Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
File:                     16gAaL1zKO9BEg9HiMKNOpIEcGc.mft (raw, json)
Hash identifier:          KyYxLMMI9qqJBHX7BtNRfnZIoVsGI5BsOBm9sen8tso=
Subject key identifier:   46:F3:3A:D4:28:0B:E4:AB:49:CB:A7:BD:AC:EC:10:8C:82:CF:E8:DF
Authority key identifier: D7:A8:00:68:BD:73:28:EF:41:12:0F:47:88:C2:8D:3A:92:04:70:67
Certificate issuer:       /CN=d7a80068bd7328ef41120f4788c28d3a92047067
Certificate serial:       019E1D9045CC40857C82D1551082BFD26B97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
Manifest number:          02AC
Signing time:             Tue 12 May 2026 19:00:54 +0000
Manifest this update:     Tue 12 May 2026 19:00:54 +0000
Manifest next update:     Wed 13 May 2026 19:00:54 +0000
Files and hashes:         1: 16gAaL1zKO9BEg9HiMKNOpIEcGc.crl (hash: s+KwUjf+QvGwhVTUL/pT2pa6BZRCAM6NkFIUYf+Mm4M=)
                          2: CB4aLTKTt-QwFxoSiPz1WhXyJGI.roa (hash: MQyZeiopI+FRTy0ldbZvGSKhzWyeip7e2QwNaMhUJOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:45:cc:40:85:7c:82:d1:55:10:82:bf:d2:6b:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7a80068bd7328ef41120f4788c28d3a92047067
        Validity
            Not Before: May 12 19:00:54 2026 GMT
            Not After : May 13 19:00:54 2026 GMT
        Subject: CN=46f33ad4280be4ab49cba7bdacec108c82cfe8df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c1:7a:83:cd:3d:42:52:91:7a:52:89:c4:07:
                    1b:54:8a:36:f2:21:c7:12:5b:48:07:ec:29:a2:ac:
                    54:6e:6b:4f:ef:c6:4b:d7:8b:4e:96:49:81:ca:c8:
                    83:fa:53:31:76:f0:8d:46:d0:d6:cd:66:a2:ee:77:
                    0a:2e:4a:0a:1f:9f:16:ff:ca:df:da:ec:c8:f8:2f:
                    6b:1d:ce:1e:62:05:e4:95:d6:94:e3:a4:e6:01:ea:
                    4b:ea:4b:f2:b5:5e:d2:af:79:b5:37:cc:bb:28:d3:
                    6a:8c:bd:2c:ba:28:d7:ab:1f:08:55:1d:ce:05:7c:
                    06:e6:9e:be:c5:09:d5:cd:28:79:b3:ab:21:e3:aa:
                    89:a0:e6:f5:22:0d:45:d0:bd:a2:ff:10:60:2d:88:
                    c6:bf:e6:74:b5:72:33:7e:13:de:5c:7f:df:3f:1a:
                    f8:38:a1:fd:e6:41:ca:66:06:8c:84:f3:a2:e1:5c:
                    1c:79:57:be:0e:1e:aa:89:2e:28:ea:a4:19:85:ff:
                    69:44:c7:73:cd:e8:c6:b1:2e:c4:ee:5a:4c:6e:bd:
                    09:e2:bb:c9:c8:b4:83:89:89:48:e3:f6:3c:8d:5b:
                    5d:79:6a:5d:08:23:c7:d6:40:0b:26:f2:29:2a:8d:
                    54:3d:48:15:be:8a:24:36:ab:31:16:8b:93:19:f7:
                    5b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F3:3A:D4:28:0B:E4:AB:49:CB:A7:BD:AC:EC:10:8C:82:CF:E8:DF
            X509v3 Authority Key Identifier:
                keyid:D7:A8:00:68:BD:73:28:EF:41:12:0F:47:88:C2:8D:3A:92:04:70:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:8c:5f:37:2d:c1:41:ca:a9:9d:77:c6:4e:c1:5d:19:db:b1:
         87:c2:38:e8:13:31:31:1f:5b:32:c5:20:95:ba:9a:73:8f:9e:
         f8:c7:90:a8:6b:42:40:23:ca:bc:b4:d2:de:0a:30:02:e5:d0:
         de:85:01:a5:51:d9:22:59:34:ee:f7:11:ba:60:61:ca:86:95:
         d8:f0:67:95:71:53:d8:40:73:f2:69:be:94:35:29:50:29:da:
         85:9e:53:5e:6d:23:26:e2:38:4f:ff:4d:e3:fc:9a:b2:f0:ab:
         1f:49:5b:ee:6b:59:36:94:4f:3a:1d:17:2c:1c:93:2f:67:a7:
         41:9b:da:be:29:08:6f:9f:42:16:ff:5f:67:77:ed:fc:0c:2a:
         fe:44:5d:a2:d7:b7:fa:7d:c4:3d:7b:2d:b6:01:5f:ce:01:6d:
         de:c1:d6:51:3f:64:f3:49:e5:bc:bd:8d:5b:94:0d:1d:9b:43:
         95:72:e6:d4:33:ec:19:10:f3:b3:be:04:5d:b6:9e:1d:5e:e3:
         da:a0:6e:22:6e:c1:9a:38:52:e0:ae:92:56:92:1e:ac:4b:7d:
         eb:0d:ad:15:52:c6:3e:11:69:c5:49:67:8a:58:eb:64:21:8e:
         de:e5:84:b8:00:56:b5:4e:ee:de:8c:94:ce:9f:38:d1:d0:87:
         b0:cc:25:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:06:52 2026 by rpki-client