Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
File:                     cIR_giGJfW6VLobqLDOauqzBMfU.mft (raw, json)
Hash identifier:          NZ6u0sP62o1/dOZpui15exFmbBhJpg4nRbbWnj9uvxs=
Subject key identifier:   54:C5:DC:57:D8:35:70:3E:6A:BB:28:DB:82:28:D7:70:F4:EE:AD:8F
Authority key identifier: 70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5
Certificate issuer:       /CN=70847f8221897d6e952e86ea2c339abaacc131f5
Certificate serial:       019E1F7E7AAACC1F44C30AC80BA73A12CF6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
Manifest number:          1211
Signing time:             Wed 13 May 2026 04:00:42 +0000
Manifest this update:     Wed 13 May 2026 04:00:42 +0000
Manifest next update:     Thu 14 May 2026 04:00:42 +0000
Files and hashes:         1: DgHkmROyC3MxqqPYkuTyDoxtyqw.roa (hash: q4huZNQpi2E4AXxex6IplXT0SZt2O1CYv71WiSI/rLI=)
                          2: Ns__ZZIiPb9TMl7NZ4zyQ0KeLeY.roa (hash: Jq4DCJzMOXzkiYCzhRhQfITbIQrgdmZME0+wIilmKI0=)
                          3: PWseQmzX6iLF_AKjxIoDYYEV-zs.roa (hash: 5qw7OHsXZ5/YdO0FCT2hsJ4vIKg9r9qwZPsnMuFb2j4=)
                          4: W4ezimhOK28HTElZ-mL_VlHTTYY.roa (hash: aW+HAsRTpiBjWIXXUsRRtCgHyvy44DkCN4CGgiTo7pw=)
                          5: cIR_giGJfW6VLobqLDOauqzBMfU.crl (hash: ivBf0tZquMkYy7FvW0tAKjPbEW/WSztV+neoNcXyHmE=)
                          6: dvl1qc6F1GgOMamGgtlUjjsOAmg.roa (hash: HqSbVOynVSnxKlocjrN8BkkCsHJA79UECwHRf5zem3E=)
                          7: lPV_USFOSo5QlpwzyG9GZkglfYI.roa (hash: F2MPkEsQMavl9IFac2UMwUB3IRMDo28oAPxrO4XQVFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7e:7a:aa:cc:1f:44:c3:0a:c8:0b:a7:3a:12:cf:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70847f8221897d6e952e86ea2c339abaacc131f5
        Validity
            Not Before: May 13 04:00:42 2026 GMT
            Not After : May 14 04:00:42 2026 GMT
        Subject: CN=54c5dc57d835703e6abb28db8228d770f4eead8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:45:d9:15:4f:16:d2:ad:d1:95:ab:3a:1b:6b:
                    d5:b9:cf:98:58:96:ce:9b:39:b2:57:da:21:32:dc:
                    8e:7b:7c:6d:31:f7:0d:69:ac:f6:a2:29:ea:50:c0:
                    f1:45:49:89:fa:21:17:25:54:e1:a0:4c:30:e2:b3:
                    61:ef:76:4a:4f:20:14:d1:e5:fe:b1:c7:67:e4:fe:
                    b1:d4:ed:ea:9b:65:34:32:a8:4b:9d:db:68:26:09:
                    34:8f:b0:04:c6:51:a1:a1:35:a1:3d:5c:d9:ba:37:
                    c2:fe:f9:ff:24:3c:9f:e8:fb:df:0a:1f:63:c5:b1:
                    eb:87:a3:2c:fa:4a:90:62:fd:a2:08:db:15:78:b1:
                    59:35:bf:3c:3e:66:5e:61:be:68:cb:7b:ba:38:56:
                    21:55:ae:5e:ad:a2:aa:90:69:eb:1b:1b:17:fb:24:
                    04:9d:07:ad:6c:4e:68:4e:1f:0c:c5:6e:3b:f5:97:
                    e4:f0:55:0f:0f:f9:16:bc:17:ea:8e:c9:1b:6d:47:
                    d6:1d:17:c2:db:a9:fc:64:b0:1e:95:d2:ff:fb:94:
                    ef:a8:96:60:6b:2d:8b:80:17:85:d7:32:5f:ad:db:
                    39:a4:ae:61:8c:2e:78:ba:2d:21:c9:0b:70:dc:cc:
                    d6:b2:a2:e7:7c:fb:81:38:80:a9:35:a0:c1:69:ab:
                    92:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C5:DC:57:D8:35:70:3E:6A:BB:28:DB:82:28:D7:70:F4:EE:AD:8F
            X509v3 Authority Key Identifier:
                keyid:70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:62:d0:67:71:9e:39:7b:70:c3:a2:04:ed:71:4c:d1:b7:fb:
         d3:7b:d7:76:9c:f9:d2:3b:d2:51:fe:1a:c5:5e:4e:5f:09:5d:
         a2:86:9e:a6:fc:9a:ea:7c:93:9c:8e:d5:f2:e4:4c:9f:e0:0d:
         4a:60:41:97:63:31:a0:b0:6f:c9:f7:dd:bd:5c:96:b4:a0:fe:
         1f:ef:a4:ec:d5:8e:fe:1a:b6:29:4c:d2:88:b0:4e:c1:6c:5a:
         53:37:9c:14:08:0a:f3:51:96:2d:66:d7:96:be:cb:b6:bd:90:
         07:11:17:79:a6:56:3d:59:d4:ae:62:ce:e4:38:d6:15:5f:76:
         d9:00:d7:13:f0:16:87:b3:ee:e3:fb:22:09:fa:e2:79:41:e9:
         c4:1d:ff:f0:a0:ab:3f:c2:29:5d:19:5f:6d:d7:9a:58:c8:e7:
         d8:c0:cf:1a:f3:21:db:7d:96:2e:ae:ee:a7:6c:7e:42:7f:95:
         ff:e2:52:24:5e:d9:18:7b:0a:e4:38:48:41:17:11:cc:52:b1:
         e3:60:ec:10:ff:26:4b:bc:d1:74:f4:b7:b6:e7:8d:f3:8c:dc:
         88:50:16:e7:fd:ba:cb:05:c2:2d:05:ae:f8:50:f0:fb:12:9d:
         5f:73:64:ca:a3:71:4a:ee:d2:41:90:bc:ad:05:d0:aa:53:76:
         ef:23:27:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ffnqqzB9EwwrIC6c6Es9uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwODQ3ZjgyMjE4OTdkNmU5NTJlODZlYTJjMzM5YWJhYWNj
MTMxZjUwHhcNMjYwNTEzMDQwMDQyWhcNMjYwNTE0MDQwMDQyWjAzMTEwLwYDVQQD
Eyg1NGM1ZGM1N2Q4MzU3MDNlNmFiYjI4ZGI4MjI4ZDc3MGY0ZWVhZDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EXZFU8W0q3Rlas6G2vVuc+YWJbO
mzmyV9ohMtyOe3xtMfcNaaz2oinqUMDxRUmJ+iEXJVThoEww4rNh73ZKTyAU0eX+
scdn5P6x1O3qm2U0MqhLndtoJgk0j7AExlGhoTWhPVzZujfC/vn/JDyf6PvfCh9j
xbHrh6Ms+kqQYv2iCNsVeLFZNb88PmZeYb5oy3u6OFYhVa5eraKqkGnrGxsX+yQE
nQetbE5oTh8MxW479Zfk8FUPD/kWvBfqjskbbUfWHRfC26n8ZLAeldL/+5TvqJZg
ay2LgBeF1zJfrds5pK5hjC54ui0hyQtw3MzWsqLnfPuBOICpNaDBaauS6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFTF3FfYNXA+arso24Io13D07q2PMB8GA1UdIwQY
MBaAFHCEf4IhiX1ulS6G6iwzmrqswTH1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0lSX2dpR0pmVzZWTG9icUxET2F1cXpCTWZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy83MDZjMDMtN2QzNS00OTEzLThhMTgt
NmU4Nzg0YTdhZDA5LzEvY0lSX2dpR0pmVzZWTG9icUxET2F1cXpCTWZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy83MDZjMDMtN2QzNS00OTEzLThhMTgtNmU4Nzg0YTdhZDA5
LzEvY0lSX2dpR0pmVzZWTG9icUxET2F1cXpCTWZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApmLQZ3Ge
OXtww6IE7XFM0bf703vXdpz50jvSUf4axV5OXwldooaepvya6nyTnI7V8uRMn+AN
SmBBl2MxoLBvyffdvVyWtKD+H++k7NWO/hq2KUzSiLBOwWxaUzecFAgK81GWLWbX
lr7Ltr2QBxEXeaZWPVnUrmLO5DjWFV922QDXE/AWh7Pu4/siCfrieUHpxB3/8KCr
P8IpXRlfbdeaWMjn2MDPGvMh232WLq7up2x+Qn+V/+JSJF7ZGHsK5DhIQRcRzFKx
42DsEP8mS7zRdPS3tueN84zciFAW5/26ywXCLQWu+FDw+xKdX3NkyqNxSu7SQZC8
rQXQqlN27yMnYQ==
-----END CERTIFICATE-----
Generated at Wed May 13 09:22:38 2026 by rpki-client