Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
File:                     CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft (raw, json)
Hash identifier:          O1oNQtJsTEJwb7rCnA5iMNBJDK8sW6MrcxQnGFzWcNw=
Subject key identifier:   13:6E:1F:6B:2C:18:E9:53:BA:67:51:F6:E7:9A:26:2B:5D:98:A3:8E
Authority key identifier: 0A:23:E2:F0:B0:64:08:7F:D8:4F:04:8B:1F:A9:99:70:23:D5:99:E1
Certificate issuer:       /CN=0a23e2f0b064087fd84f048b1fa9997023d599e1
Certificate serial:       019E1CEB70F145036A2046B32EF476A08591
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
Manifest number:          1905
Signing time:             Tue 12 May 2026 16:00:52 +0000
Manifest this update:     Tue 12 May 2026 16:00:52 +0000
Manifest next update:     Wed 13 May 2026 16:00:52 +0000
Files and hashes:         1: CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl (hash: 4zZHXGoTlJqZIeXw0g0HNXRsquGTpe5P+vl1W6chuZI=)
                          2: jr3Qwfg8Z9qypQ7083QLXtA-1bs.roa (hash: BStTXqRwyFgu7NL9U4UDu4snXF66XXGZwBXM2f9Q63k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:70:f1:45:03:6a:20:46:b3:2e:f4:76:a0:85:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a23e2f0b064087fd84f048b1fa9997023d599e1
        Validity
            Not Before: May 12 16:00:52 2026 GMT
            Not After : May 13 16:00:52 2026 GMT
        Subject: CN=136e1f6b2c18e953ba6751f6e79a262b5d98a38e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b4:df:ee:c5:cf:61:0b:8a:7e:ce:2c:f7:cf:
                    9f:b3:5e:43:ce:97:6b:f9:64:c4:68:2f:71:be:a8:
                    0f:d8:49:25:f3:52:86:bd:39:ed:5a:f5:f2:9b:a4:
                    5c:ab:42:99:f8:af:49:7b:d6:45:c2:9a:55:90:d3:
                    c0:a4:0f:77:78:8d:57:3a:70:d2:c8:f7:16:83:31:
                    e6:7f:51:97:f3:b8:06:93:c7:ad:68:64:fe:97:ba:
                    83:af:99:31:27:fa:65:b6:cb:57:74:6b:b5:18:3b:
                    34:4b:4f:84:43:06:ff:52:fd:5d:f6:7c:31:44:99:
                    9d:18:d5:67:d9:6a:b7:bd:d6:59:e2:5d:1b:a8:92:
                    82:02:0c:4a:98:ed:c5:94:74:41:b0:37:79:59:09:
                    b1:f5:f2:4f:a5:90:30:48:34:ac:88:97:7f:56:b4:
                    63:22:b5:b6:28:40:d3:7f:2d:5b:95:bb:29:a8:2d:
                    dc:f2:23:e9:14:af:ac:ca:50:db:f2:6b:d0:0c:f9:
                    48:7f:69:50:6d:2f:32:8f:19:87:4b:71:a3:be:44:
                    a7:86:3a:7d:3e:f5:34:83:98:d8:ae:eb:84:07:ec:
                    15:2a:ed:57:69:18:e8:b0:32:73:57:a1:b5:75:30:
                    14:48:e9:d9:dc:55:1f:1e:62:ef:dc:65:f1:47:7c:
                    5d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:6E:1F:6B:2C:18:E9:53:BA:67:51:F6:E7:9A:26:2B:5D:98:A3:8E
            X509v3 Authority Key Identifier:
                keyid:0A:23:E2:F0:B0:64:08:7F:D8:4F:04:8B:1F:A9:99:70:23:D5:99:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:05:cc:30:cf:1d:10:41:9e:75:ed:e7:63:d2:57:0c:e9:d6:
         f7:d4:9f:b5:b2:70:55:8f:33:b4:ad:a0:e9:61:2c:af:80:f8:
         29:a2:b7:43:46:88:28:a4:4b:86:49:b9:7a:f2:c2:37:23:2c:
         b6:5e:ea:d1:ed:c6:d5:61:50:44:7b:17:54:84:f6:3e:7e:49:
         e4:7f:69:d3:33:d4:41:81:48:91:c1:5b:95:de:a3:66:3b:fa:
         e4:3a:c7:c9:5a:39:b5:96:8b:48:0d:d7:65:52:8d:dc:3d:06:
         2d:6a:c8:22:9a:9e:f5:0d:cd:3b:11:d7:1a:27:2b:8c:47:ef:
         0d:d2:5c:81:13:9f:cd:4f:c3:db:d0:8e:c1:a9:a3:55:4f:93:
         a9:ef:7f:6a:d5:7d:d0:01:77:7a:9b:7e:27:73:7d:fe:3f:c5:
         b8:98:3e:8f:f2:07:53:36:d3:ec:35:62:ac:7d:b6:56:5b:84:
         aa:30:96:71:0c:59:72:82:76:18:ea:1a:c4:08:b4:2b:b0:fd:
         8f:05:8e:f7:23:6a:38:95:08:b2:35:44:fa:9e:5e:5d:ef:5c:
         ac:74:e5:2f:15:61:6d:52:45:8c:5e:8d:4e:af:d2:30:70:ac:
         12:94:69:43:e8:a2:1d:53:82:ea:9f:74:88:37:9b:ad:d5:16:
         10:85:5c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:16:22 2026 by rpki-client