Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
File:                     7cIhOMCvgcXL9DpPjd18jeE8cjA.mft (raw, json)
Hash identifier:          JZwLhQUTOwaFoF5pnoz5JLiz3jLnRqoRO7oU4HN1lWM=
Subject key identifier:   5D:E3:FF:EA:E6:6E:E2:FC:76:1F:62:C6:29:C0:5F:B1:13:0C:43:49
Authority key identifier: ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30
Certificate issuer:       /CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
Certificate serial:       019E307201154BC529BFD57A4223801B36B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
Manifest number:          1912
Signing time:             Sat 16 May 2026 11:00:38 +0000
Manifest this update:     Sat 16 May 2026 11:00:38 +0000
Manifest next update:     Sun 17 May 2026 11:00:38 +0000
Files and hashes:         1: 0HZFumgyvQaDDTRTrqWFDMHfuo8.roa (hash: 99s+y069IP+8cLI0Fct7Tuh7Nr9yOVSbyI/w/nS1ohM=)
                          2: 7cIhOMCvgcXL9DpPjd18jeE8cjA.crl (hash: eYLspdCcPZeAcX7E0hqiWn8Hnzf6+fEyRpgDFxzdJX4=)
                          3: JfyoN48fk_c9ic3qKJlpVrYlm4U.roa (hash: YO7Xai4MFWdK4ki2bUDwA4JpC3JpucBc+HE0rjiH0O8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:01:15:4b:c5:29:bf:d5:7a:42:23:80:1b:36:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
        Validity
            Not Before: May 16 11:00:38 2026 GMT
            Not After : May 17 11:00:38 2026 GMT
        Subject: CN=5de3ffeae66ee2fc761f62c629c05fb1130c4349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:32:1f:b7:1a:f1:d9:7e:98:20:db:6b:86:8e:
                    98:df:bc:a9:ab:7b:e4:af:71:37:e4:db:3d:79:5c:
                    59:24:6c:1e:4f:29:99:74:34:08:2a:9d:d9:30:e8:
                    f6:3d:f8:91:dc:38:1d:ff:fb:2d:f3:91:66:86:42:
                    41:90:fa:da:53:16:29:b7:f7:e0:b1:c2:ec:c5:f2:
                    ec:ff:70:8a:09:9c:e9:af:a4:92:d3:93:ed:32:8c:
                    95:12:54:22:22:ab:e4:67:90:42:b4:5e:d0:9c:f5:
                    6b:e8:6b:c8:9c:99:99:6a:39:43:7a:14:23:38:99:
                    fd:e8:88:ce:9a:ed:65:56:da:f1:e7:ee:eb:0e:a6:
                    2e:b0:53:bd:67:c8:f6:5a:82:dc:13:77:8b:02:8a:
                    71:ad:b8:5a:ef:4c:9b:9c:4a:8d:01:02:33:f6:50:
                    79:15:ac:7d:7d:db:c7:ae:7c:78:57:68:40:bd:29:
                    85:2e:9a:51:bf:64:b4:ca:31:65:eb:22:48:dc:70:
                    93:24:6c:7c:21:f3:5a:1e:d7:e8:fd:44:ff:14:66:
                    95:72:61:eb:ea:ab:91:f6:69:20:e4:e3:4a:a5:37:
                    5a:d6:0f:79:8e:70:9b:50:db:b7:68:1d:38:b8:69:
                    38:5a:ba:93:e5:ee:fc:14:8a:77:b6:40:c6:be:f3:
                    0a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E3:FF:EA:E6:6E:E2:FC:76:1F:62:C6:29:C0:5F:B1:13:0C:43:49
            X509v3 Authority Key Identifier:
                keyid:ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:48:c8:ad:09:0e:a9:0b:98:6b:3a:bd:86:31:9a:0b:ec:b2:
         16:8d:35:48:4f:40:fd:1f:1a:f8:53:3a:96:b1:e5:4b:a3:34:
         8f:d9:80:a6:74:a2:81:77:ce:fc:be:52:49:2a:4d:76:19:1b:
         3e:85:e2:4c:0f:9c:91:b2:16:ad:26:30:fb:f1:cd:c4:8f:4a:
         fb:c4:c8:d3:8d:86:92:1a:c8:4a:ce:76:cc:e6:cf:ca:a0:58:
         cb:bb:87:70:c6:d1:40:5b:7f:4f:cc:0b:c4:7e:f4:ab:26:dc:
         b4:d3:f1:27:44:44:80:f5:2d:91:14:49:fd:9d:e3:d9:f2:fa:
         53:a5:b4:65:94:f1:3a:e1:6f:dc:c0:ad:63:3f:09:b1:2e:08:
         90:6f:be:de:54:d3:f7:f1:27:d6:f0:cc:eb:bc:49:a4:f4:9e:
         af:7d:fa:e1:d2:76:bd:f7:f0:6e:22:9a:c6:cf:a8:e9:03:8c:
         fc:16:08:8b:40:1c:99:bf:ad:04:da:8b:20:fb:ee:cb:b5:8a:
         af:10:ce:ad:d9:23:ff:8d:dd:14:94:24:5c:72:b9:fd:06:ef:
         ae:37:ea:ff:cf:bd:08:50:be:3f:cb:ec:ee:5a:e0:d9:ec:47:
         b4:00:b4:23:f9:b9:fd:6f:76:54:3f:b9:2f:bf:7d:87:a9:40:
         a9:84:25:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:32:31 2026 by rpki-client