Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft
File:                     7etEJKvYbW70jbnnZG9TnG0QyIY.mft (raw, json)
Hash identifier:          6g01UR7pXMn5tEV3UTr06+SkzkYHtCsZl7noOCpC63s=
Subject key identifier:   1B:E8:6C:E8:5E:0E:8F:20:22:7A:D2:72:91:39:88:EF:1F:CC:C7:D8
Authority key identifier: ED:EB:44:24:AB:D8:6D:6E:F4:8D:B9:E7:64:6F:53:9C:6D:10:C8:86
Certificate issuer:       /CN=edeb4424abd86d6ef48db9e7646f539c6d10c886
Certificate serial:       019E3004A3283273D1B0314687B360467F8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7etEJKvYbW70jbnnZG9TnG0QyIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft
Manifest number:          0A55
Signing time:             Sat 16 May 2026 09:01:10 +0000
Manifest this update:     Sat 16 May 2026 09:01:10 +0000
Manifest next update:     Sun 17 May 2026 09:01:10 +0000
Files and hashes:         1: 7etEJKvYbW70jbnnZG9TnG0QyIY.crl (hash: U2tJ6NxIA2ghrZY47rMhs0fkIBCjKLFFposYqECp68Q=)
                          2: C77YJP8fJa8-Zz4rlDlE0c9emSo.roa (hash: DN6PsoZ+s4zlPu3wgZ94PNHVaR06pVMEb9575uK0WK4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7etEJKvYbW70jbnnZG9TnG0QyIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:04:a3:28:32:73:d1:b0:31:46:87:b3:60:46:7f:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edeb4424abd86d6ef48db9e7646f539c6d10c886
        Validity
            Not Before: May 16 09:01:10 2026 GMT
            Not After : May 17 09:01:10 2026 GMT
        Subject: CN=1be86ce85e0e8f20227ad272913988ef1fccc7d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7f:59:66:95:3f:04:aa:45:aa:af:4a:12:19:
                    6d:4b:66:43:e5:6a:a8:23:63:18:c5:af:8f:87:3b:
                    56:32:e5:a3:4a:3f:06:61:6f:9e:eb:69:69:51:cf:
                    65:e4:46:e8:56:af:8b:31:41:53:79:bc:7c:69:f4:
                    9b:da:af:38:24:5f:50:e3:74:ba:9e:48:6b:38:93:
                    3d:37:f9:0b:65:4e:93:97:2a:94:55:64:10:29:3a:
                    a4:b4:97:55:df:6d:c3:39:58:65:de:f4:59:8b:44:
                    33:d1:e8:04:e4:8c:cd:4e:e1:20:1e:80:76:60:d2:
                    e8:c0:e1:75:c9:1e:7b:7f:d1:60:a6:31:0d:fc:0a:
                    84:3b:04:9d:de:14:c4:4a:a8:9e:3e:9f:cb:0b:15:
                    1d:6b:23:65:82:5c:46:99:eb:92:e4:e0:7b:fa:65:
                    af:d5:76:a2:63:66:ea:81:b1:9f:26:df:87:8c:49:
                    59:56:4c:59:02:6b:57:e7:76:5a:cd:3e:10:f3:46:
                    82:43:e8:fd:28:fc:06:2e:e5:89:5b:af:d8:88:7c:
                    e7:d7:17:3f:0c:88:b2:7c:0d:41:fa:6a:a2:a4:5d:
                    6c:df:b3:f3:e6:41:7c:60:15:b2:f6:06:22:e0:cc:
                    85:9a:af:38:65:1c:18:46:b5:d5:b1:b2:d8:54:aa:
                    ad:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E8:6C:E8:5E:0E:8F:20:22:7A:D2:72:91:39:88:EF:1F:CC:C7:D8
            X509v3 Authority Key Identifier:
                keyid:ED:EB:44:24:AB:D8:6D:6E:F4:8D:B9:E7:64:6F:53:9C:6D:10:C8:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7etEJKvYbW70jbnnZG9TnG0QyIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:02:3c:36:d9:c7:ad:f8:52:22:0a:ee:84:03:11:bb:5b:41:
         21:5e:9e:99:c8:59:f4:98:67:c1:01:58:81:47:15:4d:79:b8:
         c4:98:2e:03:c4:6d:78:b9:fd:7f:2c:af:0a:71:88:a9:72:17:
         10:eb:9c:3b:80:1c:4a:ae:3f:4e:cd:c5:d3:6d:00:cb:55:f4:
         83:7e:0b:67:e0:82:d1:d5:45:14:65:f8:ee:42:d0:3b:bc:58:
         24:ca:66:91:6d:af:4a:88:b5:56:e6:86:c0:1b:cd:9b:e1:64:
         2e:18:de:09:69:96:03:08:f1:59:af:25:39:ac:9e:84:dc:e6:
         3a:f3:78:94:48:fd:7e:af:0b:ea:d7:f8:48:74:5e:29:b5:55:
         7d:15:fa:fa:5e:8c:93:72:f2:2e:96:c1:db:fc:74:42:c5:bd:
         0f:d9:59:6b:49:70:3d:e0:ec:30:92:c7:b3:8b:98:3d:7d:92:
         da:82:58:1e:24:ad:d5:c3:c6:64:d2:eb:b1:c8:72:c0:2c:e6:
         88:61:b6:cf:48:cc:5a:a2:34:66:dd:a2:08:c7:8c:53:5e:02:
         92:f6:42:e0:7c:aa:e9:f1:53:a5:6c:98:04:aa:ff:38:e8:2a:
         39:81:c9:b0:48:ee:f4:a3:58:d6:79:9f:0d:cf:0c:50:78:7f:
         8d:a7:0d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:26:21 2026 by rpki-client