Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
File:                     7X77CijxDLp1HJLMsL-_NXuaYl0.mft (raw, json)
Hash identifier:          +19A1WyvjdDl7B+UcPN5zoO+KMRmhi54rWkZ1KRUNR0=
Subject key identifier:   CC:05:CB:64:DE:06:10:AB:34:96:2F:A2:69:69:8E:99:F6:F8:4B:4B
Authority key identifier: ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D
Certificate issuer:       /CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d
Certificate serial:       019E3117C26DA266A136017CCCB32DDCF3E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
Manifest number:          0FD1
Signing time:             Sat 16 May 2026 14:01:41 +0000
Manifest this update:     Sat 16 May 2026 14:01:41 +0000
Manifest next update:     Sun 17 May 2026 14:01:41 +0000
Files and hashes:         1: 7X77CijxDLp1HJLMsL-_NXuaYl0.crl (hash: qpZkTcO1ZW5XFYb2FHo3i1djbC0sbMVzsy9Ys08Lnrg=)
                          2: P24w_jLhUQYot-hYm7zVBeSYmLE.roa (hash: PHPMkNKEzzvlTlm3p3Tx5ImcestRuod2cI9K8iRdJC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:c2:6d:a2:66:a1:36:01:7c:cc:b3:2d:dc:f3:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d
        Validity
            Not Before: May 16 14:01:41 2026 GMT
            Not After : May 17 14:01:41 2026 GMT
        Subject: CN=cc05cb64de0610ab34962fa269698e99f6f84b4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:42:ab:2e:d9:0b:35:40:2d:c5:62:4b:39:f9:
                    9f:d9:fd:a1:53:fa:14:e3:7a:ac:ea:34:0b:f2:f2:
                    b4:96:4b:81:eb:2c:ca:7b:9d:fa:5f:29:f9:68:db:
                    f6:34:2a:3d:17:a7:7f:77:a9:e7:4a:e2:c9:64:7d:
                    5c:00:e7:67:88:e4:82:74:f0:04:f5:4f:eb:37:e0:
                    db:e4:53:be:a7:e7:c1:5f:46:70:c9:48:29:d5:3e:
                    60:30:c6:3c:d9:40:31:3e:11:9d:ba:5f:43:18:c7:
                    8f:5c:2e:b7:02:22:fa:ce:b0:11:0f:a9:4d:97:4b:
                    77:e3:bb:cb:74:4d:b5:ba:05:2f:5c:c6:9b:ad:90:
                    ef:a3:0d:ee:8a:b8:72:67:18:be:51:1b:f4:74:da:
                    d7:76:1c:36:33:81:0e:79:22:b3:77:70:4d:0b:4c:
                    f9:35:69:d2:55:01:dc:4b:8d:75:58:1d:9b:ae:5b:
                    89:81:9b:87:c3:d0:09:b6:6a:c5:61:e5:98:cd:2f:
                    72:6b:2d:cb:2f:43:8f:82:28:23:2b:c3:b0:65:61:
                    d4:5f:b8:e5:92:86:6f:be:f9:35:2e:88:bf:dd:a8:
                    51:85:9e:2e:15:49:5d:4c:dc:e0:04:bf:72:61:28:
                    64:42:c3:f0:12:24:6f:30:0f:d4:fc:88:68:f9:5f:
                    88:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:05:CB:64:DE:06:10:AB:34:96:2F:A2:69:69:8E:99:F6:F8:4B:4B
            X509v3 Authority Key Identifier:
                keyid:ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:9f:72:9e:f7:fe:91:c7:66:e8:5e:7c:0e:98:45:ab:c5:85:
         c4:20:29:45:36:43:4f:c3:43:6e:64:cd:90:aa:cb:39:ad:62:
         aa:f4:54:29:5f:30:38:aa:9b:7a:33:11:0a:d8:7a:a1:6e:e1:
         cd:99:e5:b1:21:34:98:07:3f:8d:36:2c:95:ae:f0:34:32:4b:
         e5:a1:ac:8d:65:ef:b0:63:c9:75:42:06:43:a1:a6:bd:a2:14:
         08:bc:e4:0a:01:34:e9:5b:1a:fd:00:30:8c:e7:bb:ed:ff:dc:
         38:27:48:fa:b8:b4:d1:66:03:de:6f:95:67:6c:4a:aa:7a:95:
         8d:06:e0:d9:05:f2:f8:ec:ea:3c:79:3b:f1:93:57:2d:71:d1:
         e9:c0:3e:ea:b2:27:d9:51:3d:f6:ec:99:8f:b2:ac:7c:2b:22:
         4d:4f:ba:c4:47:79:8e:53:c1:74:2f:ba:33:e6:00:95:0e:b5:
         80:fb:b8:be:04:f2:27:49:ce:da:ea:38:a8:5d:e4:62:62:15:
         fa:6f:41:70:aa:cc:dd:1a:3e:26:01:02:54:23:d9:d8:c0:f8:
         ea:c2:29:01:1c:0b:ac:45:d5:21:03:89:ac:fe:c2:a6:51:9d:
         8d:ab:b5:93:b9:64:c1:c2:ef:10:80:f9:95:1d:54:5e:fe:28:
         d9:f6:82:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:26:52 2026 by rpki-client