Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
File:                     7We7dYi4LXDYy3PU5FF39n7O8hM.mft (raw, json)
Hash identifier:          QZgsj6OjGL7idnCeiKAxtMUYm0qSRBLIwWCLNrTvTYQ=
Subject key identifier:   75:D6:88:E0:5E:3C:FC:92:E4:B1:2D:2E:3E:5D:E0:08:A8:05:94:8A
Authority key identifier: ED:67:BB:75:88:B8:2D:70:D8:CB:73:D4:E4:51:77:F6:7E:CE:F2:13
Certificate issuer:       /CN=ed67bb7588b82d70d8cb73d4e45177f67ecef213
Certificate serial:       019D39E5EECC623728B0A76734BD55065C81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
Manifest number:          05D3
Signing time:             Sun 29 Mar 2026 14:01:03 +0000
Manifest this update:     Sun 29 Mar 2026 14:01:03 +0000
Manifest next update:     Mon 30 Mar 2026 14:01:03 +0000
Files and hashes:         1: 7We7dYi4LXDYy3PU5FF39n7O8hM.crl (hash: D0/1TM+EUIo1aS28Dagj6tRQgZvRoGubMNi45uQD3Ok=)
                          2: s7LS5E2_BqhGC5kkRJyj8qADFIY.roa (hash: F29Cc0fGTR/n9/kt6ymI38j28/wC/Ug/3ed8suC1jpQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:e5:ee:cc:62:37:28:b0:a7:67:34:bd:55:06:5c:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed67bb7588b82d70d8cb73d4e45177f67ecef213
        Validity
            Not Before: Mar 29 14:01:03 2026 GMT
            Not After : Mar 30 14:01:03 2026 GMT
        Subject: CN=75d688e05e3cfc92e4b12d2e3e5de008a805948a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:91:7e:8e:79:a6:3b:e0:7e:e6:37:0c:a2:93:
                    ea:34:99:f3:4b:b9:2d:33:c5:bc:cb:4f:8c:3d:9e:
                    ee:2b:e6:0b:30:d5:2a:bf:dd:9a:a1:b1:09:73:42:
                    2f:29:51:d8:b2:4c:8d:ca:1c:16:94:8a:ae:b8:bc:
                    57:b1:34:d8:04:51:12:d0:2e:36:a4:78:30:e9:1f:
                    f2:d7:db:f2:95:09:44:dc:86:dc:32:40:05:ad:ac:
                    92:3b:05:75:61:64:47:24:c2:cd:cc:8c:7f:97:b1:
                    86:f6:f2:2b:65:2f:be:30:76:44:87:25:89:1c:e5:
                    40:70:04:34:9a:aa:9c:a3:90:7b:fa:a1:4f:89:f1:
                    b2:7b:d4:68:19:4c:14:0a:e7:bb:80:07:82:16:8a:
                    b6:5c:d8:02:bf:7d:2d:fc:26:de:d6:40:a2:5e:cb:
                    f5:02:a5:71:88:9f:76:58:8a:39:be:41:1d:2c:c5:
                    44:6d:26:c1:4e:43:a7:13:d8:80:82:37:73:63:42:
                    56:37:75:f1:d1:6a:ff:3e:e3:79:ce:47:ad:48:49:
                    0f:cc:89:d3:01:d0:95:f3:89:ab:f0:f1:b3:ff:0a:
                    68:e6:78:0a:14:17:1c:23:ef:36:ed:8f:80:aa:37:
                    c8:cd:31:4e:7a:94:59:18:53:93:80:88:c9:a0:38:
                    b3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D6:88:E0:5E:3C:FC:92:E4:B1:2D:2E:3E:5D:E0:08:A8:05:94:8A
            X509v3 Authority Key Identifier:
                keyid:ED:67:BB:75:88:B8:2D:70:D8:CB:73:D4:E4:51:77:F6:7E:CE:F2:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:a6:91:41:a7:21:e4:46:17:cb:a8:85:1d:f0:74:60:29:c6:
         d2:a7:87:62:f3:ce:87:8e:6f:5f:1e:71:b8:fb:4b:d4:fa:c7:
         5e:d6:1e:a1:00:ec:8c:7c:0f:ca:69:10:16:81:e9:d4:47:38:
         33:54:f5:6d:5e:10:e4:01:4d:5f:5e:4b:21:8d:ff:99:55:3f:
         80:c7:b0:10:5d:3d:5c:50:09:3e:f3:bb:06:ef:13:47:00:8e:
         dc:6e:97:d9:68:cb:cd:82:17:24:28:28:c7:62:aa:23:53:02:
         4f:6b:47:97:e2:82:61:07:6d:e7:40:8f:47:42:de:0f:ed:2a:
         a4:5a:43:f9:43:ec:e7:65:13:cf:01:28:a8:4b:cb:56:d0:f8:
         1b:d5:6d:ea:22:4c:6d:da:7c:9c:76:30:ca:b9:c6:fd:8e:e2:
         2f:f4:62:87:f2:d2:da:ac:1c:d2:f8:4a:5f:3e:7d:c0:0b:ad:
         88:25:23:a2:38:c7:85:7b:07:01:0d:b9:13:66:9e:db:65:3b:
         08:8b:d5:2f:f3:91:f3:57:d0:65:b5:89:77:05:93:88:9a:ff:
         0f:7b:d5:f8:f1:7d:96:02:7c:06:16:c6:30:30:48:4d:90:41:
         77:95:46:86:83:84:ab:6f:c5:ca:57:cc:a6:24:ed:f8:49:69:
         f4:66:d4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:57:53 2026 by rpki-client