Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.mft
File:                     B7tb-mSw1dGKMGGphpscpXFy6ro.mft (raw, json)
Hash identifier:          99VTtb6bqVrKSUe99lqjMFD5HrAtqxtLhblQkCaeOOY=
Subject key identifier:   A2:C6:9F:23:C0:BF:F6:C2:E9:7D:EE:8B:8A:81:44:59:60:11:19:A3
Authority key identifier: 07:BB:5B:FA:64:B0:D5:D1:8A:30:61:A9:86:9B:1C:A5:71:72:EA:BA
Certificate issuer:       /CN=07bb5bfa64b0d5d18a3061a9869b1ca57172eaba
Certificate serial:       019E3072C7AD071248DF459592F454B8490D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B7tb-mSw1dGKMGGphpscpXFy6ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.mft
Manifest number:          1910
Signing time:             Sat 16 May 2026 11:01:29 +0000
Manifest this update:     Sat 16 May 2026 11:01:29 +0000
Manifest next update:     Sun 17 May 2026 11:01:29 +0000
Files and hashes:         1: B7tb-mSw1dGKMGGphpscpXFy6ro.crl (hash: 9wwqaIVVAducjl1O7Guyp1T68JoSTMtxSxtuUxqNOoA=)
                          2: OtKLPaAsu0TSKxVTheZYE45uIv4.roa (hash: sV369+wKHa03W+MYhzuJvYumzEqh+GOUryRtR9pnkWE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B7tb-mSw1dGKMGGphpscpXFy6ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:c7:ad:07:12:48:df:45:95:92:f4:54:b8:49:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07bb5bfa64b0d5d18a3061a9869b1ca57172eaba
        Validity
            Not Before: May 16 11:01:29 2026 GMT
            Not After : May 17 11:01:29 2026 GMT
        Subject: CN=a2c69f23c0bff6c2e97dee8b8a814459601119a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ab:82:2f:69:87:3b:64:f6:36:b6:ff:d9:93:
                    d8:03:46:d6:61:43:89:85:4c:b5:ae:00:74:19:c3:
                    bc:05:f5:58:95:7d:f3:1a:e2:34:e2:1b:76:ea:21:
                    f5:99:6d:43:d5:d0:1d:c4:e2:d5:77:c9:e5:87:df:
                    9d:b6:93:d5:f6:85:e2:0b:68:99:50:30:63:e1:dc:
                    57:69:06:c3:1d:4f:c8:e9:c6:8e:b9:d4:5a:07:3b:
                    c1:6b:88:89:b1:b1:9c:89:ec:93:8a:b3:7d:bb:de:
                    01:d2:c7:04:c4:14:7d:88:3c:d6:99:5f:ca:ed:fa:
                    44:d1:61:e1:e8:93:a5:e9:7a:54:af:59:0c:ad:91:
                    fa:9e:74:76:47:1c:a7:01:57:ab:67:f8:e1:b3:20:
                    57:01:93:39:da:23:c2:f2:af:1f:da:d2:c1:5a:eb:
                    b5:f2:28:96:d0:7c:6b:c3:a5:19:de:43:95:2e:e6:
                    09:7b:50:a5:cf:4b:7f:e2:45:5a:1c:f7:28:2b:59:
                    2c:6c:9c:7b:ee:03:a2:e1:bf:f2:2a:33:6a:a0:05:
                    3c:a8:78:2d:da:1c:dc:11:8b:cb:1e:c4:e2:20:7c:
                    f3:fd:22:41:0c:f0:b0:50:bb:32:98:17:12:56:7e:
                    32:a8:03:33:0f:16:b8:ab:59:ca:b6:05:91:d8:00:
                    47:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C6:9F:23:C0:BF:F6:C2:E9:7D:EE:8B:8A:81:44:59:60:11:19:A3
            X509v3 Authority Key Identifier:
                keyid:07:BB:5B:FA:64:B0:D5:D1:8A:30:61:A9:86:9B:1C:A5:71:72:EA:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7tb-mSw1dGKMGGphpscpXFy6ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:fb:15:8a:de:ac:ed:ba:76:87:33:8e:f3:78:8f:d4:1f:0d:
         a3:9f:a4:69:2f:bc:3b:60:65:05:57:4c:14:26:6d:ef:f8:13:
         e7:f2:d0:b5:40:c2:ae:b9:d9:4c:20:f1:de:f6:5d:af:3b:eb:
         d5:88:17:c6:81:09:69:10:48:5e:41:24:6a:03:83:6e:4b:ab:
         e0:1f:33:be:32:4c:df:db:b8:2d:a7:b2:a6:c3:45:c5:eb:77:
         5c:ea:99:0d:e9:18:72:47:f3:5b:f8:12:32:28:fc:94:94:1b:
         b3:83:9d:f6:9b:b6:46:13:ab:4e:11:38:7e:d1:ee:3a:2c:ac:
         d4:76:1e:0c:44:7c:5e:e5:78:02:49:0f:07:e8:31:dd:69:1b:
         e4:4d:40:d1:77:b9:18:6d:a2:81:82:e9:69:eb:65:06:7a:c3:
         70:f0:8c:43:da:7f:de:e9:4d:51:e9:49:71:db:39:ff:36:35:
         e0:6c:13:ed:01:93:64:3c:15:cf:bd:9c:a4:a3:fd:1b:e1:3d:
         7f:a2:7c:b8:be:2a:b7:e5:d9:fd:e6:98:91:28:98:13:cf:ab:
         c4:3e:0d:f9:3e:fc:f3:04:99:13:52:09:ad:d9:54:16:fe:3a:
         32:8c:3d:4f:97:44:6a:e8:64:1a:10:da:f9:67:24:15:e8:ad:
         0f:0e:44:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:56:15 2026 by rpki-client