Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
File:                     1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft (raw, json)
Hash identifier:          rsSjL5TlYNbp+LJjoaBxZZsvVVIZG03qp+b7E0Xvdn4=
Subject key identifier:   7E:63:2C:1A:00:5C:60:51:01:24:34:C9:08:99:BC:2F:01:D7:FE:69
Authority key identifier: FA:11:C9:56:0F:A9:10:5E:6B:DC:4B:49:2E:FA:B6:41:AB:50:80:1D
Certificate issuer:       /CN=fa11c9560fa9105e6bdc4b492efab641ab50801d
Certificate serial:       019E31174D46EC84D30ECA65C87AF6EA802A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
Manifest number:          0697
Signing time:             Sat 16 May 2026 14:01:10 +0000
Manifest this update:     Sat 16 May 2026 14:01:10 +0000
Manifest next update:     Sun 17 May 2026 14:01:10 +0000
Files and hashes:         1: 1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl (hash: Zce4Fn6b9/gq5yWps4paJiFDbBpsuGTlakP0UBQ+2Rc=)
                          2: tkycn5xiTigCQfGPa-xW18TGNfk.roa (hash: 4OjRszRSxwJd25PZFySHlvrHFTMBwczdyRtjAmquBAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:4d:46:ec:84:d3:0e:ca:65:c8:7a:f6:ea:80:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa11c9560fa9105e6bdc4b492efab641ab50801d
        Validity
            Not Before: May 16 14:01:10 2026 GMT
            Not After : May 17 14:01:10 2026 GMT
        Subject: CN=7e632c1a005c6051012434c90899bc2f01d7fe69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a4:7d:c2:48:5b:2d:91:38:89:da:25:5a:a4:
                    b9:fb:63:9b:b0:d4:76:d9:eb:c0:bb:19:84:f1:f7:
                    9b:6c:f0:3b:e9:ca:0f:27:9b:42:6f:97:06:3c:04:
                    a7:84:aa:8b:a2:50:a2:e7:eb:72:75:08:b1:3f:29:
                    b6:87:df:46:c5:a8:44:e7:54:c6:8f:09:f3:2f:79:
                    92:04:86:52:96:c5:ec:fc:bd:25:d2:4e:11:fc:64:
                    0c:6d:58:f7:77:53:71:84:7f:30:11:07:1b:94:4c:
                    85:a7:68:ca:7c:28:39:9a:2f:7b:60:56:81:49:01:
                    9c:f6:67:4b:f4:e1:bf:11:e3:2a:dd:1f:a3:2c:c8:
                    b8:1b:d0:07:ce:43:5e:33:5f:1c:ef:76:26:c5:26:
                    8a:e8:70:93:c4:1f:b7:23:98:1b:10:d9:94:ce:38:
                    11:11:47:b4:74:e2:18:d3:d3:5d:bd:5a:14:cd:1f:
                    d7:f6:f2:c8:f4:9f:b1:13:c5:cf:42:bb:5f:30:f2:
                    c1:19:6d:06:2f:a7:1d:e5:d0:39:ab:d3:e2:6f:bb:
                    3c:ba:1d:47:16:14:ef:97:0e:49:20:02:5c:04:5b:
                    36:8e:e2:1c:5b:76:a5:d2:df:2c:a7:98:9b:c6:24:
                    f7:d9:1e:5b:a4:cb:8e:32:f0:af:27:c8:16:4d:4a:
                    53:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:63:2C:1A:00:5C:60:51:01:24:34:C9:08:99:BC:2F:01:D7:FE:69
            X509v3 Authority Key Identifier:
                keyid:FA:11:C9:56:0F:A9:10:5E:6B:DC:4B:49:2E:FA:B6:41:AB:50:80:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:a7:9f:62:17:00:41:a7:5c:b2:4b:d5:81:03:41:7b:6e:35:
         c7:52:8f:5f:b8:41:09:1c:06:97:8d:32:31:63:c0:a7:29:4c:
         ea:91:e8:ea:d3:7c:b2:60:d5:38:66:7e:35:ce:7e:7f:0f:57:
         08:84:fc:7b:7e:70:87:ab:bc:fd:77:7d:71:59:72:6f:b3:7e:
         1a:99:a6:48:b0:34:ec:46:63:36:a4:88:e5:2e:a1:10:2e:85:
         5b:89:91:e4:e1:92:23:30:d3:08:c8:07:d5:cb:df:57:6c:e7:
         a9:69:1f:70:aa:55:81:d5:31:82:78:74:a7:dd:d5:78:ba:de:
         09:c0:11:99:ad:18:12:8e:82:18:95:7c:6a:dd:49:5f:96:f5:
         3b:35:a2:97:84:ac:6b:84:5c:1d:b0:96:c8:06:2d:5b:9b:f5:
         0c:fc:96:e0:e2:89:7c:c7:9e:74:fa:cf:2a:eb:ee:8a:8e:43:
         94:69:da:c7:4f:db:84:b3:47:d4:ae:ea:fb:68:79:54:84:6d:
         a5:25:ef:c5:88:d3:bb:02:cd:11:59:a4:b3:6c:97:18:23:05:
         b8:ff:5f:9d:92:c0:68:27:63:1e:55:b4:b7:76:89:99:77:8a:
         4a:26:af:42:93:dc:0e:9b:4c:a0:da:2d:e7:16:2b:89:96:8c:
         6d:25:23:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:36 2026 by rpki-client