Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft
File:                     u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft (raw, json)
Hash identifier:          Rq4qTHlzZU83S0rShtSjooWwcwq+/q2gShD5wTnYOv0=
Subject key identifier:   CB:E6:61:FC:C5:7D:8B:68:2C:4B:40:CA:98:48:47:5A:0C:D7:79:F6
Authority key identifier: BB:E1:BD:6B:0D:58:9E:1A:0F:90:BA:DF:73:50:20:71:4F:0E:CF:7A
Certificate issuer:       /CN=bbe1bd6b0d589e1a0f90badf735020714f0ecf7a
Certificate serial:       019E20235D0F06FA3B2F1869F5079EA8FFC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft
Manifest number:          011F
Signing time:             Wed 13 May 2026 07:00:48 +0000
Manifest this update:     Wed 13 May 2026 07:00:48 +0000
Manifest next update:     Thu 14 May 2026 07:00:48 +0000
Files and hashes:         1: jkaZ5iICQupFcFDl9xhsN7XCfVU.roa (hash: 2aIOXrEvsS/h5Y1uTl8DSbIvLrqkEcleOvMyI5MMETE=)
                          2: kGGKQ_LOCr5Ln0myybbsd-XEkBI.roa (hash: hCLc2O3yec3r2DP8hOWsVfY8Un9Qk+FYyJmGArXKVWo=)
                          3: u-G9aw1YnhoPkLrfc1AgcU8Oz3o.crl (hash: L3g89gDlZLtJoo/hdaMS/P+Cat5YNYM1RHpbdQdwWVg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:23:5d:0f:06:fa:3b:2f:18:69:f5:07:9e:a8:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbe1bd6b0d589e1a0f90badf735020714f0ecf7a
        Validity
            Not Before: May 13 07:00:48 2026 GMT
            Not After : May 14 07:00:48 2026 GMT
        Subject: CN=cbe661fcc57d8b682c4b40ca9848475a0cd779f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b6:21:49:2d:25:ef:3b:07:45:b7:46:37:d6:
                    7c:fc:3f:cc:ff:7a:9e:1e:f7:ef:fe:41:8d:46:59:
                    7f:0f:e5:13:11:15:1d:cf:db:04:38:5e:4a:fd:c3:
                    93:00:b0:7a:7f:6f:4a:3a:02:b4:e8:31:36:ff:ad:
                    c8:77:a9:d4:26:32:28:8e:97:f8:fb:10:06:2b:de:
                    a1:7a:7d:5e:02:66:32:96:90:f9:ea:ea:3f:e1:06:
                    c4:bd:fd:25:fd:58:a6:5f:25:1a:1a:62:9d:fa:3a:
                    ba:ae:bb:99:f8:87:9f:6c:85:6d:12:bf:7a:ec:f2:
                    92:77:3d:76:73:06:5b:70:9d:7e:df:bc:93:8e:64:
                    71:ca:9a:0f:1f:28:58:0c:59:be:f3:4b:c4:d7:5a:
                    06:d2:ca:87:3d:66:d8:a8:e5:f4:95:0f:46:8a:87:
                    35:e9:2e:18:0a:33:4e:e8:d3:73:e9:32:4e:1f:09:
                    4e:fd:4f:e8:fe:20:e9:e2:6c:a8:a1:e7:47:85:47:
                    27:94:e9:aa:4b:5a:d4:06:33:5e:71:03:7e:42:6a:
                    01:54:f5:9f:58:46:58:24:cf:ac:de:e9:f2:90:ff:
                    42:e5:9d:b6:ac:d4:6b:9e:86:36:42:ff:58:7f:c4:
                    b3:53:c9:46:0f:f5:fe:69:0f:55:54:46:9f:c4:67:
                    ad:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E6:61:FC:C5:7D:8B:68:2C:4B:40:CA:98:48:47:5A:0C:D7:79:F6
            X509v3 Authority Key Identifier:
                keyid:BB:E1:BD:6B:0D:58:9E:1A:0F:90:BA:DF:73:50:20:71:4F:0E:CF:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:fa:ad:78:04:da:ca:91:fc:3e:65:a3:58:54:ff:e2:dc:01:
         c8:bf:03:d3:af:e4:01:59:45:08:e2:33:93:4f:20:6d:41:ca:
         0e:c6:4d:24:51:63:ca:d9:3a:05:14:04:df:2f:59:ed:51:4f:
         f6:88:93:d9:de:b1:a2:3f:b1:06:56:a0:6f:14:f9:20:05:44:
         31:8d:65:f0:0c:90:93:49:d5:54:d3:a6:b9:0f:98:e7:f0:0e:
         e4:ba:9f:6c:22:1d:67:a4:07:8d:6f:4d:cf:f4:d5:e3:4b:46:
         6e:54:39:9a:66:c9:d1:b8:5c:ca:23:1d:b0:12:aa:4b:a9:b6:
         5b:f9:e8:64:79:b8:4c:2f:d4:eb:e3:f6:6d:03:fa:b3:a3:f4:
         38:1d:ba:d1:06:77:f2:7e:07:84:28:22:a5:1e:28:fb:ab:01:
         dc:0f:60:98:cf:a2:19:81:77:0a:67:ab:61:01:76:18:5b:83:
         65:d0:7a:1c:8e:12:ef:b2:3d:dd:5e:39:1a:b6:a1:92:fb:25:
         a9:58:70:0a:ae:8d:29:6a:32:b1:d8:ee:ec:e0:b8:ee:8b:c3:
         a9:b1:7f:1b:71:c0:b3:2e:35:47:0c:84:ad:6f:fa:2f:71:76:
         c6:d7:1d:c5:8c:f8:cd:90:d5:e7:0d:2f:5d:27:7c:9b:02:1c:
         a7:19:05:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:30:42 2026 by rpki-client