Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
File:                     g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft (raw, json)
Hash identifier:          A6tDIc1tcVvVi9aqw9duwB3xQ7JmhGtMaBsP+qW2cU8=
Subject key identifier:   9A:20:62:B2:2C:FC:C1:FD:38:44:BA:A8:6F:58:83:CC:B2:66:76:A2
Authority key identifier: 83:AC:88:F0:17:0C:BF:E4:46:CF:D3:1A:58:23:CD:E0:E0:93:19:9A
Certificate issuer:       /CN=83ac88f0170cbfe446cfd31a5823cde0e093199a
Certificate serial:       019E1ED9FC9C7F9632BA4BBA81FB94E53A29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
Manifest number:          189B
Signing time:             Wed 13 May 2026 01:01:02 +0000
Manifest this update:     Wed 13 May 2026 01:01:02 +0000
Manifest next update:     Thu 14 May 2026 01:01:02 +0000
Files and hashes:         1: 4otQnggN5_uQC9wKi00qa0eySrY.roa (hash: mMnLCC58FrEpo9AcseP6Ttc1YSWB7rt8x7N2xaBJU6E=)
                          2: g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl (hash: +ahTZXdw8/PuWVx3gJGyc1YVw2XtCIofUe+KYssiL7Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:d9:fc:9c:7f:96:32:ba:4b:ba:81:fb:94:e5:3a:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83ac88f0170cbfe446cfd31a5823cde0e093199a
        Validity
            Not Before: May 13 01:01:02 2026 GMT
            Not After : May 14 01:01:02 2026 GMT
        Subject: CN=9a2062b22cfcc1fd3844baa86f5883ccb26676a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d3:40:f0:f7:02:c8:01:91:9c:5a:61:87:b4:
                    00:f6:ce:4a:96:d5:ce:91:f3:32:8c:94:af:89:a5:
                    12:02:02:57:59:0d:86:49:fa:46:f6:1e:b2:20:02:
                    24:b8:e7:52:a1:38:68:f6:ef:23:56:cf:5a:ce:40:
                    f1:32:24:b8:74:c1:51:15:81:21:14:9f:0d:9d:d4:
                    a5:e1:ee:b9:13:f4:86:16:6c:16:c2:cd:79:1c:ad:
                    55:42:b9:a5:b6:fb:59:d3:3a:49:7b:d2:8b:7f:3a:
                    bc:7a:d3:62:e8:84:22:01:17:36:d8:6c:89:6a:67:
                    99:b1:5c:5d:04:ca:d3:85:e8:94:2a:da:bb:74:92:
                    2e:fe:2d:db:d4:d9:76:ae:da:65:a8:f0:06:52:bf:
                    ce:28:d9:4a:51:35:59:67:5a:fa:5a:a6:73:be:57:
                    95:6a:f2:6c:58:0c:bf:47:f6:fd:f2:73:64:d4:b4:
                    99:49:d8:d2:e0:65:79:91:11:cc:3e:08:0a:67:8d:
                    c5:1a:91:86:d3:c7:11:94:14:f9:7c:08:17:47:b0:
                    b6:42:92:89:74:8e:bb:22:cd:9e:ba:71:b7:fd:5d:
                    48:5f:e7:d8:1c:f5:15:6e:64:93:b0:9a:34:83:48:
                    d8:31:77:88:b7:48:57:b5:4f:7c:33:cd:58:86:20:
                    d1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:20:62:B2:2C:FC:C1:FD:38:44:BA:A8:6F:58:83:CC:B2:66:76:A2
            X509v3 Authority Key Identifier:
                keyid:83:AC:88:F0:17:0C:BF:E4:46:CF:D3:1A:58:23:CD:E0:E0:93:19:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:c2:69:b7:fc:60:4e:8b:ea:33:ef:ee:d6:2c:45:de:6d:78:
         55:65:a8:4f:dd:2d:0c:a1:04:81:68:ec:f4:d1:aa:a8:b1:cb:
         c4:29:f5:c1:85:dd:31:14:1c:c6:1b:c0:d6:1b:62:74:ef:b8:
         83:8d:c5:b0:31:f7:6c:26:6b:1b:07:8e:76:a9:aa:07:51:da:
         1e:f5:65:00:86:f5:a4:c3:f4:51:2e:06:72:2d:54:6a:c5:d0:
         7f:14:5a:5d:85:a8:dd:ce:3e:1c:20:ed:3c:60:69:8a:d5:cb:
         51:a2:d3:8d:2d:4e:d6:56:9d:e2:63:58:6d:56:06:a5:c0:7d:
         55:d5:2c:36:3b:42:f4:f7:df:08:57:ed:27:b3:70:b7:b2:d3:
         e5:59:1c:27:10:0d:f0:e2:b5:b9:74:53:78:90:93:a8:55:6f:
         9b:25:ef:80:0a:59:0a:7c:d1:d9:46:83:13:b1:59:da:a4:ca:
         6e:07:a3:5d:c2:ab:4c:c8:f2:cc:9f:de:bf:95:2f:60:b2:5d:
         37:2d:c0:c1:03:ac:14:58:85:e5:41:24:19:96:ee:1d:3f:a6:
         d1:b0:c7:f3:2e:85:1d:de:3d:06:eb:25:80:4b:06:22:ff:fd:
         ba:7b:78:0f:13:7f:d2:17:86:c9:72:72:9a:4d:a4:bf:f1:5d:
         e4:d5:91:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:19:46 2026 by rpki-client