Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft
File:                     Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft (raw, json)
Hash identifier:          Ded/+vuwOSW1obvMi4Vpf5QhDoueG0FzrsQ2dctscpU=
Subject key identifier:   0E:72:41:19:5A:18:B7:05:0F:AB:46:15:E9:9A:5E:67:13:FC:B1:98
Authority key identifier: 09:FE:CD:70:71:B7:27:DB:3D:12:F0:9E:FB:B4:54:E0:4D:4F:74:3D
Certificate issuer:       /CN=09fecd7071b727db3d12f09efbb454e04d4f743d
Certificate serial:       019E3184A8C1AB685DB929407D37E18788E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft
Manifest number:          1650
Signing time:             Sat 16 May 2026 16:00:37 +0000
Manifest this update:     Sat 16 May 2026 16:00:37 +0000
Manifest next update:     Sun 17 May 2026 16:00:37 +0000
Files and hashes:         1: Cf7NcHG3J9s9EvCe-7RU4E1PdD0.crl (hash: MQirQ7AvKMSy2mBnUgMMHemMcxpIbuXBACZIJxl+WgQ=)
                          2: fjfBNYgsUNX3mydnGn3xY9hxxkI.roa (hash: RcxMT9Fv//tOCCRi6oIZLm/dau+OtJX1wqCmolZkb18=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:84:a8:c1:ab:68:5d:b9:29:40:7d:37:e1:87:88:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09fecd7071b727db3d12f09efbb454e04d4f743d
        Validity
            Not Before: May 16 16:00:37 2026 GMT
            Not After : May 17 16:00:37 2026 GMT
        Subject: CN=0e7241195a18b7050fab4615e99a5e6713fcb198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4e:81:8f:34:36:c5:7a:9e:c8:68:41:7e:ec:
                    f9:4d:e0:e1:5d:17:69:e8:fa:37:f5:5a:21:78:aa:
                    64:60:8d:71:39:19:0a:f4:c1:8a:f9:3d:f2:a0:cb:
                    f8:04:ef:dd:5b:d2:3b:49:68:99:5b:a5:25:de:f5:
                    84:d5:99:9d:21:53:da:85:05:61:83:65:c6:06:ef:
                    e9:b4:5f:24:fb:d1:7a:07:cf:9a:a2:61:ad:48:37:
                    3e:60:fd:d6:1e:8e:68:1f:72:94:30:ff:9f:cb:0c:
                    28:be:c4:f3:61:2b:7c:72:85:76:d6:8c:7c:e3:d0:
                    61:58:a4:a1:71:0a:52:b4:e2:49:80:75:92:c8:e4:
                    ef:e0:6f:a6:d2:33:98:4e:b6:c9:f1:f1:f9:3e:58:
                    d9:43:18:b8:a5:e3:2f:43:f1:5d:73:fe:22:8c:f2:
                    b1:11:dd:55:ae:c3:bd:c8:c6:bd:5d:78:d2:6e:aa:
                    8d:7e:2c:73:fb:a8:b5:18:89:ea:c0:c7:bd:73:f7:
                    c6:aa:17:bf:d6:c2:c3:b2:a3:85:a1:60:cb:05:f7:
                    21:e2:96:51:26:84:fc:dd:21:ec:b2:f1:5d:ea:a7:
                    72:b7:fd:87:9d:11:a7:8a:13:14:43:63:e3:ba:6e:
                    14:a5:41:5c:99:34:54:4c:0c:83:65:ab:ac:50:56:
                    a1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:72:41:19:5A:18:B7:05:0F:AB:46:15:E9:9A:5E:67:13:FC:B1:98
            X509v3 Authority Key Identifier:
                keyid:09:FE:CD:70:71:B7:27:DB:3D:12:F0:9E:FB:B4:54:E0:4D:4F:74:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:96:0c:c5:7e:9b:3a:06:c0:aa:88:e5:da:4b:37:e3:e2:f2:
         7e:18:1f:ff:a2:af:f3:01:2d:b4:2e:6d:f4:ec:6c:e7:4a:9e:
         6f:63:c4:12:95:73:2f:36:ae:38:1d:51:83:92:c9:fb:81:99:
         ec:14:19:07:93:61:b1:95:a0:20:cc:a8:7c:f7:b0:9a:a3:41:
         e0:26:55:63:7b:8d:b4:94:b8:88:f8:b8:11:1f:13:6d:b4:cb:
         5b:da:91:43:4f:15:8d:52:31:ee:58:26:46:03:d5:ab:69:80:
         86:ff:06:47:39:e8:63:20:58:3f:ce:1c:dc:f1:ed:56:b1:7d:
         15:41:04:e8:eb:52:ba:5b:48:50:01:60:c1:0e:d9:d2:f3:7d:
         46:59:5c:67:70:d0:9f:67:89:23:23:90:4f:5d:6d:16:dc:3a:
         59:f7:8e:38:90:e1:10:54:92:9d:ee:21:0a:e5:77:79:73:c1:
         02:da:aa:32:7a:51:48:52:91:69:4a:27:dd:30:db:d8:a1:11:
         ae:e8:c4:c4:c6:0a:e6:f9:75:0f:4f:15:24:c4:79:5b:66:02:
         83:14:2c:39:78:37:50:f9:4d:65:7c:2c:8a:d2:74:c5:dc:30:
         cf:81:79:16:c3:e1:14:ae:b8:7a:7d:9d:be:92:69:37:0e:30:
         c7:11:8b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:39:42 2026 by rpki-client