Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/7BZ7trBh__pindKoTM99tExxo1E.mft
File:                     7BZ7trBh__pindKoTM99tExxo1E.mft (raw, json)
Hash identifier:          57YWoYXny8VMPBhBtuCos8962+E68AWV0IF6Fg+R4TQ=
Subject key identifier:   97:80:67:D8:5B:12:C4:FF:07:FF:6A:7B:88:EE:C1:6B:18:F5:C2:6D
Authority key identifier: EC:16:7B:B6:B0:61:FF:FA:62:9D:D2:A8:4C:CF:7D:B4:4C:71:A3:51
Certificate issuer:       /CN=ec167bb6b061fffa629dd2a84ccf7db44c71a351
Certificate serial:       019DF539A211EABB81E63685605E2AA19B36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7BZ7trBh__pindKoTM99tExxo1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/7BZ7trBh__pindKoTM99tExxo1E.mft
Manifest number:          18F2
Signing time:             Mon 04 May 2026 23:01:28 +0000
Manifest this update:     Mon 04 May 2026 23:01:28 +0000
Manifest next update:     Tue 05 May 2026 23:01:28 +0000
Files and hashes:         1: 7BZ7trBh__pindKoTM99tExxo1E.crl (hash: LL42/jH8xYYFy6yZTXz0yiYXm48HisNhkvPrQOs/Qiw=)
                          2: TE-zkB1WXTHRYrdiQgGmk6uSVdQ.roa (hash: eRgAHRTvSReUmr1Kc9vOCDCB9vNQ0s5lkzXZyGteC2Q=)
                          3: cE9z_vi7aIN7R1MRmejkUdogCNM.roa (hash: ErypDac6PMXFFeqxfqyYQBUhuGPwndIrMS3m77VeKJg=)
                          4: e9AyjlXwXBjeN_sQYf5sT7IZ60k.roa (hash: 5BeMkSTwe8lYH/6FFSl6JdJloHvDA2cuHQFyNcB8z8k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/7BZ7trBh__pindKoTM99tExxo1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/7BZ7trBh__pindKoTM99tExxo1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7BZ7trBh__pindKoTM99tExxo1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 May 2026 21:39:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:f5:39:a2:11:ea:bb:81:e6:36:85:60:5e:2a:a1:9b:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec167bb6b061fffa629dd2a84ccf7db44c71a351
        Validity
            Not Before: May  4 23:01:28 2026 GMT
            Not After : May  5 23:01:28 2026 GMT
        Subject: CN=978067d85b12c4ff07ff6a7b88eec16b18f5c26d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3a:2b:80:5f:83:92:17:50:f0:9c:c4:f6:16:
                    d1:51:1e:d9:96:a0:b2:a3:e3:d2:d9:7d:33:bf:7d:
                    11:11:ad:17:00:b0:73:d1:f6:63:3a:82:23:51:5f:
                    75:95:16:14:66:79:13:52:7c:e3:3f:88:90:42:e2:
                    43:50:b6:37:93:8e:28:55:26:8f:2e:0c:e1:3a:cb:
                    21:a6:ab:42:63:da:33:b0:a6:04:86:12:5a:1f:77:
                    c7:32:4c:8c:58:e9:cf:c8:06:3f:2c:32:75:7b:20:
                    aa:04:c8:b4:ea:6c:e7:14:af:c1:2b:1d:5b:ca:66:
                    ae:18:96:9f:bd:46:b0:be:58:cb:fe:3b:60:22:dc:
                    8a:fd:28:31:3c:37:17:df:f1:11:e9:a9:ac:df:be:
                    c1:0a:ba:93:bf:48:5d:cb:40:18:c3:95:7f:ac:ac:
                    b7:b0:7e:98:b2:7a:97:84:cc:de:0f:3f:77:41:58:
                    da:01:69:6a:c4:3e:70:f6:67:3d:8f:d1:9f:d5:4f:
                    87:5c:3b:33:62:ba:99:c6:59:f0:15:92:65:11:0a:
                    75:a0:78:90:df:35:00:62:2b:5d:5b:51:da:82:55:
                    74:eb:51:d6:6f:48:47:aa:f4:44:c7:d6:0a:81:63:
                    21:af:fa:06:a3:72:ef:a9:9f:d9:c1:19:41:2a:06:
                    51:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:80:67:D8:5B:12:C4:FF:07:FF:6A:7B:88:EE:C1:6B:18:F5:C2:6D
            X509v3 Authority Key Identifier:
                keyid:EC:16:7B:B6:B0:61:FF:FA:62:9D:D2:A8:4C:CF:7D:B4:4C:71:A3:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7BZ7trBh__pindKoTM99tExxo1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/7BZ7trBh__pindKoTM99tExxo1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/7BZ7trBh__pindKoTM99tExxo1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:3d:a5:4f:03:3d:62:71:0a:51:6e:ee:1a:72:f0:2e:95:cb:
         5a:5a:e3:4a:15:bd:b3:f4:4a:d2:aa:d7:51:ae:04:74:ea:f5:
         12:66:b8:7e:d9:29:6c:98:34:5c:49:f5:ad:1a:c1:52:39:ef:
         a9:f9:e0:5a:5c:63:12:ba:b7:be:ea:08:76:0d:72:9d:80:86:
         36:06:2c:b4:fa:17:75:e8:b8:9b:6b:30:fe:f2:76:c7:e9:01:
         8f:ac:4a:66:ab:8d:d6:5a:d7:ed:1c:0f:fc:50:71:10:aa:60:
         e0:06:6b:64:17:b6:41:d9:df:56:f8:e7:09:e4:af:47:ce:c4:
         34:99:a9:db:3e:5c:73:81:d2:61:6f:73:b4:21:45:67:48:f7:
         23:e1:f9:35:65:b7:3a:d5:43:30:a1:52:df:81:c5:ca:8f:44:
         b8:4b:18:59:d9:14:4d:02:a5:7b:27:64:b7:90:59:6d:bf:69:
         c6:79:ac:fd:ff:1a:73:3c:f9:90:72:06:9a:9d:be:04:31:15:
         ba:bd:29:ee:68:3f:bd:ef:5a:fe:27:5d:0b:ea:65:d0:14:9d:
         bf:23:42:15:2f:cd:c3:fa:74:4c:74:e9:64:1b:0b:98:d9:23:
         d5:b0:14:cc:68:a3:a2:47:56:7d:4c:ed:04:5b:c3:a6:0d:89:
         02:7a:7d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 05:46:59 2026 by rpki-client