Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft
File:                     B8n9CgjdBL-Yalvahugx34BI8q4.mft (raw, json)
Hash identifier:          z2u+caxEl5RswCZxN8CGRlGT/oD6NcEXeickXhCvIKc=
Subject key identifier:   19:52:1E:06:D1:A8:78:53:0E:E1:0B:A8:23:2E:B0:59:7B:71:2F:94
Authority key identifier: 07:C9:FD:0A:08:DD:04:BF:98:6A:5B:DA:86:E8:31:DF:80:48:F2:AE
Certificate issuer:       /CN=07c9fd0a08dd04bf986a5bda86e831df8048f2ae
Certificate serial:       019E1F116CC0A37637AF0E1D90736E5AACBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B8n9CgjdBL-Yalvahugx34BI8q4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft
Manifest number:          1908
Signing time:             Wed 13 May 2026 02:01:36 +0000
Manifest this update:     Wed 13 May 2026 02:01:36 +0000
Manifest next update:     Thu 14 May 2026 02:01:36 +0000
Files and hashes:         1: 1-xRGaCyxpLa6u8HMSUq_h770gD0.roa (hash: 8uRfxkLyO0BWin82mTedgqRyj+vQcxTq42ILakeqyaU=)
                          2: B8n9CgjdBL-Yalvahugx34BI8q4.crl (hash: V1NNT4us8FxgL/bFQhWoGubTaJYilfi9u9DKgiPn/ew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B8n9CgjdBL-Yalvahugx34BI8q4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:6c:c0:a3:76:37:af:0e:1d:90:73:6e:5a:ac:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07c9fd0a08dd04bf986a5bda86e831df8048f2ae
        Validity
            Not Before: May 13 02:01:36 2026 GMT
            Not After : May 14 02:01:36 2026 GMT
        Subject: CN=19521e06d1a878530ee10ba8232eb0597b712f94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:64:8e:78:49:56:f6:a8:78:5b:b2:6c:a9:61:
                    90:ea:19:7e:51:e8:fc:76:a3:fc:ff:4d:55:ae:b9:
                    a8:bb:c2:56:11:c6:1e:30:5e:2a:b4:75:12:9b:62:
                    50:ef:1f:33:52:f2:b7:41:31:78:b1:f6:8e:87:e7:
                    7d:e2:00:06:ac:fe:9c:5b:67:de:4f:49:87:b2:e9:
                    e3:ce:b7:45:fc:3b:b4:14:28:72:0e:d8:db:2b:21:
                    a2:70:74:d8:f1:1f:12:c5:10:f6:3c:c8:2f:6a:2b:
                    f9:58:16:06:64:b6:aa:f0:cc:53:15:3a:c8:4c:52:
                    35:4b:55:4c:1b:bf:3a:73:39:68:b1:d8:23:16:8c:
                    b5:ea:e6:33:aa:b2:81:f5:b2:e8:58:68:42:87:8f:
                    46:1b:a4:d0:bf:fb:bc:9a:a6:28:f0:d3:fa:7d:e9:
                    73:13:89:75:e6:3d:8b:06:54:d7:ef:43:7d:fd:9d:
                    19:e4:e4:6a:06:a0:90:d3:8b:31:12:e6:60:08:ff:
                    50:e1:81:37:5e:87:7b:84:17:d8:c5:c5:64:94:e1:
                    c8:80:76:19:3e:42:59:88:e8:8d:6b:c4:ba:ad:82:
                    93:17:52:f2:eb:09:88:56:17:2c:c0:b7:a4:76:3c:
                    48:c4:07:ea:8a:39:aa:b0:d0:c2:46:02:32:4c:58:
                    c3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:52:1E:06:D1:A8:78:53:0E:E1:0B:A8:23:2E:B0:59:7B:71:2F:94
            X509v3 Authority Key Identifier:
                keyid:07:C9:FD:0A:08:DD:04:BF:98:6A:5B:DA:86:E8:31:DF:80:48:F2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8n9CgjdBL-Yalvahugx34BI8q4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:f0:49:4c:b8:5f:6a:e3:cb:6a:77:ea:e3:b6:8f:50:55:fd:
         b6:80:68:67:75:40:15:13:1b:0c:20:ae:e9:3f:33:7c:ae:50:
         9f:78:39:75:e4:28:f4:f3:2c:a9:47:e7:29:fb:c9:f1:62:44:
         69:47:a2:2b:09:78:99:54:b6:55:b5:7a:22:e3:0a:9b:ed:37:
         be:46:81:bf:94:80:ce:c7:33:27:46:6c:01:ac:13:2a:37:a4:
         e2:c1:47:83:f0:fb:1a:37:24:f9:f9:ad:ff:6f:12:e3:07:47:
         1d:1a:35:5f:fa:72:e0:9b:f5:0b:e2:2f:4d:ed:a7:6c:63:ae:
         0a:0a:2d:49:35:e9:d7:30:46:68:c7:92:7f:1e:00:81:6a:32:
         0e:33:8c:aa:85:88:d2:59:2c:c7:d2:f6:d9:cf:39:a0:a6:49:
         b5:2c:dd:29:38:c4:dc:ad:56:b6:f7:5f:8b:4c:44:e3:36:68:
         55:90:07:c0:ae:1e:62:d1:f3:a0:03:49:95:15:bb:b2:ba:c6:
         a7:c3:a2:81:e1:fc:55:93:d2:b7:74:c3:ea:cb:6d:83:8a:bb:
         8b:73:21:e2:c2:19:ce:da:05:27:09:78:99:29:dd:49:c2:0d:
         e3:9a:cd:90:ad:d0:62:50:1e:e6:a1:5a:12:28:6f:ac:1c:76:
         25:0b:06:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:33:13 2026 by rpki-client