Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft
File:                     7crL2itLMjHQi1HxbxsqfAgjetE.mft (raw, json)
Hash identifier:          FYLbTS8Re69aze3IPTopQ4vUedebr7Bw9/+75FQEFn4=
Subject key identifier:   D5:E4:CA:55:91:74:77:3F:6C:36:2A:DD:67:23:62:4F:50:78:2D:A5
Authority key identifier: ED:CA:CB:DA:2B:4B:32:31:D0:8B:51:F1:6F:1B:2A:7C:08:23:7A:D1
Certificate issuer:       /CN=edcacbda2b4b3231d08b51f16f1b2a7c08237ad1
Certificate serial:       019E30057EF84807F4D5D5CF0378FF4272AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7crL2itLMjHQi1HxbxsqfAgjetE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft
Manifest number:          057B
Signing time:             Sat 16 May 2026 09:02:06 +0000
Manifest this update:     Sat 16 May 2026 09:02:06 +0000
Manifest next update:     Sun 17 May 2026 09:02:06 +0000
Files and hashes:         1: 7crL2itLMjHQi1HxbxsqfAgjetE.crl (hash: cczvFlMENn4S4c+XpAk9kLT5H3K6ghBFLMdfvUZehP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7crL2itLMjHQi1HxbxsqfAgjetE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:05:7e:f8:48:07:f4:d5:d5:cf:03:78:ff:42:72:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edcacbda2b4b3231d08b51f16f1b2a7c08237ad1
        Validity
            Not Before: May 16 09:02:06 2026 GMT
            Not After : May 17 09:02:06 2026 GMT
        Subject: CN=d5e4ca559174773f6c362add6723624f50782da5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5d:0d:fd:c7:bf:26:01:7b:11:d5:b8:38:d2:
                    bc:b8:70:43:62:c5:3b:f4:be:5e:24:33:71:23:a4:
                    d1:2c:7e:d5:ee:87:38:b0:76:7b:b1:2b:22:4b:16:
                    1d:dc:8e:ca:d5:0c:4e:49:a7:82:34:8e:db:58:69:
                    d7:33:65:3c:92:df:e7:8f:d7:b9:63:f0:d1:7d:38:
                    ff:4c:b2:f0:f9:86:08:86:4b:8f:88:76:92:d3:d4:
                    ce:11:ec:23:dd:4f:3a:ac:84:bf:b9:75:2a:03:54:
                    bd:79:33:15:47:ae:6d:f4:4b:d4:58:6b:9d:99:62:
                    99:b6:a8:b3:f2:74:b4:f5:df:15:dd:34:57:7d:8c:
                    4b:ac:80:f7:ab:5a:0a:4d:b4:95:2d:6d:17:9a:f2:
                    00:c1:93:5c:3d:36:8e:e5:97:55:4b:da:74:df:0a:
                    f6:e7:06:72:c8:45:c6:75:d8:98:b8:8e:ef:d2:4f:
                    d0:7e:ae:af:bf:16:ee:a7:7d:2d:d9:2b:6e:10:36:
                    ae:f9:4a:c2:f3:c4:80:1d:2f:5d:33:b7:83:3a:1a:
                    10:f1:1a:ae:e1:b3:64:5b:23:61:1c:c1:a2:33:03:
                    7b:3e:e2:52:98:95:48:fc:f0:04:bf:15:6a:34:20:
                    fa:8b:60:28:66:70:b9:96:4f:95:48:17:ac:ca:50:
                    63:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E4:CA:55:91:74:77:3F:6C:36:2A:DD:67:23:62:4F:50:78:2D:A5
            X509v3 Authority Key Identifier:
                keyid:ED:CA:CB:DA:2B:4B:32:31:D0:8B:51:F1:6F:1B:2A:7C:08:23:7A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7crL2itLMjHQi1HxbxsqfAgjetE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:3d:9d:4c:54:a2:7a:21:44:d6:d1:e2:7d:64:48:f2:95:96:
         c1:4d:d4:45:69:80:2a:5e:f5:d7:36:20:e9:06:f8:ea:0f:84:
         6a:f8:53:54:2f:e9:50:67:69:b3:eb:1e:69:89:01:44:df:78:
         a8:8a:3d:58:5f:8b:ff:a4:4d:75:da:32:69:db:9a:ac:9a:d1:
         a8:3f:cf:06:32:59:cc:38:1a:3c:7a:11:57:41:0e:a7:1f:20:
         ae:b8:89:41:bb:a5:ef:04:13:50:b6:be:3a:83:4f:31:2b:ce:
         52:19:8c:f8:0d:a8:cc:ed:4b:19:6a:19:4d:f0:60:be:4e:a1:
         1c:33:9a:53:17:4e:04:9e:11:8d:ba:d8:3c:1e:c4:45:fc:ef:
         2b:9a:47:d1:fe:7f:20:8d:00:61:eb:7f:04:74:81:44:25:fc:
         aa:f7:df:bc:9a:cc:47:5e:b3:3d:0a:39:a6:56:d9:7d:be:65:
         31:df:77:6f:cb:c4:57:86:b1:17:74:f1:fc:c5:5e:d0:f3:2b:
         a3:1b:a6:c3:bb:e5:96:6d:96:1b:a4:50:65:e3:df:13:79:12:
         59:95:35:86:1e:3a:66:78:b9:cf:73:15:8c:1d:f8:9d:39:4d:
         f8:2f:76:25:40:72:27:4f:98:88:49:4c:dd:1e:46:b9:f1:a8:
         76:2a:e1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:34 2026 by rpki-client