Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.mft
File:                     rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.mft (raw, json)
Hash identifier:          E8QlXmqhIeNB8n1YLhbLwRzIuMwGCd7HJdMXhWG0M94=
Subject key identifier:   5E:EB:60:A3:E0:86:FA:D4:4E:D5:BE:8A:DB:41:C9:2F:11:2D:03:96
Authority key identifier: AC:82:C9:DD:9D:6C:CF:B3:8C:A1:16:40:E1:02:F7:51:AE:27:49:27
Certificate issuer:       /CN=ac82c9dd9d6ccfb38ca11640e102f751ae274927
Certificate serial:       019E1D228CF25B16B2B8A3CA0EB7D028ADF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.mft
Manifest number:          A9
Signing time:             Tue 12 May 2026 17:01:03 +0000
Manifest this update:     Tue 12 May 2026 17:01:03 +0000
Manifest next update:     Wed 13 May 2026 17:01:03 +0000
Files and hashes:         1: AsgCbpxXAfVEl8fMySxEMEBj3v0.roa (hash: 3DUclWrbvVnjRe22xwXjCYPITDFNxuR0Ynpweo6931E=)
                          2: rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.crl (hash: b5o01sW6k4xgVVOsWoUyMjblUtfmOOAMEOM/1Uvcmic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 17:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:8c:f2:5b:16:b2:b8:a3:ca:0e:b7:d0:28:ad:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac82c9dd9d6ccfb38ca11640e102f751ae274927
        Validity
            Not Before: May 12 17:01:03 2026 GMT
            Not After : May 13 17:01:03 2026 GMT
        Subject: CN=5eeb60a3e086fad44ed5be8adb41c92f112d0396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f5:7d:8b:e5:1a:80:be:f6:af:73:00:21:09:
                    76:a2:8e:ad:5a:b7:2c:fa:de:21:be:1d:cc:63:f7:
                    df:ca:1b:0f:1e:ca:bf:84:b6:18:e0:b0:26:9e:1a:
                    63:08:b0:cb:e7:23:ce:e6:49:90:19:5c:8e:c2:d1:
                    bc:93:8e:33:d6:dc:e4:f1:e8:9b:a8:cb:b1:7c:b9:
                    93:34:0d:7e:4e:f4:12:3b:f5:08:9b:4f:c9:40:56:
                    22:8a:30:62:d0:14:89:6d:5b:12:8f:2e:23:c0:36:
                    b4:87:78:e0:7d:63:ea:6b:96:8a:68:79:51:6d:cd:
                    22:c0:5e:50:1d:34:5f:c0:b3:16:0b:cb:68:99:ca:
                    35:86:d0:83:52:d5:31:cc:4a:01:ae:b5:80:fd:d6:
                    76:bd:bf:6b:32:56:d3:93:48:2b:fd:5b:3f:05:de:
                    5c:4d:26:b3:29:c4:33:bf:01:3f:8b:72:fa:f5:86:
                    b2:02:30:51:7f:98:94:0d:f9:99:06:57:1a:4c:18:
                    8d:8e:2e:0a:85:de:a1:5a:07:fd:88:c3:e1:c2:09:
                    cf:2f:46:fc:e8:e0:08:a0:5c:fe:c8:5e:f2:1b:76:
                    96:41:84:d3:d2:b4:56:45:c6:73:cc:3d:7e:0d:5d:
                    a8:83:1a:6b:66:46:68:85:b6:aa:a9:3e:43:80:91:
                    11:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:EB:60:A3:E0:86:FA:D4:4E:D5:BE:8A:DB:41:C9:2F:11:2D:03:96
            X509v3 Authority Key Identifier:
                keyid:AC:82:C9:DD:9D:6C:CF:B3:8C:A1:16:40:E1:02:F7:51:AE:27:49:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:2a:ee:5b:61:a4:6c:b4:d2:a2:24:8c:1b:a8:e2:69:32:c1:
         cf:36:5f:88:c7:18:48:ba:a5:2f:9f:ac:ca:4f:bb:fc:a3:96:
         d9:4f:60:fe:e7:79:bf:2b:fd:47:94:64:d3:fa:6c:c2:00:0b:
         a5:26:6c:ad:47:d8:84:14:4c:12:84:0f:75:4b:2a:04:80:d0:
         a7:bc:68:50:4f:25:51:25:77:97:99:1f:ed:91:5e:cb:e9:07:
         c6:4f:20:b0:8d:e3:ea:f2:2d:cc:ad:30:40:d5:11:ba:47:16:
         97:42:64:89:27:cc:64:1c:82:57:d3:43:3c:7a:03:4a:33:95:
         c8:1a:38:f5:83:38:46:02:3c:f2:57:72:8f:38:d8:aa:67:d8:
         c5:45:52:44:f2:6c:e2:2c:57:10:65:0f:49:20:e7:80:34:a6:
         fa:52:b4:48:c9:a7:51:5f:15:fc:1c:cc:ac:c2:fb:d4:8a:63:
         60:17:c5:97:c8:5c:0d:e8:7d:56:e7:11:6f:17:3a:9e:e5:f8:
         dd:c2:62:82:7c:97:92:0f:98:38:fc:03:a7:8b:55:54:64:43:
         a1:1d:56:5d:6a:88:a2:42:90:13:77:a3:39:f5:74:a1:8c:4f:
         4e:ce:49:93:e9:5e:71:71:38:cc:72:d2:bb:86:9c:3c:39:1e:
         78:de:f8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:40:18 2026 by rpki-client