Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft
File:                     ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft (raw, json)
Hash identifier:          DuNJ9WNNOO3DcbzW98ejxBpAZoMUtrPOo4ZN/cDiitU=
Subject key identifier:   CF:91:A0:05:66:30:BF:6D:FA:6E:04:EB:00:2A:9A:A3:6B:3B:BD:A6
Authority key identifier: 00:32:53:4E:8D:56:0D:73:55:3C:63:2B:BA:10:34:4A:7C:81:66:14
Certificate issuer:       /CN=0032534e8d560d73553c632bba10344a7c816614
Certificate serial:       019E1DFDEBC8D79BAA66C4D05B738BFDFCFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft
Manifest number:          16FE
Signing time:             Tue 12 May 2026 21:00:40 +0000
Manifest this update:     Tue 12 May 2026 21:00:40 +0000
Manifest next update:     Wed 13 May 2026 21:00:40 +0000
Files and hashes:         1: 8gDgcDeShfBdliF1DBTffvxw12U.roa (hash: Fz6nbI88uHxwSxo85BK5DCibUg4PuN/OzYci0coXooc=)
                          2: ADJTTo1WDXNVPGMruhA0SnyBZhQ.crl (hash: j9L+JUOjChRcspZ8iG9ICL50Yk3TuLCcVnGEq4ILtz8=)
                          3: jCaGFWRG0k_cfmlAxYZcjUIw_Yo.roa (hash: qpdto+41ybuG4juygcEcToReJEmG6ghtzKbjR0IgkSk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fd:eb:c8:d7:9b:aa:66:c4:d0:5b:73:8b:fd:fc:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0032534e8d560d73553c632bba10344a7c816614
        Validity
            Not Before: May 12 21:00:40 2026 GMT
            Not After : May 13 21:00:40 2026 GMT
        Subject: CN=cf91a0056630bf6dfa6e04eb002a9aa36b3bbda6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bd:5b:65:e8:f3:64:fc:55:ca:8a:74:62:c9:
                    a5:46:b8:f1:29:bb:9a:6e:95:e1:3d:2d:b7:42:73:
                    a3:13:b9:e1:28:5c:39:a9:f6:40:d2:8b:fa:d7:f7:
                    18:ca:c7:9d:77:54:7a:7a:d3:2b:d9:46:7d:c4:7a:
                    88:ef:f7:1c:89:59:2e:c6:33:d4:99:35:95:90:f4:
                    79:a1:89:4a:3b:72:5b:5f:98:01:2a:69:aa:27:d6:
                    16:60:6b:13:d2:07:b3:9e:7a:b5:12:ab:3e:fc:03:
                    77:00:c4:e5:9b:0a:99:91:05:9c:fb:30:6e:8b:01:
                    60:83:a2:57:5e:92:3b:e3:3f:c7:3c:cf:d2:19:f4:
                    cb:9b:87:3e:c4:0b:12:03:a4:e9:a1:80:74:68:66:
                    73:e4:75:c4:2b:1a:b0:09:88:8d:5e:d8:51:da:01:
                    47:f4:eb:2f:71:67:5e:40:bd:91:58:e4:d2:d8:0c:
                    67:d1:37:c2:53:a7:fe:b8:9e:5d:95:80:8e:0e:6d:
                    07:2a:60:5d:eb:99:98:1d:0b:2f:6d:a1:c5:0a:9f:
                    38:75:8c:c0:79:90:29:4e:b9:e4:ba:4a:85:2b:93:
                    b6:a1:68:cd:8b:bf:91:fb:cf:46:17:32:36:79:1f:
                    23:56:78:65:9b:1e:e3:ad:37:9e:85:02:ae:18:79:
                    2a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:91:A0:05:66:30:BF:6D:FA:6E:04:EB:00:2A:9A:A3:6B:3B:BD:A6
            X509v3 Authority Key Identifier:
                keyid:00:32:53:4E:8D:56:0D:73:55:3C:63:2B:BA:10:34:4A:7C:81:66:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:ab:e1:bc:ba:3d:63:bc:cb:37:5f:a6:b3:b1:5e:c5:ae:a3:
         26:70:11:9a:ff:13:07:fc:da:8b:3f:bc:00:74:c7:07:c2:37:
         a6:81:49:3e:a4:f3:8e:4f:c7:90:57:f8:7d:fa:20:c2:05:18:
         12:74:f5:66:44:27:df:ea:08:82:a2:ca:67:40:a5:6f:b0:ef:
         f2:b8:0b:35:c6:62:5f:8b:35:01:c0:84:5a:38:a0:f5:b5:ee:
         be:c7:05:f8:a9:c3:f9:96:37:3d:b3:19:83:b8:d6:72:cb:02:
         8e:af:28:e8:a3:5b:ef:e1:67:89:78:71:96:45:6a:6b:f6:d8:
         32:47:c9:6e:bf:6d:5e:d4:fd:3c:f8:bc:49:59:77:76:d7:c0:
         7a:b2:eb:d1:1b:3d:80:92:ba:d8:51:6d:d8:01:a5:a2:43:48:
         1e:4c:15:41:c8:df:30:67:5c:46:58:11:7e:ff:28:dc:c7:98:
         be:3d:4a:45:bf:f2:53:2c:92:e6:fd:6c:7a:f6:93:ff:c4:a6:
         a0:5d:af:25:37:bd:6d:2e:6f:08:f5:9e:f5:fb:2a:78:eb:80:
         0f:94:cc:a6:c7:9a:cb:f2:de:02:55:9a:65:8e:36:92:d2:9e:
         09:51:26:fc:9c:db:8e:3f:e3:f2:8e:00:0d:90:03:11:ed:11:
         60:35:f5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:01:43 2026 by rpki-client