Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
File:                     0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft (raw, json)
Hash identifier:          GVJiUugjGw1tqzQohD+QBaOci00Swakymug2Mku7LYo=
Subject key identifier:   CC:BC:07:E9:07:C2:C8:23:FE:8F:70:E8:65:D2:30:2F:27:65:F5:0D
Authority key identifier: D0:9E:F2:09:3D:A1:5E:EC:90:EF:B8:37:B9:50:16:46:69:F6:19:8B
Certificate issuer:       /CN=d09ef2093da15eec90efb837b950164669f6198b
Certificate serial:       019E3004B823F4052144BD24CCB5CE620FE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
Manifest number:          08C7
Signing time:             Sat 16 May 2026 09:01:15 +0000
Manifest this update:     Sat 16 May 2026 09:01:15 +0000
Manifest next update:     Sun 17 May 2026 09:01:15 +0000
Files and hashes:         1: 0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl (hash: I7R4q0buUlUdqiLHDAsBk2O7hZAi46JQMt4hFQVg4Lc=)
                          2: y0R9OFgldF2xPpgLWZUCfSkApQg.roa (hash: K3dYxSYTTkLjGKIU3PEtGoJyW8WxL0sMjVKEq6R8Rf4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:04:b8:23:f4:05:21:44:bd:24:cc:b5:ce:62:0f:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d09ef2093da15eec90efb837b950164669f6198b
        Validity
            Not Before: May 16 09:01:15 2026 GMT
            Not After : May 17 09:01:15 2026 GMT
        Subject: CN=ccbc07e907c2c823fe8f70e865d2302f2765f50d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1a:29:60:13:88:0a:ef:8b:27:bc:e1:05:7b:
                    03:c2:55:05:8f:54:5e:2b:2f:6b:e8:fc:fe:19:49:
                    fb:d6:4b:83:cb:65:9c:97:d6:03:76:03:84:23:f9:
                    33:80:2c:e7:97:97:0d:a2:b5:55:5d:35:fa:2d:29:
                    82:56:7a:e7:2c:50:0e:52:59:c4:a6:bc:84:e5:71:
                    eb:8f:1a:c6:64:7e:a3:46:cf:27:36:db:c3:b0:21:
                    e7:65:3e:67:e1:43:e3:19:a6:8b:ec:79:7a:f4:07:
                    e0:0f:c3:d0:99:9f:ee:0e:40:cc:37:c8:9f:37:cd:
                    78:5d:ec:90:42:ec:fc:0e:99:64:42:74:81:f9:d9:
                    5f:7e:e0:dc:e3:eb:b5:65:9e:4a:2c:0c:bc:3e:94:
                    6d:90:5c:c7:92:b7:4f:72:0e:aa:1d:7b:f6:6c:32:
                    0b:78:69:cd:b7:6e:08:d9:34:eb:9c:f1:70:e0:0b:
                    e8:77:01:8a:d5:c8:ef:93:76:7b:46:07:ed:a8:42:
                    1e:02:fe:c7:04:43:3c:32:66:8e:3c:5b:42:8e:40:
                    6f:9b:8c:c0:fd:90:17:d3:d0:bb:b3:44:eb:bb:00:
                    9b:8d:3b:0e:a9:1a:b3:89:de:3d:4c:17:13:d8:37:
                    fa:9b:9f:6b:e9:d8:e6:c8:0e:c7:bc:f1:f2:49:21:
                    cd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:BC:07:E9:07:C2:C8:23:FE:8F:70:E8:65:D2:30:2F:27:65:F5:0D
            X509v3 Authority Key Identifier:
                keyid:D0:9E:F2:09:3D:A1:5E:EC:90:EF:B8:37:B9:50:16:46:69:F6:19:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:57:be:85:5d:89:b4:dd:99:fc:63:0c:07:f1:10:8a:1c:59:
         80:31:9c:31:e3:98:99:da:fd:6c:b3:be:2e:dc:f6:b2:25:d8:
         96:7e:f6:46:22:7b:29:68:2d:8c:ca:63:42:60:b4:8d:a2:a8:
         91:44:1b:25:25:58:87:0a:00:ca:64:6c:29:b2:c6:1e:99:16:
         c0:fa:18:66:02:26:22:ee:dc:09:96:cb:1e:c9:96:4f:5a:c3:
         a8:f8:48:a0:1c:72:21:a0:e0:3d:d2:d8:a5:52:29:1f:d8:77:
         01:3d:c7:2c:70:17:9f:32:76:a0:7f:d4:cf:bb:82:84:93:5d:
         d4:0f:d6:76:56:65:28:32:17:c6:a0:c0:90:42:a3:d1:0e:9d:
         0c:5a:b3:58:58:0e:22:9a:ec:9e:d8:f6:78:99:be:50:a6:81:
         da:3f:f5:f6:16:2e:1c:28:62:53:8b:eb:bd:14:a1:cd:f0:54:
         a4:7b:fd:ab:2d:74:d6:19:8d:ee:7f:50:c5:70:e3:72:d0:83:
         6d:e7:90:99:d6:ca:b9:bf:25:25:7f:f1:40:39:d8:99:1f:98:
         0d:e1:f9:20:7e:40:c5:1b:85:6f:77:9e:cd:a2:d9:d9:c9:3e:
         81:79:02:c0:f7:a2:bf:38:85:e5:98:19:52:a4:fe:fa:66:a3:
         43:53:33:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:55:09 2026 by rpki-client