Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
File:                     8M9JYzV925hV-brEx9mVrciaNyo.mft (raw, json)
Hash identifier:          Gl/FPZQbMVxgGuDC/tCeLiSifx1DXQWq9eJbDK7xNLA=
Subject key identifier:   2E:12:54:7C:35:61:E1:40:73:0E:50:45:C9:B2:83:10:10:C0:3C:11
Authority key identifier: F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A
Certificate issuer:       /CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a
Certificate serial:       019E1D59D964C7B28EBACA6158D4466744FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
Manifest number:          180B
Signing time:             Tue 12 May 2026 18:01:27 +0000
Manifest this update:     Tue 12 May 2026 18:01:27 +0000
Manifest next update:     Wed 13 May 2026 18:01:27 +0000
Files and hashes:         1: 8M9JYzV925hV-brEx9mVrciaNyo.crl (hash: Fu1SO71HmZKGNIrWnDWiO2cW00I33ZG3M5cVsWCBwBI=)
                          2: dyj7Xcwg4fvIbgPvLBUgjAO8LDU.roa (hash: y2HtW5TPaDlHi0yiYdSPvHi8+3pJRBtpk7Wjb7tENAo=)
                          3: ocZPY67okT9wcZzWFKWfg9AUJ1M.roa (hash: iDAiG1YKPh6kU5IMftBrjc5iYiPA+UXefNbDPt+Am8w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:d9:64:c7:b2:8e:ba:ca:61:58:d4:46:67:44:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a
        Validity
            Not Before: May 12 18:01:27 2026 GMT
            Not After : May 13 18:01:27 2026 GMT
        Subject: CN=2e12547c3561e140730e5045c9b2831010c03c11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:98:a0:90:2f:1c:c4:9a:1c:de:1e:e0:17:2b:
                    00:3b:e8:8f:f6:56:09:57:bf:84:60:31:36:8c:37:
                    0a:d3:3b:88:ae:ed:5a:56:ee:48:08:ee:4e:e0:73:
                    b6:c7:5c:f9:2b:b1:e2:e9:33:1e:00:96:97:58:23:
                    35:da:7d:94:38:a7:18:e1:85:bd:39:f9:fd:f0:fd:
                    ed:44:c0:a3:02:bb:9c:7c:2a:ee:5a:63:2b:7f:72:
                    24:e4:b9:ae:82:df:17:11:a6:69:4e:23:66:61:a8:
                    2a:7d:72:c0:83:b2:cf:fd:d4:99:9e:fa:3d:31:41:
                    de:42:4a:2a:eb:37:29:c5:5e:7c:7c:23:3f:a6:25:
                    a8:fe:eb:db:2e:7e:65:2c:91:5a:c3:0c:3b:14:ff:
                    bf:9b:d2:a6:cb:ba:4d:05:22:a9:1e:d8:16:88:c5:
                    9c:3f:2a:bd:8b:98:39:0b:24:c2:ff:c4:29:8e:fd:
                    85:b9:6e:f8:6a:cb:f6:00:ad:2f:95:74:f7:6f:16:
                    19:a9:67:7e:3b:40:a9:34:e2:86:bf:1b:cf:66:bf:
                    88:55:89:a9:7b:70:fa:7b:3d:3e:b4:ab:56:60:cd:
                    af:d6:b4:63:2e:0c:c0:f2:e5:75:cc:ee:90:75:c5:
                    48:e8:b1:f2:dd:f0:12:d1:b6:38:e1:de:18:0e:94:
                    32:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:12:54:7C:35:61:E1:40:73:0E:50:45:C9:B2:83:10:10:C0:3C:11
            X509v3 Authority Key Identifier:
                keyid:F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:37:fd:8a:e2:e0:e4:97:e8:e0:af:6e:5c:40:35:4b:6d:6a:
         f0:5d:ce:f5:54:3f:cf:54:16:e2:e3:cb:c2:22:58:83:2c:37:
         a1:27:d1:66:86:51:e2:76:f0:7e:4f:ed:2f:a3:57:73:04:5e:
         13:67:d4:38:7f:97:68:58:e6:2b:60:1c:70:69:77:97:03:be:
         e6:4c:c5:4c:51:26:2c:12:89:09:cd:c3:4d:3b:5e:ca:31:f4:
         65:c5:5f:cd:65:a5:26:e4:cd:19:f5:be:9e:ad:c6:38:8b:00:
         fd:dc:cb:1d:7e:69:8b:9f:b9:0f:35:a5:46:fb:5f:a9:3d:8f:
         21:c7:6a:75:2b:b9:44:1a:af:13:dc:90:3c:92:58:9a:01:0e:
         64:ab:f0:de:01:84:62:df:b6:49:7c:b4:dd:ea:e1:a0:92:70:
         7f:db:85:3d:98:96:f0:b0:b0:64:ce:65:2f:29:ea:b3:5f:95:
         a6:4d:46:6a:96:9b:7d:67:5e:7a:aa:bf:c4:57:cf:e8:1f:bd:
         fe:8c:4f:42:1f:fc:84:30:77:ef:e8:7a:ae:54:d9:18:ab:05:
         cc:4d:43:25:68:89:0a:d8:a3:19:dd:25:be:25:7c:62:ce:fb:
         86:f8:cd:cf:3d:78:d4:e2:77:19:87:1b:d0:54:85:51:ac:63:
         a9:1b:c4:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dWdlkx7KOusphWNRGZ0T6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwY2Y0OTYzMzU3ZGRiOTg1NWY5YmFjNGM3ZDk5NWFkYzg5
YTM3MmEwHhcNMjYwNTEyMTgwMTI3WhcNMjYwNTEzMTgwMTI3WjAzMTEwLwYDVQQD
EygyZTEyNTQ3YzM1NjFlMTQwNzMwZTUwNDVjOWIyODMxMDEwYzAzYzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15igkC8cxJoc3h7gFysAO+iP9lYJ
V7+EYDE2jDcK0zuIru1aVu5ICO5O4HO2x1z5K7Hi6TMeAJaXWCM12n2UOKcY4YW9
Ofn98P3tRMCjArucfCruWmMrf3Ik5Lmugt8XEaZpTiNmYagqfXLAg7LP/dSZnvo9
MUHeQkoq6zcpxV58fCM/piWo/uvbLn5lLJFawww7FP+/m9Kmy7pNBSKpHtgWiMWc
Pyq9i5g5CyTC/8Qpjv2FuW74asv2AK0vlXT3bxYZqWd+O0CpNOKGvxvPZr+IVYmp
e3D6ez0+tKtWYM2v1rRjLgzA8uV1zO6QdcVI6LHy3fAS0bY44d4YDpQyzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC4SVHw1YeFAcw5QRcmygxAQwDwRMB8GA1UdIwQY
MBaAFPDPSWM1fduYVfm6xMfZla3ImjcqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE05Sll6VjkyNWhWLWJyRXg5bVZyY2lhTnlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85NzU5MTItZmQwYy00MzE4LWIwYjAt
NmUwNTZiNjE3ZDJhLzEvOE05Sll6VjkyNWhWLWJyRXg5bVZyY2lhTnlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS85NzU5MTItZmQwYy00MzE4LWIwYjAtNmUwNTZiNjE3ZDJh
LzEvOE05Sll6VjkyNWhWLWJyRXg5bVZyY2lhTnlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOzf9iuLg
5Jfo4K9uXEA1S21q8F3O9VQ/z1QW4uPLwiJYgyw3oSfRZoZR4nbwfk/tL6NXcwRe
E2fUOH+XaFjmK2AccGl3lwO+5kzFTFEmLBKJCc3DTTteyjH0ZcVfzWWlJuTNGfW+
nq3GOIsA/dzLHX5pi5+5DzWlRvtfqT2PIcdqdSu5RBqvE9yQPJJYmgEOZKvw3gGE
Yt+2SXy03erhoJJwf9uFPZiW8LCwZM5lLynqs1+Vpk1GapabfWdeeqq/xFfP6B+9
/oxPQh/8hDB37+h6rlTZGKsFzE1DJWiJCtijGd0lviV8Ys77hvjNzz141OJ3GYcb
0FSFUaxjqRvE7Q==
-----END CERTIFICATE-----
Generated at Tue May 12 21:30:39 2026 by rpki-client