Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
File:                     7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft (raw, json)
Hash identifier:          yMfe8p+fHDhfqnd6GRr6RhNTkmHHIzpyvg0g0FiRing=
Subject key identifier:   12:F6:2C:FD:AF:66:45:A0:5F:35:78:E2:27:E5:75:D4:CE:45:73:FF
Authority key identifier: EC:EB:A2:E6:59:79:4B:12:21:5D:F1:FA:8A:BE:3F:CB:D6:68:6D:F7
Certificate issuer:       /CN=eceba2e659794b12215df1fa8abe3fcbd6686df7
Certificate serial:       019E30E02F493EB6E6F71E33C5C40CB6C990
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
Manifest number:          0D74
Signing time:             Sat 16 May 2026 13:00:58 +0000
Manifest this update:     Sat 16 May 2026 13:00:58 +0000
Manifest next update:     Sun 17 May 2026 13:00:58 +0000
Files and hashes:         1: 7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl (hash: 0wLIRycRUPC8K4Hzmkgaqw8qg4XB2BXW4+kei54ZR7k=)
                          2: HdaygFB4iSszAmMjo8uX2Se1nQA.roa (hash: UArj7jtroG3BsSDh4aM2iaAylpZS3vUew6s3b3GEueo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:2f:49:3e:b6:e6:f7:1e:33:c5:c4:0c:b6:c9:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eceba2e659794b12215df1fa8abe3fcbd6686df7
        Validity
            Not Before: May 16 13:00:58 2026 GMT
            Not After : May 17 13:00:58 2026 GMT
        Subject: CN=12f62cfdaf6645a05f3578e227e575d4ce4573ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c6:df:d5:0a:4e:54:14:04:62:29:d5:78:39:
                    72:d6:9b:8f:56:ee:7b:cf:9f:16:f5:bc:72:ee:a8:
                    83:74:a8:46:f7:13:51:7d:07:de:98:2c:5c:a2:43:
                    b6:d8:b9:6e:f3:8d:96:94:a7:f1:ac:20:63:76:a8:
                    ed:21:18:17:bf:34:08:93:01:64:82:9d:df:02:eb:
                    11:c9:3d:bc:29:67:05:79:85:73:4b:ef:ee:7b:ce:
                    25:0d:a3:24:a2:f0:a8:f8:f1:89:31:53:5d:22:1f:
                    94:3f:f6:d0:f6:4f:31:60:40:0e:2a:14:39:02:97:
                    d6:76:5b:28:7d:97:9f:85:73:99:d1:0c:46:a0:da:
                    55:5b:e6:0d:f3:74:39:de:99:80:73:7e:35:9e:31:
                    36:72:18:ab:53:74:54:25:d7:62:62:ab:ad:8b:a2:
                    be:01:37:2e:f3:47:f2:04:33:e0:eb:f9:a7:cb:0e:
                    7b:db:7e:00:b1:3e:93:83:3a:bb:6a:91:63:7c:85:
                    27:54:bd:49:ce:c3:f9:55:36:71:04:af:b4:fc:3e:
                    f4:73:d1:39:11:53:ab:5c:4f:56:a2:fb:90:2e:18:
                    74:0d:56:16:fc:d0:47:05:58:86:a9:59:8f:42:89:
                    3d:32:a3:e7:12:b2:32:63:fb:8b:eb:01:a3:55:1d:
                    06:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F6:2C:FD:AF:66:45:A0:5F:35:78:E2:27:E5:75:D4:CE:45:73:FF
            X509v3 Authority Key Identifier:
                keyid:EC:EB:A2:E6:59:79:4B:12:21:5D:F1:FA:8A:BE:3F:CB:D6:68:6D:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:d5:f5:53:5c:17:66:16:a4:e6:bb:00:12:9a:60:85:ca:cd:
         6a:55:88:63:b9:aa:ee:8d:9f:6b:3c:95:6c:cf:8e:eb:e6:ef:
         5b:8c:d5:09:8a:1d:36:4c:a8:c8:a9:32:0e:d3:7f:ef:e6:34:
         25:37:f2:f7:bd:3b:ba:da:1e:6e:51:88:69:c0:16:5f:e5:9d:
         df:45:cc:99:fe:48:8e:c3:d2:e0:b4:12:8c:ee:36:24:aa:ef:
         0b:4a:14:d6:7b:61:d3:85:54:be:a1:e8:57:43:bc:f6:11:93:
         84:9a:69:c9:97:89:4c:38:33:59:94:20:ea:04:cc:ff:22:45:
         e1:60:25:20:be:54:45:94:1f:b3:ac:7e:28:36:91:81:90:ab:
         06:78:21:0a:bc:a5:d7:b6:e9:49:04:8c:80:e8:f8:2b:5e:e4:
         20:05:18:cc:f0:a4:dc:66:2c:22:be:f3:f2:92:6c:33:d4:dc:
         b1:86:6e:87:ac:18:58:d6:11:1f:30:62:e9:4d:af:01:0e:2b:
         f9:0f:5b:d6:8c:cc:2f:11:e5:d3:ed:b4:09:6a:74:27:09:05:
         50:c5:da:a5:6c:12:62:44:b5:db:00:43:c0:c3:11:e1:c5:1f:
         68:22:1d:3d:ee:5f:ae:54:64:33:1a:45:e7:56:4a:30:f8:5c:
         0e:b7:71:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:11:09 2026 by rpki-client