Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
File:                     ISvg6nHPQ34I798_55jq-YQTHEY.mft (raw, json)
Hash identifier:          JzLRfoJ4/yqUtfP0Phq8qxkDFfPTMuIT84clWeYmaxc=
Subject key identifier:   63:33:84:B8:BB:BA:66:F1:07:7C:9A:C0:1C:37:B8:C9:6F:D8:6F:1B
Authority key identifier: 21:2B:E0:EA:71:CF:43:7E:08:EF:DF:3F:E7:98:EA:F9:84:13:1C:46
Certificate issuer:       /CN=212be0ea71cf437e08efdf3fe798eaf984131c46
Certificate serial:       019E1EDA177BFF2C3FF768F6C989A9157CE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
Manifest number:          190D
Signing time:             Wed 13 May 2026 01:01:09 +0000
Manifest this update:     Wed 13 May 2026 01:01:09 +0000
Manifest next update:     Thu 14 May 2026 01:01:09 +0000
Files and hashes:         1: ISvg6nHPQ34I798_55jq-YQTHEY.crl (hash: DoibrXv8AohcAsO6djqR/HZgu6Z0jxCbMw8m1O3cpXo=)
                          2: YPgZRfV6AFhzXbq4m6XNav-mmCg.roa (hash: Cv05LpDEhrVT+401TQ+oT7WhxjJeD9EoisiqskaJyag=)
                          3: auEpgiPIX3h008e7_hstjhVeKb8.roa (hash: AEMD5xTfuBQMPnNdbcNGPYKM0fV1Wstpq65O+O7gGKc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:17:7b:ff:2c:3f:f7:68:f6:c9:89:a9:15:7c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=212be0ea71cf437e08efdf3fe798eaf984131c46
        Validity
            Not Before: May 13 01:01:09 2026 GMT
            Not After : May 14 01:01:09 2026 GMT
        Subject: CN=633384b8bbba66f1077c9ac01c37b8c96fd86f1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:da:b0:b5:dd:1c:2f:10:27:70:3a:83:07:5e:
                    86:6e:e1:46:01:fb:22:9b:22:26:a5:1b:7d:16:d6:
                    af:27:9c:e5:4c:ed:27:9b:ba:f1:7c:bc:21:f1:71:
                    ae:13:46:86:3a:e7:3a:8c:f8:8e:fc:92:b5:67:58:
                    d5:ee:58:e8:f2:89:08:af:2f:56:96:ba:9a:f2:3c:
                    66:72:3b:8b:7c:ac:46:2c:f6:04:cb:62:6f:8d:b2:
                    e7:f1:ec:1c:98:97:cf:33:81:de:46:3e:80:6d:f9:
                    b4:2d:09:18:ba:82:43:e2:b4:24:e6:96:94:89:5b:
                    3b:2a:e9:ec:bc:4b:e7:86:30:3f:a7:f1:ed:ca:59:
                    70:02:b9:d3:42:f0:a0:61:99:75:47:ca:cb:e1:34:
                    d6:23:c1:b0:88:bb:2c:bb:95:1e:ba:13:06:5a:30:
                    c3:ed:c2:8b:10:a8:84:ab:53:e4:c1:ff:d8:20:24:
                    f5:c7:06:f7:9d:e6:bf:ae:24:02:5b:8a:cb:3f:18:
                    86:c6:0f:13:77:0e:b2:d6:cc:4e:28:ea:e9:7e:1f:
                    aa:83:b0:02:a9:1c:df:71:0a:83:24:a3:11:12:3b:
                    7c:54:64:83:a1:e6:5c:2d:5e:29:da:f3:f5:0b:84:
                    d1:a5:4d:3a:8b:70:5d:9a:8d:3d:f9:10:ef:c1:22:
                    4e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:33:84:B8:BB:BA:66:F1:07:7C:9A:C0:1C:37:B8:C9:6F:D8:6F:1B
            X509v3 Authority Key Identifier:
                keyid:21:2B:E0:EA:71:CF:43:7E:08:EF:DF:3F:E7:98:EA:F9:84:13:1C:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:32:5d:19:8c:8a:f7:26:61:3a:f8:3b:22:38:38:ed:0c:20:
         d8:6f:6b:2d:ca:b6:ac:f1:69:e1:98:e3:f9:b1:7d:35:39:59:
         96:8d:f8:8c:53:de:09:56:46:c8:b7:72:a6:be:61:cc:ea:15:
         3e:dd:50:a6:d2:c0:83:4f:5f:70:f8:d5:de:7d:cb:b2:0a:fc:
         ef:8e:bb:9b:fd:a7:d0:5b:ac:e4:55:8d:93:af:7e:ca:a7:5e:
         1d:dd:b0:18:b7:22:5f:5b:85:3d:8a:fd:42:f5:2b:06:30:b2:
         14:0e:b5:b1:ee:27:e8:50:3f:2d:de:a3:4f:d6:1e:6e:0d:ab:
         36:87:73:c5:c1:e4:ec:1a:9f:71:68:a7:3b:7b:6f:e2:7c:16:
         82:f0:8f:c7:81:95:2d:5c:f3:8b:90:0d:59:46:15:49:00:9d:
         21:21:a6:a5:02:82:ce:4b:ac:c6:97:5f:d4:f5:dd:ac:bd:2c:
         06:08:d9:dd:76:b9:f2:ff:74:46:d0:97:c1:48:20:75:b7:fb:
         fb:2d:8a:50:ba:bc:b3:90:c6:79:db:f2:40:31:04:6b:fd:6e:
         69:ac:c5:4c:1b:78:1c:70:be:ea:b5:34:83:36:34:2b:96:4b:
         15:80:19:2a:ad:17:21:5a:66:ce:f4:0f:d5:7e:31:b7:c4:13:
         d2:82:54:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2hd7/yw/92j2yYmpFXzgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMmJlMGVhNzFjZjQzN2UwOGVmZGYzZmU3OThlYWY5ODQx
MzFjNDYwHhcNMjYwNTEzMDEwMTA5WhcNMjYwNTE0MDEwMTA5WjAzMTEwLwYDVQQD
Eyg2MzMzODRiOGJiYmE2NmYxMDc3YzlhYzAxYzM3YjhjOTZmZDg2ZjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNqwtd0cLxAncDqDB16GbuFGAfsi
myImpRt9FtavJ5zlTO0nm7rxfLwh8XGuE0aGOuc6jPiO/JK1Z1jV7ljo8okIry9W
lrqa8jxmcjuLfKxGLPYEy2JvjbLn8ewcmJfPM4HeRj6Abfm0LQkYuoJD4rQk5paU
iVs7KunsvEvnhjA/p/HtyllwArnTQvCgYZl1R8rL4TTWI8GwiLssu5UeuhMGWjDD
7cKLEKiEq1Pkwf/YICT1xwb3nea/riQCW4rLPxiGxg8Tdw6y1sxOKOrpfh+qg7AC
qRzfcQqDJKMREjt8VGSDoeZcLV4p2vP1C4TRpU06i3Bdmo09+RDvwSJOuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGMzhLi7umbxB3yawBw3uMlv2G8bMB8GA1UdIwQY
MBaAFCEr4Opxz0N+CO/fP+eY6vmEExxGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVN2ZzZuSFBRMzRJNzk4XzU1anEtWVFUSEVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8xYmFiZmMtNzllNi00NWRmLThjNDAt
NzI1NjhmMDZmZTEwLzEvSVN2ZzZuSFBRMzRJNzk4XzU1anEtWVFUSEVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8xYmFiZmMtNzllNi00NWRmLThjNDAtNzI1NjhmMDZmZTEw
LzEvSVN2ZzZuSFBRMzRJNzk4XzU1anEtWVFUSEVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIzJdGYyK
9yZhOvg7Ijg47Qwg2G9rLcq2rPFp4Zjj+bF9NTlZlo34jFPeCVZGyLdypr5hzOoV
Pt1QptLAg09fcPjV3n3Lsgr87467m/2n0Fus5FWNk69+yqdeHd2wGLciX1uFPYr9
QvUrBjCyFA61se4n6FA/Ld6jT9Yebg2rNodzxcHk7BqfcWinO3tv4nwWgvCPx4GV
LVzzi5ANWUYVSQCdISGmpQKCzkusxpdf1PXdrL0sBgjZ3Xa58v90RtCXwUggdbf7
+y2KULq8s5DGedvyQDEEa/1uaazFTBt4HHC+6rU0gzY0K5ZLFYAZKq0XIVpmzvQP
1X4xt8QT0oJUPA==
-----END CERTIFICATE-----
Generated at Wed May 13 09:07:10 2026 by rpki-client