Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft
File:                     0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft (raw, json)
Hash identifier:          r/LKhtjZAdasLRefVbQo6S3p2cOUtKwB3jDTIy+/e8M=
Subject key identifier:   D0:09:80:89:B4:F3:82:A8:52:2E:84:5A:57:6A:02:A9:C8:A1:55:AB
Authority key identifier: D1:BD:64:CC:94:A4:A8:51:8A:71:F9:6E:F8:B7:76:25:AF:A5:27:D1
Certificate issuer:       /CN=d1bd64cc94a4a8518a71f96ef8b77625afa527d1
Certificate serial:       019E1E35A848154D43C47B90C49FC7DE55B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft
Manifest number:          162C
Signing time:             Tue 12 May 2026 22:01:33 +0000
Manifest this update:     Tue 12 May 2026 22:01:33 +0000
Manifest next update:     Wed 13 May 2026 22:01:33 +0000
Files and hashes:         1: 0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.crl (hash: JunO8dQf1ouzjvW6K8sHzlCAlphofk/NzEsk1lUJy/E=)
                          2: g6AUdtBKbxSolGFU2rOSyRaiZMc.roa (hash: coGf1wAtr5fsslkJ4IB/mKoERpi+xwxfE7T7e7sR0vg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:a8:48:15:4d:43:c4:7b:90:c4:9f:c7:de:55:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1bd64cc94a4a8518a71f96ef8b77625afa527d1
        Validity
            Not Before: May 12 22:01:33 2026 GMT
            Not After : May 13 22:01:33 2026 GMT
        Subject: CN=d0098089b4f382a8522e845a576a02a9c8a155ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9a:ce:4e:4a:0d:15:82:e8:7c:67:90:d5:1f:
                    72:7b:ab:b0:97:d9:10:05:73:08:dc:1a:51:be:05:
                    59:13:57:99:fe:1d:d3:38:5f:61:1f:56:5b:a4:57:
                    b0:d4:66:a2:97:37:de:74:cc:57:07:60:4d:05:ee:
                    2f:81:aa:2c:7b:f3:24:0f:0b:d8:0d:24:1c:c7:1e:
                    aa:0b:d2:4b:4a:2d:33:c0:e8:c5:e7:52:15:9b:83:
                    2b:36:4c:d3:2c:1c:c7:38:61:d0:92:d0:c8:1f:c5:
                    7f:75:c2:76:3e:cb:34:35:16:6e:30:30:b9:ca:be:
                    d3:dc:40:29:1c:53:ac:3b:54:37:91:cb:ff:c8:5c:
                    ef:93:9d:2d:3e:c6:14:2e:2b:b7:b7:a0:b3:71:ed:
                    1c:21:02:38:63:e5:87:c8:70:d5:55:2a:d0:53:37:
                    cd:aa:42:b4:df:db:7b:51:99:9f:1c:1e:7c:3e:0d:
                    79:ad:74:e0:62:3f:78:45:d3:3e:f7:5a:6b:47:61:
                    4f:fb:1f:ee:c9:57:d3:94:93:8a:e1:26:b7:aa:75:
                    4a:8e:6e:88:56:72:ac:1a:39:8a:0e:81:91:b9:b8:
                    f5:41:02:09:0a:de:a5:af:50:9a:00:4a:09:df:e2:
                    50:da:15:b6:f6:64:9d:d5:52:ee:5c:ee:6d:4d:a7:
                    78:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:09:80:89:B4:F3:82:A8:52:2E:84:5A:57:6A:02:A9:C8:A1:55:AB
            X509v3 Authority Key Identifier:
                keyid:D1:BD:64:CC:94:A4:A8:51:8A:71:F9:6E:F8:B7:76:25:AF:A5:27:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:d8:ae:69:75:09:44:10:c9:74:0e:c2:50:73:b6:b9:6d:3a:
         90:8c:b9:18:ea:22:bf:82:af:06:4c:04:ab:94:9b:30:5c:5d:
         5b:28:c8:ce:85:cd:3c:6c:62:94:ac:53:66:fc:d1:05:e3:1b:
         da:8e:b4:16:18:4e:43:7e:bc:15:64:2b:4a:d8:c9:c4:2c:52:
         37:01:1f:95:8c:af:a6:14:0b:d6:49:44:97:25:2d:9e:5e:69:
         18:0a:94:7c:c4:49:05:b8:b5:05:41:1b:54:39:68:ef:61:94:
         bc:3b:d6:f3:a9:90:27:d7:51:0e:5a:ba:1e:34:21:de:23:5b:
         8d:28:f3:31:fb:07:69:97:7e:21:2e:de:e3:8e:6b:90:48:53:
         5d:88:c6:ec:8c:ba:89:d3:de:0d:82:9d:1e:1c:37:8d:ba:2e:
         84:4a:8b:f3:87:1c:2a:30:14:97:d8:c3:66:8d:55:f1:50:80:
         a4:40:9e:c9:41:bb:76:5a:47:4d:1b:29:8e:f0:b8:d0:4d:d4:
         78:b2:e2:4b:a4:bb:c9:4e:63:ac:8e:44:d6:65:6e:f4:03:45:
         4f:17:0b:dd:37:0c:ee:c9:d8:3e:43:04:06:2d:1b:2d:59:ba:
         7f:ad:29:73:95:74:15:27:ac:c4:6c:ab:3a:cc:07:b0:01:df:
         64:77:06:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:21:12 2026 by rpki-client