Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.mft
File:                     7XZO39sbgh1dJayLeggKapBvprA.mft (raw, json)
Hash identifier:          BhjSRJWqtkEdOlO5OAN9Wtb+JumXCh86IB+OL6cWEKY=
Subject key identifier:   77:45:B4:4D:EA:AD:B6:E7:43:06:1A:E1:D8:15:E2:36:93:45:9D:19
Authority key identifier: ED:76:4E:DF:DB:1B:82:1D:5D:25:AC:8B:7A:08:0A:6A:90:6F:A6:B0
Certificate issuer:       /CN=ed764edfdb1b821d5d25ac8b7a080a6a906fa6b0
Certificate serial:       019E2F6001D336C97EFA30F17024FB7C155B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XZO39sbgh1dJayLeggKapBvprA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.mft
Manifest number:          055F
Signing time:             Sat 16 May 2026 06:01:21 +0000
Manifest this update:     Sat 16 May 2026 06:01:21 +0000
Manifest next update:     Sun 17 May 2026 06:01:21 +0000
Files and hashes:         1: 5KdGE2jdbERGSAaTxotqmYnDHPE.roa (hash: kwZAjYwYGkcbs7JNQRRWwRi2Ovfq/Y4hHTxA0ovQfso=)
                          2: 7XZO39sbgh1dJayLeggKapBvprA.crl (hash: B/bIumHH1Rvwsi85nFcY7yRVBk9Ixgvvf8Ocr9GsE+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7XZO39sbgh1dJayLeggKapBvprA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 06:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:60:01:d3:36:c9:7e:fa:30:f1:70:24:fb:7c:15:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed764edfdb1b821d5d25ac8b7a080a6a906fa6b0
        Validity
            Not Before: May 16 06:01:21 2026 GMT
            Not After : May 17 06:01:21 2026 GMT
        Subject: CN=7745b44deaadb6e743061ae1d815e23693459d19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:71:75:f1:09:ee:c6:b9:43:e1:c4:5d:3a:79:
                    e9:fa:9b:7c:88:a6:2c:98:d7:23:2b:33:66:a4:5e:
                    9e:56:f4:85:d2:7d:0b:d4:58:ca:4d:86:1f:59:41:
                    a6:66:ac:07:13:ee:9c:a4:08:cb:76:61:47:53:a2:
                    6d:18:45:ca:6f:ee:02:a0:fb:55:23:74:59:21:1f:
                    4b:33:5a:65:d0:c2:e5:53:60:2d:08:20:ca:dc:d0:
                    53:fe:f6:fc:ef:c4:72:b2:29:4a:e2:aa:41:23:0a:
                    01:4f:7e:67:67:e1:8a:c5:34:75:72:62:fd:3b:a5:
                    3e:68:a1:81:4e:dd:4d:03:e8:ef:6a:7a:55:25:98:
                    ec:3a:22:98:38:00:d2:ff:4c:aa:ad:e8:0f:53:4f:
                    3c:e5:73:69:60:86:ec:b3:99:eb:ff:a9:6c:3b:de:
                    4d:cc:05:d5:a0:5d:5e:22:bf:74:60:b7:6e:f1:b9:
                    ce:0f:8a:de:67:4c:0f:f8:54:29:5f:4b:9a:66:2b:
                    08:0b:1c:26:8d:b1:b9:df:fa:d0:39:c9:ff:bc:cb:
                    04:8b:74:4b:61:9b:92:9b:51:e4:b1:f4:c3:1b:d0:
                    80:a0:2f:5d:f2:47:9b:15:dc:b0:58:29:6e:04:0e:
                    68:07:d7:a6:97:11:7b:01:76:b0:26:6f:28:20:25:
                    09:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:45:B4:4D:EA:AD:B6:E7:43:06:1A:E1:D8:15:E2:36:93:45:9D:19
            X509v3 Authority Key Identifier:
                keyid:ED:76:4E:DF:DB:1B:82:1D:5D:25:AC:8B:7A:08:0A:6A:90:6F:A6:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XZO39sbgh1dJayLeggKapBvprA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:9c:d7:51:50:61:20:f0:49:36:63:36:ea:3d:26:8c:8f:67:
         2c:ad:4b:63:3b:a9:08:89:af:e9:9f:e9:f2:fd:81:c4:64:fc:
         ad:01:18:20:52:1a:5b:e9:77:11:fd:2e:36:27:b8:0d:79:ae:
         52:a4:6c:f3:d1:38:a8:0e:a5:b3:86:87:fb:16:a3:57:d5:34:
         42:26:f1:e9:4e:74:9a:99:8c:27:ee:6a:d6:a7:d7:b2:4e:0a:
         b7:2c:c9:5e:d7:fa:4f:53:3d:f7:fd:4d:45:fd:7a:d6:c0:f5:
         bb:f0:b2:6d:b3:82:04:31:31:2e:1e:71:17:58:8a:e1:03:a2:
         cd:87:9f:36:94:2a:2c:10:f0:ae:4e:06:dc:44:01:14:e4:a7:
         27:23:56:c9:9c:02:30:24:00:fb:fb:42:47:7b:4b:5a:5b:85:
         14:45:7e:8e:72:e0:0e:e1:86:c3:03:13:79:da:a1:e9:c5:92:
         ce:f0:d3:a8:f8:a9:87:7f:82:42:e1:f8:9c:c5:b8:87:bf:77:
         19:6f:6a:01:45:88:d0:75:de:8b:50:ad:6e:86:7b:49:b5:82:
         5e:16:69:65:6e:68:87:83:00:3e:b9:9d:cf:24:97:0b:77:5e:
         96:94:2a:37:ec:cf:70:25:83:98:f1:cd:aa:7e:a3:d8:84:d9:
         72:61:34:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:42 2026 by rpki-client