Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
File:                     7We7dYi4LXDYy3PU5FF39n7O8hM.mft (raw, json)
Hash identifier:          Q4Udf8j3wUewlD/D4KJ6VUIc+hmvnNpDoiEEkHqck5s=
Subject key identifier:   13:26:DE:D9:33:59:9B:CA:60:C6:16:E1:70:A9:A6:60:BF:DF:83:1F
Authority key identifier: ED:67:BB:75:88:B8:2D:70:D8:CB:73:D4:E4:51:77:F6:7E:CE:F2:13
Certificate issuer:       /CN=ed67bb7588b82d70d8cb73d4e45177f67ecef213
Certificate serial:       019E3117D2C3ADC74EABBA3837BC4B02137C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
Manifest number:          0653
Signing time:             Sat 16 May 2026 14:01:45 +0000
Manifest this update:     Sat 16 May 2026 14:01:45 +0000
Manifest next update:     Sun 17 May 2026 14:01:45 +0000
Files and hashes:         1: 7We7dYi4LXDYy3PU5FF39n7O8hM.crl (hash: UFR7AATsrz49HEP0xdHOUEt/t+fOh9UlqEjrF11rFl8=)
                          2: s7LS5E2_BqhGC5kkRJyj8qADFIY.roa (hash: F29Cc0fGTR/n9/kt6ymI38j28/wC/Ug/3ed8suC1jpQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:d2:c3:ad:c7:4e:ab:ba:38:37:bc:4b:02:13:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed67bb7588b82d70d8cb73d4e45177f67ecef213
        Validity
            Not Before: May 16 14:01:45 2026 GMT
            Not After : May 17 14:01:45 2026 GMT
        Subject: CN=1326ded933599bca60c616e170a9a660bfdf831f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ae:c9:fc:88:c4:1e:aa:08:8c:7a:f6:1f:3b:
                    ff:05:60:d1:db:1e:89:b3:01:eb:2d:fa:48:3d:4a:
                    73:ac:7e:07:34:f8:18:4e:a8:0a:8e:bd:1e:11:22:
                    40:0b:65:41:a8:f5:19:24:7e:e3:f8:7d:6a:d7:d0:
                    5b:4c:0d:94:05:55:3c:28:83:d1:7e:04:1c:95:88:
                    f5:eb:5e:7e:d1:06:81:b2:0e:b4:78:5f:31:57:2c:
                    dc:5e:64:db:19:36:c1:36:25:e0:1e:a6:0c:6a:a0:
                    ea:aa:d7:4b:20:0a:27:c1:0e:d6:03:3a:06:20:c4:
                    d4:56:3d:19:67:26:d6:ec:2b:4e:b2:66:2c:50:fb:
                    63:cb:c0:37:7d:79:27:2a:5a:bf:fd:23:d0:90:32:
                    f8:6b:7e:2e:61:cc:99:21:51:1f:21:3d:39:81:24:
                    12:c2:d9:ec:77:11:31:ff:13:44:3a:e7:db:e6:1f:
                    6b:4e:49:ed:a0:ad:19:87:c0:89:15:0e:69:ae:22:
                    c7:9e:27:30:bd:ae:9f:1a:54:d1:3e:4a:a4:aa:52:
                    40:56:66:21:7d:c9:ca:78:82:66:88:b4:bd:aa:af:
                    79:e2:d0:9c:6b:03:18:20:95:5a:c8:d3:11:68:c7:
                    af:77:23:10:13:7b:10:de:4f:30:b7:1a:5a:b8:bd:
                    73:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:26:DE:D9:33:59:9B:CA:60:C6:16:E1:70:A9:A6:60:BF:DF:83:1F
            X509v3 Authority Key Identifier:
                keyid:ED:67:BB:75:88:B8:2D:70:D8:CB:73:D4:E4:51:77:F6:7E:CE:F2:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:60:74:26:be:ef:8c:ab:66:29:c5:e8:70:af:00:cf:b4:9b:
         52:84:20:6b:30:56:86:b2:3c:01:09:8d:33:85:1f:14:ae:d7:
         7e:af:11:64:bc:c4:a0:45:1d:7a:93:b2:58:32:52:84:dd:bb:
         95:e8:c1:9a:98:6c:fa:a5:52:de:6e:79:3a:da:47:83:00:b5:
         b0:43:e9:89:d7:26:1c:0f:81:ce:a1:92:ea:a4:7e:d7:25:5d:
         f0:b7:78:46:29:61:d1:85:96:46:c1:ad:78:eb:6b:7f:64:9a:
         20:9b:93:e7:d5:20:8f:f5:2b:8e:f6:11:52:83:bf:c0:e7:2c:
         0e:9e:5a:ca:62:0a:4c:53:28:1c:f0:f0:38:66:61:39:fd:32:
         90:b2:3f:f6:c7:a7:2e:24:56:d4:c0:3f:ac:86:7b:79:a1:58:
         d8:55:81:fa:8b:ec:8f:75:d6:56:eb:53:32:d9:24:4f:3f:d2:
         b4:ab:cd:be:06:47:62:d0:4b:87:e7:02:4c:1d:37:2b:23:d9:
         9f:14:56:58:78:f9:dd:b3:47:44:29:ba:a0:ab:90:0f:8d:68:
         8f:a9:10:ba:31:a1:c3:43:98:50:9a:31:da:13:6d:bf:24:5c:
         a5:e8:81:96:d0:46:73:76:42:6e:c9:36:29:e7:ca:d3:91:e4:
         9d:1d:8b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:11:58 2026 by rpki-client