Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.mft
File:                     GiynpYOySXw2fp6G3rect6c3Wkc.mft (raw, json)
Hash identifier:          xmi5VV2KwN3ZqFUbLAOezhrBP2E3F11O5tdECWvmTnM=
Subject key identifier:   B3:D7:3E:B0:A7:75:D4:F0:70:C4:26:68:E0:9C:0E:03:3E:AE:62:B3
Authority key identifier: 1A:2C:A7:A5:83:B2:49:7C:36:7E:9E:86:DE:B7:9C:B7:A7:37:5A:47
Certificate issuer:       /CN=1a2ca7a583b2497c367e9e86deb79cb7a7375a47
Certificate serial:       019E1E34EDDD89D3B8058770956100ED10DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.mft
Manifest number:          0F9E
Signing time:             Tue 12 May 2026 22:00:45 +0000
Manifest this update:     Tue 12 May 2026 22:00:45 +0000
Manifest next update:     Wed 13 May 2026 22:00:45 +0000
Files and hashes:         1: 3J-wyv1f8o7fdt2XdhBrva-Zcak.roa (hash: 86oH9Lq+HOUCzXcyWvwU28zWZtGugPgDR4jwNJr9aV8=)
                          2: DeAgFNfIORWnBfFq7D10Rej2HAU.roa (hash: uoLF8CbxN4s+EXeDSpUnzOmVweCKadVLU7SCOTJVvmI=)
                          3: GiynpYOySXw2fp6G3rect6c3Wkc.crl (hash: rrf/3KinjvhL2aA1MVh4DNJL3ioZJ7+UMe3csHBNHuI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:34:ed:dd:89:d3:b8:05:87:70:95:61:00:ed:10:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a2ca7a583b2497c367e9e86deb79cb7a7375a47
        Validity
            Not Before: May 12 22:00:45 2026 GMT
            Not After : May 13 22:00:45 2026 GMT
        Subject: CN=b3d73eb0a775d4f070c42668e09c0e033eae62b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ea:21:af:a0:ca:82:21:c0:cc:a4:4a:ca:d5:
                    6a:6f:3c:d1:52:6a:1a:ef:bf:0b:11:f3:a8:48:03:
                    44:c4:c4:38:b6:83:55:ba:ca:74:5f:cd:52:99:3e:
                    0b:f9:d3:05:23:84:98:43:d3:05:c8:a1:86:0a:29:
                    ae:e6:cb:e4:d9:3f:1a:3a:f1:33:d9:bc:7b:5a:53:
                    28:ab:95:50:54:63:61:eb:fd:c4:c5:a0:06:5f:93:
                    a6:e2:cb:c4:9f:e1:ad:fa:75:5d:25:40:f0:41:9c:
                    43:b6:a5:ea:aa:97:ec:3b:db:9f:24:50:63:e2:46:
                    a5:e8:cc:4a:41:5c:ac:57:18:20:33:28:5e:ba:c5:
                    6b:e9:c4:4d:23:0d:72:53:72:ac:8b:e5:71:91:31:
                    36:c4:b8:3f:55:2e:d0:08:ef:00:01:21:28:27:62:
                    06:4a:0b:0d:be:1b:1c:83:6c:e4:8a:9f:b5:11:52:
                    01:42:a6:d7:c6:af:75:a6:44:5b:04:a7:df:30:b9:
                    61:c9:95:e6:7a:30:ad:e8:8a:91:fc:ba:33:c1:3a:
                    f9:49:a6:01:be:88:41:88:1b:2d:78:84:83:8b:d4:
                    8d:56:c7:58:d4:f7:3d:ab:b9:2d:04:be:2c:24:e4:
                    aa:21:a2:4a:49:18:77:8a:cb:c5:c8:90:ce:bb:e9:
                    7f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D7:3E:B0:A7:75:D4:F0:70:C4:26:68:E0:9C:0E:03:3E:AE:62:B3
            X509v3 Authority Key Identifier:
                keyid:1A:2C:A7:A5:83:B2:49:7C:36:7E:9E:86:DE:B7:9C:B7:A7:37:5A:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:9b:13:da:e3:58:4f:8b:d9:fc:7e:00:e7:c3:f4:1f:ca:59:
         12:7e:1c:6f:e1:de:18:aa:22:e6:51:e3:7f:da:8f:6c:77:36:
         9d:4c:91:c4:aa:5c:fe:83:4f:d6:4f:42:5a:7a:54:f8:51:e3:
         33:15:c6:00:98:72:9c:83:3f:a5:7b:e4:a5:b0:89:89:6c:d3:
         43:90:63:7f:fe:21:95:95:ca:73:55:79:20:1a:35:e7:db:0d:
         ad:e7:b7:b1:95:07:73:a5:fd:f2:33:c0:f4:2f:17:33:21:db:
         19:f5:31:aa:ad:95:f9:8a:02:dc:5a:18:8e:f6:7f:ea:74:43:
         f2:3c:b3:0a:31:cb:ec:cd:ec:8e:95:de:e8:67:b0:37:35:c6:
         49:0c:4e:d3:15:8b:44:39:4e:50:3b:de:35:60:54:e8:a9:bc:
         0b:43:f1:45:be:f3:30:85:67:78:4d:36:5c:fd:92:79:98:af:
         6d:5a:af:c8:9c:da:ee:53:df:28:81:97:0e:5b:01:17:ca:85:
         29:aa:2a:cf:55:88:76:71:08:cd:0a:7f:29:54:3f:6b:2b:5d:
         64:39:07:47:49:7c:4a:26:4c:2e:94:e0:bf:09:23:85:6c:03:
         f5:f2:4c:77:e0:f5:2e:ac:b9:30:35:f6:57:a0:13:bf:9a:9f:
         2e:24:42:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:44:03 2026 by rpki-client