Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft
File:                     7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft (raw, json)
Hash identifier:          S3oJ/YGOAGC7XF0T/Bby0YFak+z5/LzKCqq94USynPE=
Subject key identifier:   67:FD:9E:6C:9F:FA:1D:32:35:7A:9B:DC:3B:0A:B5:12:A7:BC:D7:B1
Authority key identifier: EF:E1:53:41:D2:AF:C6:A8:57:A5:84:19:9F:C7:FB:07:C1:70:1F:C6
Certificate issuer:       /CN=efe15341d2afc6a857a584199fc7fb07c1701fc6
Certificate serial:       019E2FCD45BB4EF06FE7EECF18A169A71D5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft
Manifest number:          1056
Signing time:             Sat 16 May 2026 08:00:42 +0000
Manifest this update:     Sat 16 May 2026 08:00:42 +0000
Manifest next update:     Sun 17 May 2026 08:00:42 +0000
Files and hashes:         1: 7-FTQdKvxqhXpYQZn8f7B8FwH8Y.crl (hash: 4LdA9EZ5kbkyXGIfr8zjt48iIsGid+5yFbBM4ha/xFM=)
                          2: yc7G-ROKb-E3Qa_pTySk_r80ExA.roa (hash: Oq1bVdBMV8pMHPuNlBGQjQUpA0Eb9NSaz7n09Cauln4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:cd:45:bb:4e:f0:6f:e7:ee:cf:18:a1:69:a7:1d:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efe15341d2afc6a857a584199fc7fb07c1701fc6
        Validity
            Not Before: May 16 08:00:42 2026 GMT
            Not After : May 17 08:00:42 2026 GMT
        Subject: CN=67fd9e6c9ffa1d32357a9bdc3b0ab512a7bcd7b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8a:4d:ec:1f:f1:d5:45:b0:0f:1e:00:f7:a2:
                    69:78:2b:aa:f2:7a:4c:dd:66:50:c1:db:fc:0b:2e:
                    0a:a5:bf:3c:69:9d:a1:66:9f:b5:21:74:ee:5c:cb:
                    42:c2:03:17:9b:33:32:04:5e:a2:65:a2:c8:4d:05:
                    36:b6:94:c0:99:7b:e7:42:f8:fe:1f:ac:7f:3e:96:
                    dd:8d:ee:31:4d:15:3f:b9:7f:57:54:79:a4:67:0a:
                    7d:9b:96:07:dd:09:de:0e:24:02:4d:2f:5f:ef:73:
                    05:0e:1b:18:2e:dc:35:6a:4d:1e:a3:5c:fb:4e:be:
                    6c:1c:8d:55:08:2b:12:54:fa:d4:9f:60:1c:1b:7d:
                    95:37:bd:35:00:0a:2c:df:ac:02:b7:96:2d:73:b5:
                    c3:fa:59:cc:09:68:5a:d9:03:12:0a:60:be:19:26:
                    e8:19:8f:b6:59:6f:8d:65:7e:ee:92:c8:ad:0d:de:
                    08:a6:2b:e1:b6:d5:10:dd:ad:ea:dc:c9:ee:e9:b2:
                    01:c4:00:b1:53:a6:9a:42:89:ec:26:17:a7:20:8e:
                    2b:fe:0f:44:4a:93:d3:ad:2d:1e:b9:cd:4d:ca:fc:
                    ed:c3:57:33:5f:a7:c8:b5:ab:c0:18:cd:6f:2e:1a:
                    3b:61:75:99:c4:de:02:bc:46:d3:4e:87:c5:a4:21:
                    35:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:FD:9E:6C:9F:FA:1D:32:35:7A:9B:DC:3B:0A:B5:12:A7:BC:D7:B1
            X509v3 Authority Key Identifier:
                keyid:EF:E1:53:41:D2:AF:C6:A8:57:A5:84:19:9F:C7:FB:07:C1:70:1F:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:99:ae:e8:30:90:36:10:aa:18:23:08:8b:69:72:51:d8:88:
         02:a2:0d:74:df:30:97:e9:05:7b:66:e3:dc:66:76:d0:df:07:
         bc:2c:03:dc:32:d5:39:cf:e3:f0:76:68:c8:55:bb:dc:a8:e2:
         94:55:38:5c:61:2e:07:5a:e0:9f:71:a0:b7:c9:de:6e:63:8f:
         9d:fd:ad:cb:68:9e:9f:5d:1f:5d:7e:00:07:5b:6b:87:4e:55:
         fb:ca:eb:2f:2b:21:62:3c:5b:d0:bf:88:c4:65:46:a0:1b:20:
         fe:18:0e:e9:ca:f1:28:7e:fc:38:c8:a4:42:36:ae:d4:3b:e6:
         18:ae:f6:33:e7:51:06:0f:53:bc:4b:2a:03:ac:15:e5:2d:e7:
         1a:cd:a4:43:e6:03:be:d0:9c:e0:3b:ac:f5:15:a6:7f:a7:25:
         8c:2e:14:65:43:66:e5:c1:5b:f4:6c:76:da:1a:4b:9f:a1:61:
         bd:58:71:14:ce:67:a9:04:4f:ff:5b:c6:0a:52:8b:14:38:c8:
         ef:c7:aa:a6:14:d4:4c:17:57:5d:56:fe:88:28:40:d5:c3:3f:
         29:a9:65:2b:ef:b7:02:31:e3:1e:52:79:b1:ce:f0:5b:bb:82:
         e7:30:51:f7:1e:fe:f1:d8:0f:c3:f3:ce:2e:ca:f7:c3:69:b0:
         ad:a7:14:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:13:26 2026 by rpki-client