Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
File:                     1u7ifzwsXJ7FeArNorbrBAptJaE.mft (raw, json)
Hash identifier:          sq9O+3vZ7kj9V5C4jiQ59LDoP3ldjk8GR4V9osS0YPI=
Subject key identifier:   3E:26:75:31:BE:15:7B:D0:0B:E9:3F:D6:52:2B:AE:C9:5C:36:E9:3E
Authority key identifier: D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1
Certificate issuer:       /CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1
Certificate serial:       019E3117AB6363FD706053BF455575490F29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
Manifest number:          16F6
Signing time:             Sat 16 May 2026 14:01:35 +0000
Manifest this update:     Sat 16 May 2026 14:01:35 +0000
Manifest next update:     Sun 17 May 2026 14:01:35 +0000
Files and hashes:         1: 1u7ifzwsXJ7FeArNorbrBAptJaE.crl (hash: zsjnwD3D5HCQyL8WDeuPoN+AiKkT0kXfce4NdfekyA4=)
                          2: q3vaJOTC8w8YJydcJlzdNu2t6t0.roa (hash: 6HoX9dCuUvOi7bV1+OJY+cnUcJyW0sCh4AS88KCyve8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:ab:63:63:fd:70:60:53:bf:45:55:75:49:0f:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1
        Validity
            Not Before: May 16 14:01:35 2026 GMT
            Not After : May 17 14:01:35 2026 GMT
        Subject: CN=3e267531be157bd00be93fd6522baec95c36e93e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9a:b7:39:57:c5:e5:3c:d4:e7:5f:40:77:3f:
                    2c:8b:b7:21:b2:e4:9a:ab:0d:53:b4:03:50:00:b5:
                    9f:ad:87:3a:45:af:05:36:bc:b5:66:d6:38:29:85:
                    58:f0:16:81:cc:2f:19:a7:0b:a9:df:f4:42:25:4c:
                    68:b3:74:e6:7b:c5:e0:f2:59:e1:ff:c5:70:31:41:
                    d0:f6:7e:07:0a:42:e1:1d:30:b8:af:27:b1:46:03:
                    99:4d:3b:2d:19:c6:a3:58:5c:84:14:1c:0b:c2:d8:
                    ea:7c:53:b0:8e:71:5f:65:96:c4:cd:7c:3f:e1:31:
                    1f:30:22:21:2f:27:dd:87:d5:db:81:3c:60:2f:0a:
                    95:a2:5b:27:cd:93:80:27:2c:48:f2:77:fe:cb:92:
                    23:ed:97:cd:c6:3d:09:bb:cb:95:45:76:4c:77:05:
                    74:23:10:41:c5:8a:3b:6d:48:04:9b:d8:9c:93:80:
                    b2:99:28:f3:51:98:2c:26:66:a9:f6:64:e0:f3:69:
                    dd:17:6d:c9:40:9c:7d:62:54:f1:cb:29:8f:2f:00:
                    50:7c:9d:65:2b:1c:0e:4e:1b:04:d3:59:2a:16:e2:
                    9b:57:e4:75:6d:e8:fd:18:b1:2d:9d:52:2a:4f:c9:
                    7c:24:83:2c:b5:2f:a6:93:35:93:cb:ac:ef:0f:5a:
                    70:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:26:75:31:BE:15:7B:D0:0B:E9:3F:D6:52:2B:AE:C9:5C:36:E9:3E
            X509v3 Authority Key Identifier:
                keyid:D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:af:03:7f:80:9f:f7:88:a4:ea:52:94:18:63:6c:72:71:96:
         8f:ea:6c:83:ca:70:c9:51:65:13:fc:b0:41:e1:95:2f:f7:58:
         a7:9e:35:68:5b:94:85:cf:c1:11:a0:65:2a:71:8e:b2:d5:60:
         9d:d4:5e:c8:22:b3:b1:58:83:bd:5a:58:84:49:96:07:19:46:
         f5:7c:31:5a:10:33:2d:c6:87:f9:10:bd:a8:f1:df:bc:fe:67:
         d5:e1:6b:bb:ca:ea:15:8b:c7:e0:fb:ff:ea:1a:d1:7d:3d:8f:
         5e:2e:7e:47:5f:25:05:a0:38:8e:9e:91:38:77:4a:1c:a2:48:
         53:eb:ea:13:d7:b7:fa:7a:4d:f2:01:cb:25:bb:9b:90:6f:6d:
         71:11:7d:c7:38:cf:d6:9b:49:e7:26:bc:d6:10:9a:55:98:01:
         96:e0:ca:54:0c:fa:79:eb:47:4b:7a:33:37:97:7d:af:92:9d:
         26:6b:a4:66:71:ce:e5:75:84:9c:ff:70:a3:7e:9e:ea:47:37:
         cd:d1:3f:46:32:be:cb:59:e7:28:66:f0:d5:72:3a:2b:0c:25:
         6e:4d:f6:f4:32:60:57:1a:52:c1:00:58:70:33:22:e5:d8:ad:
         cf:bf:f9:f4:fd:31:c0:5f:ee:e0:b9:a5:f3:d3:c5:4d:c9:73:
         4c:c0:c7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:01 2026 by rpki-client