Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
File:                     I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft (raw, json)
Hash identifier:          ZuN1qEMPEGgj3bMyCyU9Mv02+pQKC1Bhs8NH9OPG5Lg=
Subject key identifier:   5A:0B:D6:2B:D4:7F:A2:88:9B:8A:7B:95:CF:5D:25:F6:C9:13:91:A5
Authority key identifier: 23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
Certificate issuer:       /CN=237c83447d17183380f489bc946c8b9e300ffb1d
Certificate serial:       019E1D59D1C64D5CB63251A7A9B0F771FDDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
Manifest number:          166C
Signing time:             Tue 12 May 2026 18:01:26 +0000
Manifest this update:     Tue 12 May 2026 18:01:26 +0000
Manifest next update:     Wed 13 May 2026 18:01:26 +0000
Files and hashes:         1: DjXoCaobtcffNMD9OzGH6IFSLLo.roa (hash: WrZXnB+nUBqth3CtzYGmbFTxT4B0+NVW12W64XpI3Qo=)
                          2: I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl (hash: sINsOgmzToZUAWVgSJls3lQjcfTegoWCWB/S/etIvh0=)
                          3: OEUQTsVKrLP-lQTQ6AZOPlYIssY.roa (hash: y4n6H8QWfTANHQ4V6doqPirRmfV8G8F5c8X9riuhcaE=)
                          4: Q11uKj3FZslGnPxLmnv1hIW3b48.roa (hash: czmZUe0UuJfveUL66FQWbR/8EoerZBPm+456KZ7ESgU=)
                          5: kprspPA2Qu5boxnWzJ_lU9Ab0AE.roa (hash: gEFYkhBGdlaWlWOzwy8lZShF5geJiJozavQlsbuA1Tk=)
                          6: sE_-Zfk_DwyvOa_qt-EocnU4lFc.roa (hash: euipXRTMWnefQBmfrbhq1BmgDtDdCzDjxCD9mCNPfqU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:d1:c6:4d:5c:b6:32:51:a7:a9:b0:f7:71:fd:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237c83447d17183380f489bc946c8b9e300ffb1d
        Validity
            Not Before: May 12 18:01:26 2026 GMT
            Not After : May 13 18:01:26 2026 GMT
        Subject: CN=5a0bd62bd47fa2889b8a7b95cf5d25f6c91391a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fd:73:54:bd:c4:d0:c4:38:1e:dc:d7:a8:a3:
                    90:bd:e9:b9:49:1b:f8:7e:4b:9c:8b:b9:fd:ec:c8:
                    c5:94:93:ae:95:6d:aa:dc:2a:8b:39:91:9e:91:c5:
                    31:ee:d5:ee:73:5a:a9:ce:cd:e1:80:a3:74:b1:8f:
                    3e:64:21:64:a2:44:d6:25:81:e3:8c:c9:60:87:3a:
                    68:24:55:cc:41:9c:0e:71:de:c0:e4:27:eb:07:ec:
                    25:04:b5:bc:e0:43:e9:06:ed:b7:c5:55:0f:f3:af:
                    c7:5e:a1:db:d4:96:81:af:49:38:fa:4b:70:59:e5:
                    bb:b9:32:3f:7c:89:57:7b:82:00:01:df:37:f7:cf:
                    4f:bf:bb:1a:e4:18:dc:b8:21:75:e6:d9:47:cf:9b:
                    0b:dd:33:b5:6d:80:f8:95:c5:0e:e7:9d:9e:6b:99:
                    e2:1e:f3:5e:a7:15:a2:79:55:da:1a:10:26:39:63:
                    a6:79:24:18:12:0a:d4:0a:a5:cd:52:79:2a:21:ff:
                    a3:4e:ee:df:75:77:c4:d2:56:7d:a7:a6:af:7a:56:
                    04:23:d3:ff:f3:02:ab:0a:15:ee:86:9c:95:34:39:
                    b9:90:b3:89:2f:4d:98:a9:99:99:16:e0:8c:fb:b9:
                    c0:59:f1:36:4b:44:2d:b0:fa:21:f3:99:a8:a9:84:
                    d4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:0B:D6:2B:D4:7F:A2:88:9B:8A:7B:95:CF:5D:25:F6:C9:13:91:A5
            X509v3 Authority Key Identifier:
                keyid:23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:38:fe:7c:bc:dc:84:da:2c:eb:31:2f:27:1a:44:3b:7f:20:
         38:7f:26:e6:95:a4:14:4f:2d:58:26:28:dc:c8:17:1c:f7:2f:
         e5:f4:c5:84:bd:2e:63:bf:1a:c3:9c:88:15:41:a0:1d:f4:33:
         28:e5:bb:1a:84:cc:b3:8b:0e:83:76:c6:bc:87:cd:21:a4:21:
         f9:a7:d3:a6:88:a6:b4:62:56:f3:6e:2a:f1:a2:7f:4e:19:76:
         75:af:45:a9:56:77:09:dd:e3:8a:52:bf:50:0b:d8:b8:ef:bf:
         84:0b:65:ca:ce:fc:05:71:7b:13:a2:76:33:b7:e0:8b:0f:69:
         ae:b3:f9:87:9a:f0:d5:2a:16:ae:a7:2b:8d:5c:fe:73:61:37:
         ee:53:70:84:8d:1d:9f:62:b6:93:60:9e:4d:f3:f0:5d:d2:08:
         b3:5b:f4:ff:92:f1:33:fb:b1:7d:c3:63:d0:3e:c1:f5:15:64:
         87:1a:e6:8d:ea:2f:4e:c7:33:7c:14:a8:6d:02:8b:d8:56:b9:
         30:ec:55:66:60:10:de:67:45:ae:98:76:d6:22:89:9f:34:f6:
         71:8c:70:2b:4f:c8:b1:ac:ad:53:ac:c1:dc:3b:23:f6:64:c0:
         c9:9f:62:41:12:47:7c:e4:73:dd:87:d7:39:3d:af:ef:d2:2e:
         0a:b5:34:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:49:28 2026 by rpki-client