Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft
File:                     7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft (raw, json)
Hash identifier:          bhS2rvxufxbgEvdrMg1ItG9PL9xiWs2CrtFc2zj5dbQ=
Subject key identifier:   1E:FD:4A:95:9C:52:B8:60:F1:AA:15:16:5A:B6:36:F7:07:E7:D3:12
Authority key identifier: EF:F9:87:18:9D:A4:E3:83:85:B0:72:18:54:FE:CC:C3:EF:46:6A:96
Certificate issuer:       /CN=eff987189da4e38385b0721854feccc3ef466a96
Certificate serial:       019E30E083281A7F285C947B2C27B503791C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7_mHGJ2k44OFsHIYVP7Mw-9GapY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft
Manifest number:          0FA8
Signing time:             Sat 16 May 2026 13:01:20 +0000
Manifest this update:     Sat 16 May 2026 13:01:20 +0000
Manifest next update:     Sun 17 May 2026 13:01:20 +0000
Files and hashes:         1: 7_mHGJ2k44OFsHIYVP7Mw-9GapY.crl (hash: zRFxg5j/XMo2jGKWQN6QkN+mpH/PS+8koiGbI60HXGU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7_mHGJ2k44OFsHIYVP7Mw-9GapY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:83:28:1a:7f:28:5c:94:7b:2c:27:b5:03:79:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eff987189da4e38385b0721854feccc3ef466a96
        Validity
            Not Before: May 16 13:01:20 2026 GMT
            Not After : May 17 13:01:20 2026 GMT
        Subject: CN=1efd4a959c52b860f1aa15165ab636f707e7d312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5a:9c:00:f0:da:7f:53:af:df:67:66:34:0c:
                    7f:21:81:e3:f7:ea:7e:87:07:9b:65:2d:92:bc:09:
                    fe:f5:46:35:dd:fd:e1:2a:a0:05:1a:4e:aa:53:24:
                    f2:6b:6e:51:ca:b9:70:23:fc:91:ce:a8:12:22:18:
                    c7:98:11:99:c6:1c:f0:e7:41:ec:1f:e5:17:dd:3d:
                    ad:a6:4c:5b:34:5a:17:c8:19:55:bd:46:df:44:e1:
                    f8:0b:ae:45:ac:21:04:8d:d9:db:42:ac:a5:e0:34:
                    a3:00:00:95:4b:c3:aa:b7:5b:7d:43:b4:db:7c:70:
                    34:3c:9a:eb:ca:c5:62:7d:93:97:f2:08:33:a5:4b:
                    76:7b:cb:79:90:e3:30:aa:2e:0d:f0:2f:39:61:d6:
                    83:35:52:2d:6d:76:11:e9:b0:4d:97:26:2f:37:c1:
                    17:72:ef:ea:bb:2c:ab:59:97:f2:33:52:e1:1e:d4:
                    40:7c:6b:ff:cf:fb:e3:df:b9:09:98:6a:a3:e4:e2:
                    fe:4e:d2:b7:92:d1:db:31:b4:75:a9:ab:8c:57:dd:
                    27:90:8c:87:9d:da:0f:12:99:71:66:21:5b:01:c5:
                    8f:08:f3:6b:1e:c6:2d:7f:68:a0:c7:0d:1f:77:49:
                    2d:25:b5:b2:28:ea:a1:49:69:40:7a:98:45:89:76:
                    02:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:FD:4A:95:9C:52:B8:60:F1:AA:15:16:5A:B6:36:F7:07:E7:D3:12
            X509v3 Authority Key Identifier:
                keyid:EF:F9:87:18:9D:A4:E3:83:85:B0:72:18:54:FE:CC:C3:EF:46:6A:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_mHGJ2k44OFsHIYVP7Mw-9GapY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:6b:1b:f9:ac:eb:de:b7:6a:dd:81:cb:92:4a:23:dd:75:8e:
         ad:64:57:c9:8f:42:07:6a:b7:c7:a2:28:b4:34:9a:b3:4a:4f:
         b3:31:c1:79:1a:51:0e:77:53:ce:89:84:ce:8a:7f:5e:32:77:
         92:18:e6:32:96:29:15:37:79:3d:b3:48:93:4e:e4:bb:1b:9b:
         5a:7b:5e:2f:8a:55:cb:ff:31:10:dd:92:f6:00:87:f0:6e:17:
         df:1c:23:84:90:05:39:04:33:49:86:74:e4:dc:7f:01:e3:5d:
         85:22:eb:a9:c9:72:53:19:73:08:d2:6d:60:49:e0:c8:e7:7f:
         0e:4d:94:63:6f:c8:1f:9a:48:b3:6a:bc:de:9b:28:dc:a4:01:
         65:61:34:db:53:8b:78:65:d4:9b:ee:a1:90:d6:34:cc:d8:d5:
         e8:e8:8c:e3:80:8c:5c:e0:ad:a0:12:ed:36:09:0c:58:8a:a0:
         df:57:f0:e8:71:02:30:37:88:33:66:04:91:92:91:5b:e0:19:
         33:fe:ac:19:9e:ab:75:db:ef:10:3c:63:47:5c:f1:e5:c9:98:
         d6:75:b1:96:d7:09:f7:75:a1:e6:c4:2d:06:c1:98:ee:e2:4c:
         3b:b0:e0:04:8e:3c:6e:e7:e7:e8:e3:7d:18:ec:99:72:b5:25:
         02:7d:6d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:41:04 2026 by rpki-client