Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
File:                     7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft (raw, json)
Hash identifier:          zEWhKc3DgNJ88uNE5FdyHNrvl05Eo2RzmuAvWlml/ls=
Subject key identifier:   CE:4E:A0:E2:A7:87:0E:DA:18:4D:29:9D:A3:CA:F5:7E:66:87:5A:FA
Authority key identifier: ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11
Certificate issuer:       /CN=ed89298644ed486ded509d946a6d6d839589ce11
Certificate serial:       019E314E0334D8A983DCF32DF85BF7880806
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
Manifest number:          0894
Signing time:             Sat 16 May 2026 15:00:56 +0000
Manifest this update:     Sat 16 May 2026 15:00:56 +0000
Manifest next update:     Sun 17 May 2026 15:00:56 +0000
Files and hashes:         1: 7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl (hash: 6U5Fq/MyU8GYdAbEY2xeZFUXDalz/+8BVq2oKuXEmZE=)
                          2: ci8f7Y86uB9atamo1D3e8sszzV0.roa (hash: JE0+am3liaO3am6zHqUi0SmfiCv9crbc5X4aX8Cwg8E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4e:03:34:d8:a9:83:dc:f3:2d:f8:5b:f7:88:08:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed89298644ed486ded509d946a6d6d839589ce11
        Validity
            Not Before: May 16 15:00:56 2026 GMT
            Not After : May 17 15:00:56 2026 GMT
        Subject: CN=ce4ea0e2a7870eda184d299da3caf57e66875afa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:73:28:fc:18:14:6a:e1:76:c7:b9:39:bc:ef:
                    38:36:00:79:ff:29:1c:da:28:51:b6:0b:04:d3:e3:
                    34:68:e2:0a:4c:96:93:7b:7f:3b:39:e9:68:f0:0f:
                    5b:59:cb:6d:ce:aa:e4:6a:1d:65:27:c6:b8:36:de:
                    f5:74:89:c0:04:8b:04:5a:30:05:ff:ce:10:25:d4:
                    3c:41:b9:b9:27:34:de:2b:20:94:84:f2:a9:bf:56:
                    6e:80:dc:8d:00:18:ab:ed:30:6c:4c:5a:87:33:76:
                    d7:fe:97:42:ac:e4:1a:63:80:a0:3b:c5:18:06:6e:
                    89:3e:14:0c:0c:53:8f:9c:f2:ca:30:16:05:22:b5:
                    bc:5e:ea:ca:e6:5c:d3:8f:ad:2a:07:6b:f9:36:75:
                    aa:79:f5:01:82:74:35:ba:57:99:ac:ac:1e:bc:2c:
                    29:b7:10:3e:f0:cd:08:1f:4e:7d:91:38:ae:d5:fb:
                    bd:34:77:12:10:fc:82:b2:e2:8c:68:c3:86:ce:81:
                    87:00:25:6f:a0:99:b2:68:d6:3a:d0:e3:2b:c3:bb:
                    7b:bf:13:cb:5e:88:11:84:b9:2d:32:b6:51:df:7f:
                    ba:5c:22:a3:1a:6e:a3:a2:88:4a:61:9f:de:a1:71:
                    d5:99:09:dc:40:37:7d:d5:f1:f8:6b:11:ae:39:27:
                    fe:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:4E:A0:E2:A7:87:0E:DA:18:4D:29:9D:A3:CA:F5:7E:66:87:5A:FA
            X509v3 Authority Key Identifier:
                keyid:ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:a3:00:eb:01:f9:fd:41:bf:6f:64:2f:4e:15:41:0a:8f:75:
         ba:58:1f:c6:d7:cc:2c:75:15:0e:44:5b:77:a3:ba:ea:cc:e5:
         2f:0a:5a:9c:2a:cc:4d:29:0e:43:51:2c:07:a3:82:4e:7a:9d:
         6f:ac:18:e8:dd:65:63:06:e6:d7:17:d1:c1:4d:5e:0f:75:db:
         83:db:f7:c6:83:6e:ea:67:1f:aa:5b:cf:6e:39:00:f7:7f:d0:
         0e:b8:c5:9f:59:ce:f3:c7:39:f5:91:ff:32:29:bf:8e:36:ab:
         60:20:b3:bc:49:e8:4e:17:03:dc:3d:e4:f0:9e:46:83:97:70:
         89:eb:74:d9:e9:69:a5:bd:5c:12:72:05:c0:a1:8b:ac:08:70:
         d0:52:e4:ba:52:46:8a:8c:ec:58:ff:f6:ee:b5:d9:be:5f:89:
         df:28:62:8d:1e:6b:b9:a2:43:14:8b:f7:39:2e:52:3d:f2:f1:
         07:38:53:e0:9f:f0:14:34:99:73:0f:06:05:0c:14:38:ff:f0:
         0b:bd:60:e5:d1:c8:5f:ea:64:df:a1:4f:55:75:31:90:c1:7f:
         dd:e5:a8:74:b3:c2:96:f1:2e:86:5e:12:12:fa:8f:88:60:7d:
         70:3c:fb:54:ef:3d:9a:f0:2d:1c:9a:5a:18:cf:2b:ba:ae:31:
         bc:83:a0:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xTgM02KmD3PMt+Fv3iAgGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkODkyOTg2NDRlZDQ4NmRlZDUwOWQ5NDZhNmQ2ZDgzOTU4
OWNlMTEwHhcNMjYwNTE2MTUwMDU2WhcNMjYwNTE3MTUwMDU2WjAzMTEwLwYDVQQD
EyhjZTRlYTBlMmE3ODcwZWRhMTg0ZDI5OWRhM2NhZjU3ZTY2ODc1YWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3Mo/BgUauF2x7k5vO84NgB5/ykc
2ihRtgsE0+M0aOIKTJaTe387Oelo8A9bWcttzqrkah1lJ8a4Nt71dInABIsEWjAF
/84QJdQ8Qbm5JzTeKyCUhPKpv1ZugNyNABir7TBsTFqHM3bX/pdCrOQaY4CgO8UY
Bm6JPhQMDFOPnPLKMBYFIrW8XurK5lzTj60qB2v5NnWqefUBgnQ1uleZrKwevCwp
txA+8M0IH059kTiu1fu9NHcSEPyCsuKMaMOGzoGHACVvoJmyaNY60OMrw7t7vxPL
XogRhLktMrZR33+6XCKjGm6joohKYZ/eoXHVmQncQDd91fH4axGuOSf+6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5OoOKnhw7aGE0pnaPK9X5mh1r6MB8GA1UdIwQY
MBaAFO2JKYZE7Uht7VCdlGptbYOVic4RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1lrcGhrVHRTRzN0VUoyVWFtMXRnNVdKemhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xNDE4ODctNTUwNy00NWE1LThiMGEt
NTdhMWYwYjMyZjAxLzEvN1lrcGhrVHRTRzN0VUoyVWFtMXRnNVdKemhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8xNDE4ODctNTUwNy00NWE1LThiMGEtNTdhMWYwYjMyZjAx
LzEvN1lrcGhrVHRTRzN0VUoyVWFtMXRnNVdKemhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJqMA6wH5
/UG/b2QvThVBCo91ulgfxtfMLHUVDkRbd6O66szlLwpanCrMTSkOQ1EsB6OCTnqd
b6wY6N1lYwbm1xfRwU1eD3Xbg9v3xoNu6mcfqlvPbjkA93/QDrjFn1nO88c59ZH/
Mim/jjarYCCzvEnoThcD3D3k8J5Gg5dwiet02elppb1cEnIFwKGLrAhw0FLkulJG
iozsWP/27rXZvl+J3yhijR5ruaJDFIv3OS5SPfLxBzhT4J/wFDSZcw8GBQwUOP/w
C71g5dHIX+pk36FPVXUxkMF/3eWodLPClvEuhl4SEvqPiGB9cDz7VO89mvAtHJpa
GM8ruq4xvIOg9A==
-----END CERTIFICATE-----
Generated at Sat May 16 20:21:43 2026 by rpki-client