Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
File:                     7HfzJj_jSKssjTaEdda8BHpql2o.mft (raw, json)
Hash identifier:          Br+uLgMAH4sWv4J2821SBadESUe0kDL1kbCS7Nl0oEA=
Subject key identifier:   59:C6:90:01:13:CE:C4:43:3C:26:C0:00:66:C5:C6:79:C1:C2:58:BD
Authority key identifier: EC:77:F3:26:3F:E3:48:AB:2C:8D:36:84:75:D6:BC:04:7A:6A:97:6A
Certificate issuer:       /CN=ec77f3263fe348ab2c8d368475d6bc047a6a976a
Certificate serial:       019E2F9669019F1B18D1D2F5A7D9919FA100
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
Manifest number:          07A3
Signing time:             Sat 16 May 2026 07:00:46 +0000
Manifest this update:     Sat 16 May 2026 07:00:46 +0000
Manifest next update:     Sun 17 May 2026 07:00:46 +0000
Files and hashes:         1: 7HfzJj_jSKssjTaEdda8BHpql2o.crl (hash: XJxShvAr6c+Uc3B4tNAXj2jCvbl61gQ0KDxIg1o3AmA=)
                          2: Ane3kVXJDwOnCcrwevPbQSwdhlM.roa (hash: GcB+WQ8GGExoABfliUP8dcPeehhXNomt7lmTMnKvHmw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:96:69:01:9f:1b:18:d1:d2:f5:a7:d9:91:9f:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec77f3263fe348ab2c8d368475d6bc047a6a976a
        Validity
            Not Before: May 16 07:00:46 2026 GMT
            Not After : May 17 07:00:46 2026 GMT
        Subject: CN=59c6900113cec4433c26c00066c5c679c1c258bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5b:83:2e:dd:a4:30:83:45:2e:e4:c3:51:78:
                    3f:9a:22:65:85:40:3a:10:66:ed:08:b8:62:09:6f:
                    96:44:5d:95:61:c4:77:bd:78:90:78:67:27:da:b3:
                    33:df:ac:42:e7:69:f2:5c:1a:54:f5:72:ea:a6:76:
                    63:21:c2:8b:6f:bb:e7:c5:5e:e4:ca:c0:c5:35:d2:
                    94:8f:a7:ec:38:ef:95:8a:61:57:45:f8:b9:74:84:
                    ea:2c:cb:b0:e5:bd:d5:ce:6c:77:38:47:5b:a4:08:
                    4a:2d:94:45:e3:b3:e5:63:5e:f3:4d:9a:1f:b7:64:
                    57:10:fe:43:49:b3:b8:87:48:a6:c6:38:64:57:9e:
                    72:7b:c4:13:a0:71:b3:15:7c:92:1b:a3:79:e5:83:
                    57:08:2a:98:2e:d5:a9:69:92:61:67:59:fe:a4:be:
                    2e:7c:e7:62:e1:76:69:fd:1e:a0:dd:48:ed:30:84:
                    52:c8:74:86:8a:14:e5:a5:56:51:16:9e:b1:1f:8b:
                    15:36:8d:81:06:5b:a1:29:86:08:3c:f2:f4:e0:de:
                    fe:e9:2c:8b:9e:86:ee:6e:9a:57:72:e0:23:b5:26:
                    33:ad:5a:81:8a:5c:cf:77:d2:18:41:42:f3:b6:9b:
                    d4:68:80:bf:83:93:93:fb:75:7c:a1:39:e1:d1:f1:
                    bb:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C6:90:01:13:CE:C4:43:3C:26:C0:00:66:C5:C6:79:C1:C2:58:BD
            X509v3 Authority Key Identifier:
                keyid:EC:77:F3:26:3F:E3:48:AB:2C:8D:36:84:75:D6:BC:04:7A:6A:97:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:c7:fc:7b:16:d6:24:c9:74:78:a7:f4:85:48:45:e9:77:15:
         ea:76:82:8a:30:73:e3:52:b2:58:e7:60:ab:7c:07:8b:c6:a6:
         1f:52:10:6d:68:ee:e0:35:44:9a:05:70:37:36:95:ed:f8:ad:
         da:c8:be:77:6c:50:0d:05:bf:03:15:f4:38:57:0f:93:2b:d7:
         e9:b3:b0:8e:93:63:3e:77:67:b1:01:a8:87:09:66:b1:e5:63:
         15:cf:4a:e0:d2:c6:d2:8f:01:ec:aa:eb:73:1a:97:5c:ed:22:
         8b:3f:d1:2d:ba:15:72:ba:56:85:9b:0a:f8:a0:7e:6b:66:79:
         29:8b:93:5d:a0:d3:bf:a9:ba:d3:37:bf:ce:03:3f:df:34:9d:
         1e:2b:e5:33:3e:e0:bd:96:39:96:ed:07:8a:23:20:d7:c2:57:
         7c:5d:2d:61:67:85:69:ab:c5:9f:11:36:78:9f:71:c3:c9:d8:
         fb:a2:3e:18:d3:ac:6f:be:88:d5:dc:e1:9c:a3:ee:46:77:7c:
         dd:5a:fe:5a:d7:ef:e7:4d:34:d0:9c:f1:79:28:e2:ca:7a:b4:
         3f:f3:4f:32:24:f2:df:db:1d:25:ad:98:35:3d:e5:39:79:d7:
         a6:ff:a8:6f:d1:64:67:6f:46:14:79:7e:0a:48:4b:84:ca:17:
         b5:e4:3d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:27:12 2026 by rpki-client