Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
File:                     P98IRZEZlp1LnBf1qF6ScyxVF9E.mft (raw, json)
Hash identifier:          SejZyl2dzUf/eQCRlvqQ49P8J0bd4o974JQNF9kMLxk=
Subject key identifier:   6F:6F:66:9D:10:D7:57:B0:E3:2F:63:EA:F3:E4:BF:78:CE:79:41:79
Authority key identifier: 3F:DF:08:45:91:19:96:9D:4B:9C:17:F5:A8:5E:92:73:2C:55:17:D1
Certificate issuer:       /CN=3fdf08459119969d4b9c17f5a85e92732c5517d1
Certificate serial:       019E1F10CB45F43CCAFF61DEF2DD18AA3B51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
Manifest number:          18EE
Signing time:             Wed 13 May 2026 02:00:54 +0000
Manifest this update:     Wed 13 May 2026 02:00:54 +0000
Manifest next update:     Thu 14 May 2026 02:00:54 +0000
Files and hashes:         1: P98IRZEZlp1LnBf1qF6ScyxVF9E.crl (hash: A5Y411028k7JN+MVzMIgWVVU5PMZvB2qQAHO7AOmT/A=)
                          2: fH_gcKdAIP3uBlIddsjG_0qsj3E.roa (hash: L4lQAURP1ERgbM6Iiwl8JhlSrJdP31F20qdbJNDofes=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:cb:45:f4:3c:ca:ff:61:de:f2:dd:18:aa:3b:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fdf08459119969d4b9c17f5a85e92732c5517d1
        Validity
            Not Before: May 13 02:00:54 2026 GMT
            Not After : May 14 02:00:54 2026 GMT
        Subject: CN=6f6f669d10d757b0e32f63eaf3e4bf78ce794179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9d:c4:8c:8f:f6:6c:cc:f5:4a:27:7b:63:93:
                    a5:6b:f8:bf:dc:a2:dd:33:f3:ee:80:bc:f4:ab:6f:
                    63:25:f6:46:32:cd:c6:15:15:27:47:3f:14:55:38:
                    98:81:49:76:b9:27:33:d7:5d:a0:cb:cc:cb:bf:c1:
                    f6:fb:c0:a2:a5:22:0e:5a:e8:9f:55:52:fd:3b:85:
                    02:ba:bc:ff:6a:b1:16:8c:cf:33:46:72:2b:c0:f6:
                    46:5d:81:ad:95:75:be:a7:b8:d5:3f:54:02:9c:9b:
                    24:e5:44:31:47:95:11:e6:72:e3:99:c5:59:b6:d5:
                    cb:39:5c:2c:f7:ad:40:8e:6d:0d:cd:4d:0b:72:91:
                    22:a8:9e:ae:9f:c1:df:99:c0:c1:fd:c6:1b:54:a9:
                    05:64:e4:e3:c0:80:ec:a8:aa:4a:5f:23:6f:69:21:
                    76:f3:74:cc:8f:0c:40:ac:bd:c3:1c:a7:79:26:b4:
                    0b:70:6b:60:9d:58:9f:e2:af:f2:4e:be:07:f2:77:
                    30:59:78:9b:28:52:f2:ab:9a:34:14:14:21:c6:bf:
                    66:85:ad:18:a6:9d:ad:2a:cf:96:bb:c4:9b:67:59:
                    b8:7d:a9:fe:53:56:61:d9:ce:26:ad:1b:01:10:f8:
                    f5:ce:44:37:14:64:08:a3:92:1a:aa:c2:4f:fe:63:
                    a2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:6F:66:9D:10:D7:57:B0:E3:2F:63:EA:F3:E4:BF:78:CE:79:41:79
            X509v3 Authority Key Identifier:
                keyid:3F:DF:08:45:91:19:96:9D:4B:9C:17:F5:A8:5E:92:73:2C:55:17:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:21:2e:79:21:c2:33:9c:e9:04:ea:cf:bb:01:5d:b7:21:b0:
         19:27:44:d5:8d:05:41:c2:ba:04:69:06:f5:b5:92:d9:10:17:
         bc:fa:38:99:3e:7d:22:b8:27:53:b6:2e:52:90:3b:f2:fa:eb:
         a3:fc:35:29:c8:5d:1f:fe:0d:cd:d1:f4:81:51:3e:ae:c0:27:
         ae:26:f8:00:55:8d:65:29:48:f7:b3:74:25:5b:c1:fb:73:f6:
         49:04:cb:bd:4c:5b:fb:1b:cb:1e:cf:eb:a7:27:d1:df:08:68:
         d4:95:8e:3d:e5:59:d5:51:3d:13:18:9b:a5:18:01:44:8b:90:
         4f:cf:e2:7e:8e:a1:ef:36:fd:b5:49:bb:02:72:18:6e:c4:63:
         d1:5e:e6:32:f1:1e:29:96:a9:f1:7d:80:a5:7b:b3:21:5e:56:
         e5:16:ac:c3:1b:21:78:96:af:eb:c9:35:f2:cb:6b:23:1b:68:
         f4:d8:b1:36:65:1f:fa:24:fe:e6:a2:72:47:6d:d2:3e:ce:91:
         24:94:1d:0e:2e:b8:b1:66:46:d8:06:76:76:70:f6:8b:fe:bd:
         f6:b4:5b:9c:d9:4a:36:3e:86:6d:a8:d5:a8:62:2b:86:af:96:
         87:6a:0d:c2:4a:38:40:17:56:cd:63:0a:fb:4e:d6:25:e3:36:
         02:e5:6e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:31:23 2026 by rpki-client