Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
File:                     1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft (raw, json)
Hash identifier:          V3NlD6wSpzIdtr1ImV1a0/uA8ooxS2Cq0Pa8cLm+tIU=
Subject key identifier:   21:DA:76:F1:45:BA:28:CC:C6:F9:1C:F2:53:18:A1:94:E0:F7:64:FE
Authority key identifier: F8:B8:DA:60:81:37:F8:4E:45:45:32:0B:4A:3B:B0:49:61:D2:B1:2B
Certificate issuer:       /CN=f8b8da608137f84e4545320b4a3bb04961d2b12b
Certificate serial:       019E3072C330C564000311BD4B573080F157
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
Manifest number:          07EE
Signing time:             Sat 16 May 2026 11:01:27 +0000
Manifest this update:     Sat 16 May 2026 11:01:27 +0000
Manifest next update:     Sun 17 May 2026 11:01:27 +0000
Files and hashes:         1: 1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl (hash: dKbpN+rnY034Wj9kSZL6IwraI7ajsnIqxj8E05fJxxU=)
                          2: JpIB4nkPEhTLh9OLsKFtaIBTfLs.roa (hash: pRfl+oPO95G6GyCTV4Tx86Y6/zpSH8wEr4yMBAKE3Pg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:c3:30:c5:64:00:03:11:bd:4b:57:30:80:f1:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8b8da608137f84e4545320b4a3bb04961d2b12b
        Validity
            Not Before: May 16 11:01:27 2026 GMT
            Not After : May 17 11:01:27 2026 GMT
        Subject: CN=21da76f145ba28ccc6f91cf25318a194e0f764fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:44:3b:67:cf:89:f0:33:9d:2a:f5:45:6e:12:
                    9b:64:cd:ac:bf:35:bd:33:3e:dd:00:39:71:ab:d4:
                    88:97:48:27:10:5a:6c:4d:1e:28:c7:fa:2e:63:c1:
                    3c:88:14:36:b7:4b:42:b7:66:41:48:cb:46:e2:e5:
                    b2:b1:82:18:8e:e9:eb:e4:04:1c:a0:ad:ea:e8:b1:
                    56:77:ea:df:24:7b:5f:72:37:c3:88:ed:34:17:ad:
                    8f:f3:4c:3d:bb:dd:f8:41:85:ce:9d:25:e3:2f:5b:
                    b2:2d:0f:9b:c0:c1:b7:7c:4d:0e:59:c5:a0:5a:46:
                    f7:51:ec:7d:01:6c:32:52:46:95:ec:cc:ca:1f:a2:
                    82:7d:99:c0:af:d2:cb:b6:b4:24:5c:57:96:e9:86:
                    36:6f:bb:4a:f0:7c:4a:a2:ec:21:44:f3:a2:9f:58:
                    ed:a5:f0:b3:38:68:50:32:50:4e:54:ff:86:2b:58:
                    78:35:b6:22:34:46:1b:57:2b:0f:d2:f1:11:2b:4d:
                    31:da:cf:85:89:74:d9:2f:9f:e5:e3:7a:0d:a3:7c:
                    3e:01:bc:a9:3d:3d:1b:5a:0b:8b:03:ff:54:94:6a:
                    56:66:81:cc:cb:96:e7:b5:50:64:bc:fd:cd:df:20:
                    21:b5:d9:30:a5:1b:eb:51:c7:8f:cd:c1:1a:5e:2a:
                    66:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:DA:76:F1:45:BA:28:CC:C6:F9:1C:F2:53:18:A1:94:E0:F7:64:FE
            X509v3 Authority Key Identifier:
                keyid:F8:B8:DA:60:81:37:F8:4E:45:45:32:0B:4A:3B:B0:49:61:D2:B1:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:fc:d7:a4:e5:7f:47:77:1a:9a:03:28:43:94:ab:49:1c:4a:
         34:4f:d6:c1:ca:04:9a:71:2c:d1:39:5f:22:b8:97:bc:58:ad:
         ff:55:e4:ad:45:66:c2:31:24:b5:78:b8:ab:71:66:0d:4c:3f:
         74:a5:df:e7:5c:66:4f:27:a4:c7:09:e9:e8:d5:e8:6a:26:44:
         2d:8d:c6:af:81:c5:15:60:da:74:43:65:3c:a6:80:82:ad:d8:
         a7:8b:ec:d9:6f:76:1f:32:17:7f:09:f9:78:d6:8a:2d:9c:61:
         17:7d:ff:91:8d:54:31:c3:4a:f2:21:13:2f:d3:d5:ac:f7:90:
         59:04:e2:0b:c0:d9:f1:11:30:a2:42:e0:c1:c3:b2:4e:52:28:
         74:c8:9c:ea:d2:23:72:d3:9c:27:95:6f:1d:65:ed:12:59:1d:
         ce:e2:61:b3:85:bf:65:5b:79:23:3b:b0:df:30:00:63:41:35:
         79:67:24:e3:3e:b6:6c:11:b1:ff:53:5e:b0:3f:f4:6a:7b:b0:
         eb:3c:ad:63:fa:46:f8:dc:39:f8:6a:99:7f:c2:e4:e2:b0:30:
         73:7c:fd:42:75:44:43:51:f3:52:68:33:4a:90:0b:85:f9:8f:
         3c:6a:9b:d2:57:34:17:4c:1e:39:91:4c:cb:44:c7:c5:1d:fc:
         26:fc:69:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:40:02 2026 by rpki-client