Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
File:                     A7zvl2ZC1UtLShmY8LP_SIRakm0.mft (raw, json)
Hash identifier:          TRKNz2rXfs+vdPQupzxLoRDcNSFyX4VYO6f0swNT5UI=
Subject key identifier:   E7:9A:FB:F3:5E:25:50:04:3B:3C:B1:2E:87:CF:41:F1:D9:5A:53:85
Authority key identifier: 03:BC:EF:97:66:42:D5:4B:4B:4A:19:98:F0:B3:FF:48:84:5A:92:6D
Certificate issuer:       /CN=03bcef976642d54b4b4a1998f0b3ff48845a926d
Certificate serial:       019E314EAD7974EC5697C045B79823ADB59B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
Manifest number:          130A
Signing time:             Sat 16 May 2026 15:01:40 +0000
Manifest this update:     Sat 16 May 2026 15:01:40 +0000
Manifest next update:     Sun 17 May 2026 15:01:40 +0000
Files and hashes:         1: A7zvl2ZC1UtLShmY8LP_SIRakm0.crl (hash: STAX6WOCVtxlJzWaEk/jW6mimHFsEpXJNZdx0RchTtQ=)
                          2: EHGORi86xgHpvwoBk068qPN7iqE.roa (hash: YNshrsxOuHcW6UCsa9oev2SY9StlDKp1vMjVv/oevCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4e:ad:79:74:ec:56:97:c0:45:b7:98:23:ad:b5:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bcef976642d54b4b4a1998f0b3ff48845a926d
        Validity
            Not Before: May 16 15:01:40 2026 GMT
            Not After : May 17 15:01:40 2026 GMT
        Subject: CN=e79afbf35e2550043b3cb12e87cf41f1d95a5385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e3:b4:ca:cf:38:b0:f8:50:58:a9:33:ca:c5:
                    c5:b2:82:4d:e0:b3:0a:67:63:47:7a:96:6e:97:55:
                    52:84:fd:e9:4a:1c:b9:d0:3b:38:d3:6a:53:a6:99:
                    34:23:b3:a8:6e:d4:11:b8:f1:7c:5c:01:90:57:1c:
                    01:95:63:64:94:dd:83:ec:b6:de:ed:7d:e4:cf:44:
                    a1:6d:29:3e:ed:5e:71:19:b2:65:f3:f3:60:14:96:
                    58:cb:30:ef:33:76:91:86:15:1f:91:cc:5c:8a:d5:
                    4d:85:d2:08:40:de:ad:59:15:ea:0b:96:f6:5d:9f:
                    a3:d4:d8:b7:83:3c:23:68:0e:ee:a2:c3:0d:19:40:
                    e1:d6:69:5d:70:dd:aa:f3:09:1c:62:72:52:59:ac:
                    73:08:8f:6f:1b:ea:1c:e6:74:1c:7a:12:b1:f3:9d:
                    b1:35:be:40:a0:d8:60:93:ae:4a:82:d4:7e:6b:5c:
                    e2:4b:09:b9:a6:70:0b:e9:a7:89:f6:a8:ab:b5:82:
                    6c:c7:27:04:20:0d:95:88:6f:bc:53:f7:10:5d:a0:
                    72:04:60:2b:81:e2:71:7b:21:01:23:8a:8d:ab:61:
                    06:1b:8a:b9:0e:1e:69:5c:97:54:83:06:36:61:07:
                    ad:81:0a:dd:da:f2:54:d0:c3:ae:a9:fd:1f:19:64:
                    e5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:9A:FB:F3:5E:25:50:04:3B:3C:B1:2E:87:CF:41:F1:D9:5A:53:85
            X509v3 Authority Key Identifier:
                keyid:03:BC:EF:97:66:42:D5:4B:4B:4A:19:98:F0:B3:FF:48:84:5A:92:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:82:59:c2:53:d5:f0:7d:93:93:25:a8:c6:c1:84:c7:78:9c:
         cf:b7:3e:97:b9:76:9f:b2:7b:f3:9a:9d:16:f2:31:f2:61:a5:
         ef:15:11:ae:c2:e3:d7:94:22:59:67:6f:4c:81:12:45:90:d1:
         3c:32:72:31:c9:94:d1:41:8d:c2:ad:dc:05:c7:97:82:11:fe:
         74:98:e3:44:aa:99:57:18:34:06:df:c1:79:0b:c6:c0:51:df:
         ba:a3:21:42:84:fb:a6:73:8a:76:23:9a:e7:a2:91:14:11:f4:
         82:02:3e:f9:ba:0d:9f:d0:d4:4f:96:de:19:77:ef:d8:32:c5:
         26:64:53:40:31:91:80:76:85:50:70:3e:e1:b6:a1:89:75:18:
         04:f1:34:03:4a:02:62:49:07:75:74:e6:64:07:f9:14:e5:74:
         97:1f:a0:77:82:c4:64:8b:87:48:43:99:1f:71:eb:b3:34:ac:
         4e:e1:74:c8:e9:9d:c1:cf:d5:a7:99:fc:d9:1a:b0:a5:83:c9:
         ae:0d:39:cb:5e:18:aa:4b:86:6c:fb:94:ff:c3:60:fe:3e:82:
         6f:96:49:20:20:75:bc:4b:56:aa:82:f3:73:d7:a2:70:19:05:
         08:c7:45:24:5c:6e:38:4a:f7:1a:d8:68:cb:ac:8e:8b:47:0d:
         c1:cb:b6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:00:58 2026 by rpki-client