Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
File:                     987QIfmRTRLUGNmqI4yTgl6l9gU.mft (raw, json)
Hash identifier:          p4m5/oMRPpoGG0+OoQE9Ue5Om1x1Sh37ITer+1O35Rg=
Subject key identifier:   CE:8A:E8:54:CB:0D:57:0D:61:7C:38:30:01:67:77:AE:D5:96:77:EF
Authority key identifier: F7:CE:D0:21:F9:91:4D:12:D4:18:D9:AA:23:8C:93:82:5E:A5:F6:05
Certificate issuer:       /CN=f7ced021f9914d12d418d9aa238c93825ea5f605
Certificate serial:       019E2A02338BC7B6F110A2B011259E9B1561
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
Manifest number:          10CD
Signing time:             Fri 15 May 2026 05:00:47 +0000
Manifest this update:     Fri 15 May 2026 05:00:47 +0000
Manifest next update:     Sat 16 May 2026 05:00:47 +0000
Files and hashes:         1: 987QIfmRTRLUGNmqI4yTgl6l9gU.crl (hash: y0yEcyiULKy1w25mWMAtMVovIaRkOu5Z7iUOSs2nOLI=)
                          2: q7302L2OQ1J4JgKpMluxPnKa3L4.roa (hash: CogkGEqQAlbPJasD50LgFH8JZg8Ucl8+7Lw8QmjihaM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:02:33:8b:c7:b6:f1:10:a2:b0:11:25:9e:9b:15:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7ced021f9914d12d418d9aa238c93825ea5f605
        Validity
            Not Before: May 15 05:00:47 2026 GMT
            Not After : May 16 05:00:47 2026 GMT
        Subject: CN=ce8ae854cb0d570d617c3830016777aed59677ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a9:8c:f6:58:c4:63:9f:07:ae:06:46:f5:3f:
                    d4:b2:81:2f:5f:8b:a7:a1:1c:3d:21:68:08:24:49:
                    f8:48:b6:af:b9:c4:8c:5b:f4:15:73:15:67:33:fd:
                    1a:f4:57:68:52:c0:0d:06:7c:6c:44:a8:3d:c9:57:
                    c2:85:00:1c:11:ef:83:21:45:ea:b7:47:2e:48:57:
                    69:e6:52:b8:83:69:31:4a:ed:0d:7c:97:80:26:49:
                    9e:0e:e7:ac:58:8c:51:4a:df:41:45:c9:c3:af:9a:
                    23:39:d2:b1:99:05:7a:67:c7:e3:1c:8f:2a:d0:ba:
                    17:c4:f0:1b:9f:f4:05:a4:67:db:ee:9b:33:db:a5:
                    29:be:c0:47:66:a8:49:b1:65:b6:36:72:20:74:8e:
                    ae:4d:71:56:b9:6c:94:ef:b5:72:ac:a7:09:4d:fd:
                    41:66:a6:e5:7f:9b:a6:ae:82:77:af:a6:12:b7:3f:
                    5f:67:c2:ab:de:93:31:85:40:2a:c8:cf:52:9e:dc:
                    2c:cf:b5:1d:bb:70:5e:32:26:e0:69:97:ea:9a:e5:
                    0b:15:e7:be:8c:8b:88:9c:9b:48:6f:1b:a9:be:c1:
                    28:71:e9:f7:6e:21:cf:da:61:54:61:97:84:67:5b:
                    57:66:5d:62:2b:3b:86:47:54:41:6f:90:08:d9:33:
                    f4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:8A:E8:54:CB:0D:57:0D:61:7C:38:30:01:67:77:AE:D5:96:77:EF
            X509v3 Authority Key Identifier:
                keyid:F7:CE:D0:21:F9:91:4D:12:D4:18:D9:AA:23:8C:93:82:5E:A5:F6:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:22:2e:f8:66:84:8c:68:72:50:40:33:2f:0c:37:89:17:8f:
         03:fb:9c:e9:18:5a:53:4a:9b:cd:f1:ae:62:00:75:06:51:bf:
         37:03:95:2c:58:1d:17:b5:fe:2e:0c:d6:48:be:7d:70:a9:e8:
         7a:a0:36:c7:44:e1:02:a1:4c:a6:47:1e:d2:b8:29:04:aa:12:
         7a:28:42:f6:73:34:7a:8b:44:f7:32:b4:51:7e:20:5e:22:32:
         9c:fd:69:6f:96:a0:81:e3:c8:bb:06:8c:1e:71:a4:f8:b3:28:
         e5:46:af:ec:4a:f8:3e:13:24:bf:16:a8:df:f6:b9:86:83:09:
         f7:de:16:6e:6c:f8:51:2c:93:b3:8b:b3:6a:ee:14:fc:14:7c:
         5f:1c:08:e0:56:1c:55:5e:15:48:86:e6:fd:0e:53:e3:0d:9c:
         0e:94:ea:30:28:9d:e0:45:74:70:24:37:ef:f9:d7:d1:d1:f5:
         61:b5:32:75:39:68:60:4f:fd:66:d4:02:81:3f:c1:db:8d:96:
         d0:71:fa:6f:56:d4:20:4b:72:c9:64:1e:57:6f:dc:77:1d:25:
         0c:bb:b4:29:0b:69:37:57:26:10:a1:a3:3e:87:76:fe:49:e9:
         96:73:41:a5:90:6a:5c:d7:23:10:9f:bb:e4:07:a1:cf:db:e7:
         51:ec:d6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 08:26:45 2026 by rpki-client