Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
File:                     0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft (raw, json)
Hash identifier:          5baKPFUJ7jNr4KW+lyRXPP7zGGuMHmkbiaoiPOVvAhc=
Subject key identifier:   8B:38:0A:24:0F:EA:D5:FD:70:87:FD:55:DD:BD:26:1A:D6:B9:FB:34
Authority key identifier: D0:48:50:F8:06:9D:F6:2D:C5:15:5C:02:ED:1E:62:BF:51:CE:DB:C8
Certificate issuer:       /CN=d04850f8069df62dc5155c02ed1e62bf51cedbc8
Certificate serial:       019E1D904A58875DD89A4D895DEA71502501
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
Manifest number:          058B
Signing time:             Tue 12 May 2026 19:00:55 +0000
Manifest this update:     Tue 12 May 2026 19:00:55 +0000
Manifest next update:     Wed 13 May 2026 19:00:55 +0000
Files and hashes:         1: 0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl (hash: b5FrhbS/r2xUOYfId+CUbjpoT5V9kyX0cpV+T8cOsn4=)
                          2: v795sY2U8jhvRzL8MVmYlvFz9_s.roa (hash: Hn47sYXDYoB/4A+t0th2lMVq06CbmCPSmHDsJlsUcW8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:4a:58:87:5d:d8:9a:4d:89:5d:ea:71:50:25:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d04850f8069df62dc5155c02ed1e62bf51cedbc8
        Validity
            Not Before: May 12 19:00:55 2026 GMT
            Not After : May 13 19:00:55 2026 GMT
        Subject: CN=8b380a240fead5fd7087fd55ddbd261ad6b9fb34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8f:83:ea:7a:c8:37:29:45:ca:3b:4d:3e:79:
                    0f:4f:16:4b:16:1a:b8:7e:38:5c:e7:51:48:03:96:
                    a4:1b:c6:65:b7:ad:71:0e:b3:5b:8f:a5:89:3b:aa:
                    96:3f:7d:4b:25:f0:88:c2:3d:f0:3d:50:0a:17:2f:
                    f8:70:ba:3f:e1:56:dc:b0:d6:9a:dd:4e:ed:69:a4:
                    98:c4:03:b0:b3:80:22:d5:5a:c9:c7:29:45:b1:55:
                    b9:43:32:d2:0b:e1:b5:e2:e9:df:3b:c1:c3:e6:20:
                    a8:7e:22:24:9a:18:b8:61:e7:44:09:d8:54:6c:a6:
                    7a:d1:0e:56:32:8d:9f:87:ca:b7:5e:8d:91:76:7c:
                    2f:20:8d:1a:19:47:d6:16:f3:55:12:6a:b0:4d:a0:
                    40:f9:2e:c7:ab:aa:65:b5:2b:43:e2:ac:dd:a9:2b:
                    2d:3e:70:7e:87:25:4d:6f:69:3c:26:e9:a7:59:54:
                    81:c2:1c:87:1f:c2:4d:29:b0:fe:73:a4:1d:af:6d:
                    a2:03:03:c0:f4:a2:9c:be:96:15:e3:b8:90:4b:c9:
                    42:91:4a:85:2f:6c:2c:ae:85:1e:f2:ab:90:5f:2e:
                    32:f9:ee:06:b2:ab:5a:59:f2:4c:f4:7b:a0:1b:82:
                    d5:fa:29:d0:48:c2:41:6d:42:d0:6a:26:e4:8a:94:
                    03:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:38:0A:24:0F:EA:D5:FD:70:87:FD:55:DD:BD:26:1A:D6:B9:FB:34
            X509v3 Authority Key Identifier:
                keyid:D0:48:50:F8:06:9D:F6:2D:C5:15:5C:02:ED:1E:62:BF:51:CE:DB:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:af:3f:47:cb:3f:09:e7:ec:92:7e:35:fc:8c:a1:ca:c3:6c:
         4f:26:e9:72:42:26:f8:40:a3:29:77:9a:91:11:36:45:88:13:
         e2:4a:e4:10:f1:fd:81:95:f9:73:41:9c:f7:b6:4d:c3:cc:bc:
         a6:be:3c:54:dd:43:f3:dc:c9:f1:b1:45:dc:ea:6f:10:15:b6:
         6a:43:15:9c:fd:37:8e:b9:46:22:ce:3d:95:a1:ff:62:5f:00:
         98:fc:69:18:b1:5a:4a:17:1a:3f:f9:6a:3f:99:40:78:dd:99:
         c2:32:e9:48:e3:b2:97:c4:85:6e:23:51:e1:d2:5a:bb:4c:53:
         8c:f1:73:53:a8:86:97:af:d0:cf:9c:a7:49:2c:78:60:47:9f:
         8e:b5:8f:f2:2a:5b:87:96:a7:3d:a0:a4:17:8a:0a:40:6f:43:
         e3:44:75:ac:11:6e:df:63:a7:8d:52:f1:93:bc:c5:2c:d5:00:
         4a:12:bb:c8:30:a8:0a:ff:09:30:30:41:31:fa:05:a8:37:4a:
         c1:8b:74:2e:39:17:54:7b:d6:d2:83:3c:84:49:a8:3b:63:59:
         36:30:be:0e:cb:24:2a:7f:bd:85:fe:bd:25:91:a3:26:58:09:
         64:f2:f4:ec:b3:f1:b8:b0:17:d8:21:3b:02:51:b4:1f:a2:b9:
         61:5e:56:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkEpYh13Ymk2JXepxUCUBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNDg1MGY4MDY5ZGY2MmRjNTE1NWMwMmVkMWU2MmJmNTFj
ZWRiYzgwHhcNMjYwNTEyMTkwMDU1WhcNMjYwNTEzMTkwMDU1WjAzMTEwLwYDVQQD
Eyg4YjM4MGEyNDBmZWFkNWZkNzA4N2ZkNTVkZGJkMjYxYWQ2YjlmYjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Y+D6nrINylFyjtNPnkPTxZLFhq4
fjhc51FIA5akG8Zlt61xDrNbj6WJO6qWP31LJfCIwj3wPVAKFy/4cLo/4VbcsNaa
3U7taaSYxAOws4Ai1VrJxylFsVW5QzLSC+G14unfO8HD5iCofiIkmhi4YedECdhU
bKZ60Q5WMo2fh8q3Xo2RdnwvII0aGUfWFvNVEmqwTaBA+S7Hq6pltStD4qzdqSst
PnB+hyVNb2k8JumnWVSBwhyHH8JNKbD+c6Qdr22iAwPA9KKcvpYV47iQS8lCkUqF
L2wsroUe8quQXy4y+e4GsqtaWfJM9HugG4LV+inQSMJBbULQaibkipQDqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIs4CiQP6tX9cIf9Vd29JhrWufs0MB8GA1UdIwQY
MBaAFNBIUPgGnfYtxRVcAu0eYr9RztvIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEVoUS1BYWQ5aTNGRlZ3QzdSNWl2MUhPMjhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kMDk3ZDMtZDRiYS00MTMwLThlOTYt
YWQ5NWViZmFhYWUyLzEvMEVoUS1BYWQ5aTNGRlZ3QzdSNWl2MUhPMjhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9kMDk3ZDMtZDRiYS00MTMwLThlOTYtYWQ5NWViZmFhYWUy
LzEvMEVoUS1BYWQ5aTNGRlZ3QzdSNWl2MUhPMjhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgK8/R8s/
Cefskn41/IyhysNsTybpckIm+ECjKXeakRE2RYgT4krkEPH9gZX5c0Gc97ZNw8y8
pr48VN1D89zJ8bFF3OpvEBW2akMVnP03jrlGIs49laH/Yl8AmPxpGLFaShcaP/lq
P5lAeN2ZwjLpSOOyl8SFbiNR4dJau0xTjPFzU6iGl6/Qz5ynSSx4YEefjrWP8ipb
h5anPaCkF4oKQG9D40R1rBFu32OnjVLxk7zFLNUAShK7yDCoCv8JMDBBMfoFqDdK
wYt0LjkXVHvW0oM8hEmoO2NZNjC+DsskKn+9hf69JZGjJlgJZPL07LPxuLAX2CE7
AlG0H6K5YV5WzQ==
-----END CERTIFICATE-----
Generated at Wed May 13 00:56:46 2026 by rpki-client