Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
File:                     4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft (raw, json)
Hash identifier:          UOjx6QpGkZICv7BiAHCd26zzMqIeXbs+Y70AW8W4KRY=
Subject key identifier:   07:A7:B1:78:C0:BC:45:BF:50:71:0F:63:3D:DC:EF:84:DB:42:73:AD
Authority key identifier: E1:55:03:B1:1B:98:A5:F5:8D:4F:55:EF:AE:A3:AD:2B:21:AA:EC:83
Certificate issuer:       /CN=e15503b11b98a5f58d4f55efaea3ad2b21aaec83
Certificate serial:       019E303BA43C2FA552DEC4AC135F0F3A1C1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
Manifest number:          180A
Signing time:             Sat 16 May 2026 10:01:15 +0000
Manifest this update:     Sat 16 May 2026 10:01:15 +0000
Manifest next update:     Sun 17 May 2026 10:01:15 +0000
Files and hashes:         1: 4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl (hash: aChyKQ/7+8cBDk+H35lF/tEELghqCl239UzSbXD1OD8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 10:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:a4:3c:2f:a5:52:de:c4:ac:13:5f:0f:3a:1c:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15503b11b98a5f58d4f55efaea3ad2b21aaec83
        Validity
            Not Before: May 16 10:01:15 2026 GMT
            Not After : May 17 10:01:15 2026 GMT
        Subject: CN=07a7b178c0bc45bf50710f633ddcef84db4273ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3b:f0:98:b0:0e:52:f9:7f:46:77:39:e2:09:
                    4d:c6:9b:00:c2:14:1a:02:ac:92:76:a8:67:3a:54:
                    e7:75:52:af:86:52:96:a9:a4:20:fc:66:4d:78:4b:
                    e7:aa:fa:d0:21:8f:e9:d6:79:a4:5d:f0:99:47:f9:
                    a0:91:d6:45:50:ed:ec:e4:4f:e1:93:e9:97:f1:d9:
                    49:de:b7:fc:ff:6e:02:be:90:4b:18:d3:96:14:b8:
                    e0:e4:d7:7e:0a:f9:01:c1:42:3e:84:9f:7d:dd:e0:
                    a2:be:00:ad:30:58:2b:ff:ba:98:13:8b:db:25:4b:
                    7d:06:90:12:fa:0e:ab:fd:9a:7a:63:22:e2:63:80:
                    13:84:eb:11:67:92:03:4a:3e:d9:61:29:13:28:0e:
                    89:53:46:b8:a6:2f:17:a2:b0:b0:7f:a0:51:8e:ed:
                    28:9e:4d:2e:fa:f9:cb:d8:8f:31:19:28:39:2b:95:
                    37:c8:4e:45:a2:1d:ea:78:f6:40:a9:14:cf:02:a3:
                    b4:06:01:75:da:fa:9d:c9:5e:cf:5d:c5:3f:93:9e:
                    7a:cd:1d:83:d8:d5:62:a6:4b:94:ac:c7:84:6e:77:
                    2e:c3:5f:9b:a8:bc:1b:d4:46:a9:cf:bb:7c:09:19:
                    7a:29:d0:d3:4c:e7:9b:0c:d0:d1:74:c7:d3:3a:b0:
                    0a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A7:B1:78:C0:BC:45:BF:50:71:0F:63:3D:DC:EF:84:DB:42:73:AD
            X509v3 Authority Key Identifier:
                keyid:E1:55:03:B1:1B:98:A5:F5:8D:4F:55:EF:AE:A3:AD:2B:21:AA:EC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:d8:9b:99:a7:52:08:5b:15:6e:16:9b:6c:b8:8e:e8:8f:d4:
         33:cf:a2:75:ae:5b:8d:f2:35:cf:82:1a:5a:54:f0:e5:64:da:
         92:7e:b8:58:21:13:10:74:99:f0:5e:5d:99:2f:bd:94:24:c9:
         46:87:42:89:97:31:35:8e:7d:ac:ce:d3:9a:2e:2e:3e:47:98:
         ef:ee:b4:18:b8:8a:f7:16:b9:4b:d0:d8:2e:90:bd:84:9d:34:
         4e:6b:b7:22:f6:29:db:56:a8:dd:25:0d:15:10:94:e5:73:0f:
         56:d8:4f:a8:17:bd:36:56:30:6a:4a:47:de:bc:16:a2:f0:aa:
         49:e8:4b:f4:2b:b4:e8:e3:8e:1b:14:ad:15:c4:9f:25:ee:07:
         13:4d:ee:82:05:c1:4f:df:94:a7:4a:13:a5:5e:f4:c0:e1:83:
         d7:7b:ca:88:dd:35:df:9b:7c:47:09:80:09:08:c7:ee:11:6f:
         95:8c:00:48:07:aa:aa:26:1c:eb:03:e8:b1:6c:0e:e4:1d:a5:
         dd:ce:f5:d9:79:0f:c1:95:f6:cd:5d:44:d2:df:5c:90:14:9f:
         48:bf:e1:ea:f3:be:35:16:b0:c7:75:5e:1b:e4:5a:da:a2:cf:
         d3:cf:a8:cf:8c:72:76:e2:56:cb:7d:a7:85:bd:53:53:2b:46:
         ad:21:6a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:35 2026 by rpki-client