Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
File:                     7zGgVPyftLFH6KmL2n5xyBrwvP0.mft (raw, json)
Hash identifier:          UQs/0enybmRkagZia+VYz1CpM+P/GhaX0X7UjhmBuBw=
Subject key identifier:   33:D4:06:E4:90:9A:BC:00:8A:05:7C:6A:7C:18:BE:B6:5C:C8:36:BA
Authority key identifier: EF:31:A0:54:FC:9F:B4:B1:47:E8:A9:8B:DA:7E:71:C8:1A:F0:BC:FD
Certificate issuer:       /CN=ef31a054fc9fb4b147e8a98bda7e71c81af0bcfd
Certificate serial:       019E314DF6AFD69ED28DBA08A6B37AE0E8B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
Manifest number:          1913
Signing time:             Sat 16 May 2026 15:00:53 +0000
Manifest this update:     Sat 16 May 2026 15:00:53 +0000
Manifest next update:     Sun 17 May 2026 15:00:53 +0000
Files and hashes:         1: 7zGgVPyftLFH6KmL2n5xyBrwvP0.crl (hash: /CiIqkYDvW7rwmC+D3YzKiwHlz1VxNgilGGxXdtd+KA=)
                          2: RwU9zWthyfSOUWuvsWlsVhpMbmQ.roa (hash: 74TavDCjufR6GUNTwdp6AJnNFnxix31gx+8KWS5C2g8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4d:f6:af:d6:9e:d2:8d:ba:08:a6:b3:7a:e0:e8:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef31a054fc9fb4b147e8a98bda7e71c81af0bcfd
        Validity
            Not Before: May 16 15:00:53 2026 GMT
            Not After : May 17 15:00:53 2026 GMT
        Subject: CN=33d406e4909abc008a057c6a7c18beb65cc836ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f5:0c:96:9c:91:3a:32:8b:0c:19:8f:13:7b:
                    ec:90:ee:e1:5a:f9:14:80:f2:c1:2c:0d:ec:a3:32:
                    92:c2:53:8e:24:17:5a:55:3b:44:be:6a:b1:30:7a:
                    73:14:d1:65:03:15:a8:d4:f4:00:ee:d1:63:85:29:
                    30:b3:98:0f:54:11:25:fc:88:d5:cb:b0:e9:f3:09:
                    37:05:65:65:02:ff:14:2c:0b:bb:89:1e:4e:58:c5:
                    5d:6b:14:86:c1:73:86:e4:34:4c:71:73:ba:6a:0e:
                    fe:25:ab:78:57:06:8b:c9:3d:f5:2d:24:dc:4d:41:
                    75:ba:1e:c9:fa:37:4f:7f:4d:ea:d1:80:49:fa:d4:
                    0e:eb:a6:a1:e8:4e:b2:94:0c:50:93:39:0a:9a:6b:
                    45:47:bf:19:85:a3:f6:19:8f:85:90:23:d9:69:fe:
                    bc:03:8d:de:8f:fc:68:f3:f6:86:6e:42:ce:8b:cc:
                    db:35:d1:a3:48:6e:6f:1e:c5:3d:bd:54:b3:b4:1f:
                    d2:18:9a:5b:fb:b4:0f:29:62:00:ba:d9:9c:1a:fa:
                    db:a0:aa:f7:df:72:4d:1f:d4:4f:92:2d:34:d9:fe:
                    de:3c:57:ef:fa:23:58:6b:23:53:8b:22:2e:1a:ab:
                    82:e4:ca:48:36:ff:db:ad:68:c3:49:5a:a7:2f:fc:
                    95:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:D4:06:E4:90:9A:BC:00:8A:05:7C:6A:7C:18:BE:B6:5C:C8:36:BA
            X509v3 Authority Key Identifier:
                keyid:EF:31:A0:54:FC:9F:B4:B1:47:E8:A9:8B:DA:7E:71:C8:1A:F0:BC:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:8a:8e:9b:b4:b6:09:1e:ed:16:39:42:e4:e4:f9:85:d7:6c:
         79:2f:33:2d:d8:58:9b:95:af:e0:e2:44:ca:98:c9:02:74:d2:
         61:df:5f:5a:97:bb:55:31:4c:18:e8:bd:03:bb:da:76:38:db:
         b5:4b:44:2f:9f:79:20:66:19:87:8e:64:a2:61:7e:5c:09:44:
         eb:20:52:27:87:24:8c:c3:46:1d:e6:a6:99:cc:01:4b:09:26:
         29:d4:e2:e9:14:ab:f5:0c:30:00:48:be:35:65:5c:b1:b8:3e:
         bf:35:a7:0f:92:ef:12:94:99:e1:96:5c:bf:d3:8a:fe:b6:8b:
         30:90:c2:a1:82:8a:b9:6d:96:b2:d0:5d:01:c1:58:b6:e7:44:
         21:ed:61:00:ec:e2:7b:b4:0c:83:86:e8:dd:ab:d7:58:6d:a5:
         d4:93:87:85:dd:03:e1:a0:0c:6d:97:f4:11:96:31:a7:5e:ed:
         c0:2d:ca:64:56:73:03:24:5b:66:4d:bc:5a:97:05:eb:40:6d:
         03:0b:c2:b3:a1:f4:0c:25:74:e0:f3:ec:17:98:d5:f8:33:af:
         be:af:30:05:93:e3:68:0e:7f:fd:b2:6e:c3:ed:e1:f7:a5:b5:
         cd:02:2e:28:22:65:68:35:00:8b:46:1b:3a:d1:79:df:3d:1b:
         c2:f8:cd:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:14:09 2026 by rpki-client