:52:4d:60:8f:82:72:25:39:dd:c2:
                    07:15:3f:a2:6d:bc:a9:f5:fd:7a:47:fc:e8:5f:8f:
                    e0:e6:73:5a:cc:47:e5:09:b0:4a:9b:d0:4e:af:bb:
                    3c:aa:e0:08:cb:62:98:6d:3c:54:7a:9d:5c:2f:2d:
                    61:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:BD:7A:D1:A9:E6:0A:DB:22:28:47:BB:0A:44:EB:FF:9A:F6:5F:D9
            X509v3 Authority Key Identifier:
                keyid:AE:FC:B6:44:1D:70:D2:EB:10:D7:63:3D:A7:31:9A:3D:3F:F9:77:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvy2RB1w0usQ12M9pzGaPT_5d64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:76:87:5d:a6:3c:5e:5e:2c:b8:e0:8f:0c:8e:03:00:23:fd:
         00:9e:51:f3:70:e7:d9:e7:51:dd:01:85:d2:19:b2:6d:30:ed:
         b2:5e:f6:59:71:46:94:64:dc:46:39:7a:a1:ff:c9:0c:e5:eb:
         11:c5:3f:0b:1a:99:29:a2:3f:20:74:5a:68:d5:56:7b:75:8e:
         d5:f6:31:63:29:ba:b1:af:22:7b:cf:10:ff:43:47:3c:fc:0f:
         67:6d:ab:c8:a2:14:4f:e9:6a:28:9f:f5:1b:92:7f:8b:b6:62:
         4d:40:ea:bf:60:49:bd:0f:be:95:72:e1:24:9c:7a:e4:ea:bd:
         8d:41:e8:d9:de:a5:8a:d1:5f:62:a4:c2:74:80:1e:ab:b1:b3:
         08:8a:3d:aa:fc:87:dd:16:a5:9f:57:54:eb:78:8a:a9:22:b0:
         67:0f:75:df:3c:3a:14:ed:55:9d:64:b5:74:4d:ae:b2:02:a2:
         ea:6e:e6:e5:8c:e3:ca:6d:6e:9c:cc:3d:b0:48:bf:ed:01:4e:
         79:4a:25:b3:d9:31:8d:1a:0a:3f:50:83:e5:83:85:7f:5e:07:
         77:38:42:7b:ea:31:2f:56:11:62:e1:ce:0c:68:20:f3:24:c4:
         3e:4a:55:56:9b:1b:43:6f:5b:98:e1:2e:51:49:29:f6:66:0b:
         9c:46:aa:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:39:23 2026 by rpki-client