Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
File:                     ISuozPNF7vDc99AVSSCBjzGcJfg.mft (raw, json)
Hash identifier:          h/rrH9WYe9iFOzUDztrEeM+EPzn9u1fhA3hfuUPThjs=
Subject key identifier:   82:20:2B:FC:DC:14:A1:8C:8F:6E:19:45:75:56:B3:CA:CE:BF:68:0E
Authority key identifier: 21:2B:A8:CC:F3:45:EE:F0:DC:F7:D0:15:49:20:81:8F:31:9C:25:F8
Certificate issuer:       /CN=212ba8ccf345eef0dcf7d0154920818f319c25f8
Certificate serial:       019E1D59A860868316D19D262053FDDEE7FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
Manifest number:          01EC
Signing time:             Tue 12 May 2026 18:01:15 +0000
Manifest this update:     Tue 12 May 2026 18:01:15 +0000
Manifest next update:     Wed 13 May 2026 18:01:15 +0000
Files and hashes:         1: 3JJvvML1uYMrR3S7M7bmAWXvgaI.roa (hash: +mjeAVNswdVhhENYtIQJsSCjLPCHzj5tvLuQ8dLELJA=)
                          2: AJXkjzoozD2UZ-UGtOvfGHct3rI.roa (hash: TaHdT7ku0QOHwdGlIBgSwO87Zn4JRxw7kaBQIz+nitM=)
                          3: ISuozPNF7vDc99AVSSCBjzGcJfg.crl (hash: XCUx8rZ/FXuG/yUF+MCa1Gku9WO42oGjPSo+h4sSOyI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 18:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:a8:60:86:83:16:d1:9d:26:20:53:fd:de:e7:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=212ba8ccf345eef0dcf7d0154920818f319c25f8
        Validity
            Not Before: May 12 18:01:15 2026 GMT
            Not After : May 13 18:01:15 2026 GMT
        Subject: CN=82202bfcdc14a18c8f6e19457556b3cacebf680e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4f:31:ab:d5:40:a7:b0:a3:08:7d:26:97:04:
                    83:b9:75:3e:b0:85:cc:6e:3a:b1:28:28:3b:3d:08:
                    12:44:d7:f2:49:bd:cb:17:31:59:b1:db:0c:d4:33:
                    81:93:01:a1:3c:e6:94:c6:68:28:24:32:0d:59:30:
                    0b:52:9b:70:b7:ec:c6:86:3f:cb:0d:7a:69:b3:99:
                    fd:a8:cc:6f:75:bf:91:b8:1b:78:b1:84:9e:65:28:
                    38:dc:84:18:f0:7d:11:96:4f:20:d9:f6:f7:7d:ac:
                    c6:86:88:8c:1c:d1:e9:15:8c:8d:9e:52:17:89:fe:
                    99:94:2d:cd:5b:7e:88:ee:95:40:fa:72:f2:37:2c:
                    e1:6c:d4:ef:5b:50:e6:1c:70:cb:c8:a2:a8:de:39:
                    ee:e2:89:0f:a4:14:cf:77:80:18:25:9f:16:a4:8a:
                    b7:6a:26:87:45:cf:ca:45:7f:16:d6:8e:69:bc:1f:
                    44:7a:95:f5:77:56:93:84:b2:df:cb:c5:7d:41:4a:
                    e4:6a:59:7b:0a:b4:f6:da:16:9a:97:91:7f:07:0f:
                    04:6f:72:46:d9:70:e1:cd:5f:9f:96:7a:34:d1:5b:
                    52:da:2e:31:65:04:36:55:61:c7:49:c9:8a:c7:a0:
                    a1:6f:46:22:f1:dd:e5:64:25:25:7d:37:57:cd:45:
                    20:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:20:2B:FC:DC:14:A1:8C:8F:6E:19:45:75:56:B3:CA:CE:BF:68:0E
            X509v3 Authority Key Identifier:
                keyid:21:2B:A8:CC:F3:45:EE:F0:DC:F7:D0:15:49:20:81:8F:31:9C:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:bd:bb:a8:2b:37:1a:ce:4d:2c:6d:5a:b7:e7:42:40:00:57:
         8f:eb:d3:2b:50:40:09:2f:8e:4a:55:07:d2:23:ba:57:44:a0:
         e7:bb:27:37:26:f3:f3:ef:d2:ff:c1:74:22:a3:91:8f:e1:1b:
         50:37:85:0e:14:00:8d:58:79:1b:72:f5:c7:84:e9:2f:b7:34:
         f1:ad:35:53:fc:40:8d:2d:e0:fe:b4:0a:df:e1:75:c0:cd:9c:
         a4:19:5a:8e:67:ba:35:7a:47:03:e6:fd:b4:07:2e:dd:1a:a4:
         2d:a1:e0:16:2c:83:31:06:e7:86:91:82:6a:86:78:80:ee:5b:
         ab:b0:77:b3:1e:30:67:8b:d0:e1:89:76:89:18:cd:aa:30:25:
         ed:b6:d4:8a:8f:06:b7:84:8e:6f:5c:1e:50:46:e1:56:a3:63:
         4a:db:fe:2b:e5:a0:4f:60:f7:a0:53:b0:c3:ab:01:4b:37:4a:
         73:5b:fa:73:3e:c9:8f:61:27:11:94:ca:1d:ac:54:6b:b1:2d:
         2d:76:77:66:8f:da:17:56:58:47:3d:6e:12:18:36:dd:57:9b:
         2d:b0:65:9e:ff:4a:df:7c:59:32:4c:b1:bf:54:50:07:6e:ab:
         07:20:2d:dd:bf:46:e8:65:af:96:99:4a:5c:0c:35:a1:39:4a:
         66:87:4b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:29:37 2026 by rpki-client