Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft
File:                     59PkY_EcytBV0WYuAIwqlPQt6d4.mft (raw, json)
Hash identifier:          Q/4EblBr6gDYVf8UPIEPzRfjuwz/yJ7dL8necb31m5U=
Subject key identifier:   73:5A:A0:3A:5C:13:0B:B2:87:96:6F:10:E1:41:AF:D5:6C:F6:A0:29
Authority key identifier: E7:D3:E4:63:F1:1C:CA:D0:55:D1:66:2E:00:8C:2A:94:F4:2D:E9:DE
Certificate issuer:       /CN=e7d3e463f11ccad055d1662e008c2a94f42de9de
Certificate serial:       019E2F9756BBA2E501D49B071FE878184B9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft
Manifest number:          1754
Signing time:             Sat 16 May 2026 07:01:47 +0000
Manifest this update:     Sat 16 May 2026 07:01:47 +0000
Manifest next update:     Sun 17 May 2026 07:01:47 +0000
Files and hashes:         1: 59PkY_EcytBV0WYuAIwqlPQt6d4.crl (hash: LOsZNHSu3rSPgClQiyO+Hwdc3V7WNNjSCeixKn13gVY=)
                          2: KMWFIlQC6ib8yekqMVKEQLoSRCk.roa (hash: 29tTxMBE8uiY+In8DyCrSX4qq9Iv9YNEkKYRZQmc7CY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:97:56:bb:a2:e5:01:d4:9b:07:1f:e8:78:18:4b:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7d3e463f11ccad055d1662e008c2a94f42de9de
        Validity
            Not Before: May 16 07:01:47 2026 GMT
            Not After : May 17 07:01:47 2026 GMT
        Subject: CN=735aa03a5c130bb287966f10e141afd56cf6a029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9b:09:5c:7c:5a:bd:09:03:bd:b3:83:f2:aa:
                    c9:da:7f:b2:83:e9:11:d2:af:bd:eb:59:9a:78:15:
                    09:fc:cf:93:2d:24:9b:60:2f:b1:e7:29:fa:3c:0c:
                    0a:1f:b5:ba:13:44:ad:07:7c:2d:84:70:65:86:6b:
                    fd:cf:a1:18:c0:e9:bb:c8:8f:85:10:52:5d:2a:40:
                    44:fb:ae:f2:ba:10:52:5b:9a:b1:ae:1b:ec:68:b6:
                    46:96:cb:56:31:13:bb:f8:0d:7c:ed:ba:e5:bc:13:
                    94:72:73:8b:91:bb:72:49:6d:c0:60:8b:65:22:f7:
                    28:e8:e5:5d:73:69:68:85:cd:6a:f3:73:a0:71:73:
                    9b:99:f5:f7:9a:24:6b:41:62:05:78:b3:5a:94:30:
                    d7:8b:b0:7b:ee:e7:c2:85:b3:d6:37:4a:a2:5f:db:
                    4b:6f:8f:13:db:d9:a2:34:cf:cf:78:5f:1a:61:ac:
                    15:43:71:3d:f0:02:6d:0a:c0:c3:be:8d:18:20:46:
                    1f:5a:83:45:d0:19:1b:20:da:06:ae:64:ca:8c:63:
                    0a:4e:db:b7:ba:26:29:2b:5d:ec:e3:ff:79:9c:23:
                    0a:2a:66:fb:78:26:a0:f4:82:c1:7d:35:07:12:79:
                    b6:01:54:11:28:71:a4:31:e3:56:f3:ee:34:93:6e:
                    f4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:5A:A0:3A:5C:13:0B:B2:87:96:6F:10:E1:41:AF:D5:6C:F6:A0:29
            X509v3 Authority Key Identifier:
                keyid:E7:D3:E4:63:F1:1C:CA:D0:55:D1:66:2E:00:8C:2A:94:F4:2D:E9:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:d1:07:07:1a:13:e9:88:26:c4:ba:4c:07:ae:33:dc:8c:93:
         cd:dd:d9:0a:ba:45:cb:3e:1d:55:5d:d9:17:de:26:20:7f:61:
         58:6c:73:6b:e7:6c:4f:e3:19:d6:25:7e:db:79:91:d1:2c:ec:
         71:11:9f:0e:60:09:a6:cb:d3:c6:5b:af:dd:32:bd:9d:25:2d:
         60:a4:e5:b6:52:f9:01:c9:18:22:ca:f5:59:ca:5a:55:22:b1:
         9a:fc:94:4f:0e:d6:60:52:61:79:a4:49:0a:d8:e6:57:8b:74:
         57:09:53:f1:ae:3f:cd:88:5b:ae:88:47:b6:cc:e4:a7:20:cd:
         77:e0:5e:9b:79:f2:28:af:9f:f7:f6:4c:ce:cc:29:4d:f2:c3:
         f4:5b:26:16:46:6c:42:fa:27:1b:b1:06:75:aa:8d:e8:be:38:
         df:7a:32:7e:8e:a8:d8:25:f8:bd:11:89:dc:ac:5a:b6:59:1e:
         83:b0:b0:44:b1:5d:35:72:8a:cd:c7:1a:84:4d:92:c1:51:d3:
         7a:a7:20:c0:9e:f8:f9:ff:7e:90:ef:12:a3:96:78:3d:c6:14:
         ee:f7:f3:5e:a7:d8:07:cf:9f:3f:69:c4:aa:77:6a:8b:1a:e4:
         83:f7:23:6c:24:b3:02:cf:22:12:ff:79:88:eb:3e:26:1e:2a:
         78:69:e7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:37:41 2026 by rpki-client