Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
File:                     7-aRQnxuQYBvbOseIYp9xjIP3u0.mft (raw, json)
Hash identifier:          AHxA90UkI22kbO6m5SLzCyLSTcgqbDtKmCFbWQnIKek=
Subject key identifier:   50:F8:A7:C9:02:F9:DF:A5:20:88:A9:1B:69:73:D7:69:4A:0D:06:B1
Authority key identifier: EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED
Certificate issuer:       /CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed
Certificate serial:       019E2F5FBE5FC249711CDD68566EA45B6873
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
Manifest number:          1914
Signing time:             Sat 16 May 2026 06:01:04 +0000
Manifest this update:     Sat 16 May 2026 06:01:04 +0000
Manifest next update:     Sun 17 May 2026 06:01:04 +0000
Files and hashes:         1: 7-aRQnxuQYBvbOseIYp9xjIP3u0.crl (hash: kq3uXkDmu93bFdggla3J4zaXtEIq4vJjOcJkVJuWu24=)
                          2: oUHh0fasEsq5w1CCMpfcHZtBRD4.roa (hash: UjTvz3EvpJQa3UXT8srfAji/9iKr5LpXON0y3SlaisY=)
                          3: y5NcApjS5_rDCgexUqkW-sOr7LA.roa (hash: iNlwoFrzX2UsLRpZnY8/tJMxzCRcasSdqgo0ouKBIzM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:5f:be:5f:c2:49:71:1c:dd:68:56:6e:a4:5b:68:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed
        Validity
            Not Before: May 16 06:01:04 2026 GMT
            Not After : May 17 06:01:04 2026 GMT
        Subject: CN=50f8a7c902f9dfa52088a91b6973d7694a0d06b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2f:bc:1b:cb:9b:25:c9:68:b0:79:ad:45:df:
                    66:d3:3f:b2:d0:93:f7:a5:6c:02:ea:54:49:10:4e:
                    45:98:1f:0a:70:14:25:d3:ce:43:40:34:ad:90:32:
                    06:5d:84:f9:cb:87:67:f5:39:38:8c:9b:8a:8f:e9:
                    d1:a2:7b:ec:a9:d4:b0:68:9c:e0:09:a0:d3:69:0d:
                    ea:ce:fd:7c:ae:3d:28:d2:46:92:10:d2:b8:7e:50:
                    ac:ce:49:9d:3e:bf:7c:ba:92:0b:ee:68:5b:39:cb:
                    04:86:6c:c8:a1:4a:5d:8e:2d:cd:70:ab:88:71:53:
                    5a:69:eb:d4:ef:27:62:59:0d:68:c4:5a:42:54:62:
                    f5:4d:ab:88:cc:2e:0e:80:07:b9:78:30:23:e5:3a:
                    e7:a4:17:ba:5d:98:ad:95:eb:f7:57:1c:a8:24:2b:
                    d7:a9:f9:16:f0:2a:89:13:25:29:bc:f4:83:40:25:
                    0d:84:90:52:58:de:d2:c6:84:fd:8a:90:0d:40:3f:
                    9d:ba:e4:8f:6f:9c:8e:76:82:e2:73:df:a0:25:4b:
                    75:80:e2:dd:83:ce:dd:6d:6b:36:0a:83:cf:c7:1b:
                    47:84:79:7b:9a:ff:f2:d1:33:bd:b2:dd:07:11:20:
                    e9:99:33:b0:ff:1a:32:e4:1a:07:40:f9:3e:f5:e6:
                    0f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F8:A7:C9:02:F9:DF:A5:20:88:A9:1B:69:73:D7:69:4A:0D:06:B1
            X509v3 Authority Key Identifier:
                keyid:EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:2f:96:f0:ba:73:e5:83:01:a9:5e:34:dd:1b:b7:a5:1e:83:
         bf:26:8b:a7:51:e9:2c:00:c4:e4:12:da:f4:c9:ac:d3:7b:02:
         13:d4:1b:14:a6:f1:83:ab:5e:b5:63:d3:63:10:6d:9e:50:2b:
         d9:2e:63:d9:55:5e:95:93:c5:79:a9:2d:2b:e2:9f:22:bf:28:
         d7:80:27:c0:23:0a:00:bc:1f:7e:65:7d:1f:3c:bb:f0:f6:30:
         ed:b6:d2:b0:37:4e:17:af:80:f3:9d:27:93:84:8e:5c:5a:9a:
         f1:f3:21:27:7d:dc:a9:97:b5:6f:d7:59:7d:f4:92:e0:63:e5:
         38:e9:ee:0a:58:35:5b:20:99:ab:e6:96:24:a0:66:38:d3:36:
         8c:51:b5:b7:72:85:fa:7a:76:78:d1:14:21:97:25:10:5e:bd:
         61:cb:74:57:92:62:77:a6:73:ed:66:11:fb:6d:8d:de:1d:7b:
         da:43:db:92:6c:21:c5:8f:b8:af:67:0e:90:9d:98:e7:a6:bd:
         bf:d7:09:0f:58:60:1e:1b:f8:4f:84:48:e8:f3:fc:b6:d9:dd:
         87:91:d9:61:03:80:40:10:8f:a3:ba:68:53:3d:b7:68:05:d7:
         22:1a:01:b2:38:88:47:36:b9:4b:2e:8f:de:3f:cc:af:3c:89:
         37:5d:38:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:58 2026 by rpki-client