Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft
File:                     7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft (raw, json)
Hash identifier:          zkuH+06/M25yQzkljdzLqOd5HJ1zetE1aNdbwmyjbmg=
Subject key identifier:   78:73:C8:9F:F9:C5:7A:E9:9B:9B:7B:8D:C3:F5:36:43:B9:36:6D:AB
Authority key identifier: EE:D7:55:C5:12:75:AB:23:42:D8:F6:FC:A5:B5:66:06:AB:9C:3B:4F
Certificate issuer:       /CN=eed755c51275ab2342d8f6fca5b56606ab9c3b4f
Certificate serial:       019E3004A6244320E1E91660653C76FD564D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7tdVxRJ1qyNC2Pb8pbVmBqucO08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft
Manifest number:          190D
Signing time:             Sat 16 May 2026 09:01:11 +0000
Manifest this update:     Sat 16 May 2026 09:01:11 +0000
Manifest next update:     Sun 17 May 2026 09:01:11 +0000
Files and hashes:         1: 7tdVxRJ1qyNC2Pb8pbVmBqucO08.crl (hash: YYjCporwY55CJEA//9F8iorDurTOsUAi6H1cI+pIPiY=)
                          2: n8YaJSKDORU-V1f3ri3MPdU0v_Y.roa (hash: nnAzk/5RgBrrO3CmKUlZtLCI4l4l5DYZR2tkopYIdL8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7tdVxRJ1qyNC2Pb8pbVmBqucO08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:04:a6:24:43:20:e1:e9:16:60:65:3c:76:fd:56:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eed755c51275ab2342d8f6fca5b56606ab9c3b4f
        Validity
            Not Before: May 16 09:01:11 2026 GMT
            Not After : May 17 09:01:11 2026 GMT
        Subject: CN=7873c89ff9c57ae99b9b7b8dc3f53643b9366dab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4b:bb:65:ae:f7:33:25:b3:91:63:b2:94:ae:
                    37:ce:61:88:f0:88:be:ad:20:85:4e:b1:27:25:f2:
                    2c:1e:6f:16:4e:87:ec:0d:61:d2:39:b4:bd:91:73:
                    ea:35:79:9f:9d:c0:dd:de:77:f0:be:53:70:58:dc:
                    20:12:33:40:7a:59:5b:d7:8c:70:8e:6f:21:5a:a4:
                    41:ad:90:82:4b:98:28:47:b8:79:d2:18:d9:0b:4d:
                    ec:fc:f8:e2:06:49:d8:8e:43:3c:fb:b3:bf:e1:92:
                    80:88:ad:56:84:6f:fa:e8:ce:a8:b4:5c:55:bd:77:
                    c6:28:3d:a6:42:bb:af:e3:7a:5c:d8:39:b2:97:ec:
                    f8:0b:a8:5b:cd:2c:22:71:6a:7d:39:d8:6a:24:d6:
                    46:5f:ac:bb:62:26:7d:3c:8d:a0:df:05:60:93:71:
                    d7:df:c2:1c:b1:9f:7f:b7:33:e7:01:e8:e2:ee:6a:
                    d2:e8:8e:ee:b0:9a:6e:5d:7d:0a:1f:ba:ee:ef:5d:
                    bf:aa:c2:fe:3a:3b:88:b0:05:a4:ff:74:a3:12:86:
                    24:0d:d0:d4:30:6e:cf:04:9b:5e:09:73:66:e3:a9:
                    65:90:dd:fb:8a:52:94:74:22:4e:91:df:b0:3f:c2:
                    eb:fd:f9:fd:30:c0:35:97:a1:11:06:77:07:70:06:
                    96:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:73:C8:9F:F9:C5:7A:E9:9B:9B:7B:8D:C3:F5:36:43:B9:36:6D:AB
            X509v3 Authority Key Identifier:
                keyid:EE:D7:55:C5:12:75:AB:23:42:D8:F6:FC:A5:B5:66:06:AB:9C:3B:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tdVxRJ1qyNC2Pb8pbVmBqucO08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:03:9f:d4:4b:5d:83:d4:20:6d:44:a5:04:0e:d0:c1:b1:06:
         c3:bb:aa:1b:d1:80:82:6b:d3:7b:46:8b:1c:9e:d8:c4:96:1e:
         17:22:d1:7f:41:c0:c7:cf:57:e6:b1:24:89:54:1d:40:69:a4:
         a0:d7:99:7f:31:24:12:d4:55:47:0c:5c:32:af:5e:8e:ab:13:
         54:e5:48:a2:03:7d:bc:22:8a:ef:ab:ff:62:db:4e:82:ef:2b:
         88:e1:9e:b5:e3:8e:72:12:24:7e:31:07:75:70:10:82:fe:99:
         86:74:97:20:f1:5c:24:b6:f9:cb:5a:72:51:87:22:88:26:2b:
         95:a9:52:68:eb:77:31:28:d7:18:e9:bb:8f:79:19:ed:08:a5:
         a6:5f:e5:d0:c5:d4:0a:10:3b:32:98:f3:b5:5c:0c:4c:e2:bf:
         26:ab:3b:45:ea:9d:cc:42:61:7b:fd:d4:fb:d4:5e:fe:8a:f8:
         09:98:9f:63:79:ee:57:0d:47:17:4c:82:d7:b3:76:0c:bb:d8:
         ec:1c:88:ff:00:aa:31:d2:41:e4:25:c9:74:79:d7:88:06:4d:
         97:9a:5a:8b:86:68:71:6e:71:31:b9:04:d3:36:b5:5f:02:47:
         aa:90:78:fa:62:04:c1:dc:ed:cb:c5:cd:40:93:d9:0e:54:4b:
         42:13:1a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:54:44 2026 by rpki-client